', 0x10, 0x100000000, 0x60}, 0x2c) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xffffffffffffffff}, &(0x7f0000000140)) 2018/04/10 00:29:25 executing program 6: r0 = socket$inet6(0xa, 0x800000806, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101001, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x6) getsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f00007d0000)={@loopback}, &(0x7f00000000c0)=0xfffffffffffffeac) 2018/04/10 00:29:25 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x400000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000f10700000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:25 executing program 3: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000002040)=""/4096, &(0x7f0000000000)=0xffffffffffffff22) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1aa8, 0xfffffffffffffffe, 0x4, 0x6, 0x0, 0x1, 0x44090, 0x5, 0x9, 0x80, 0x7, 0x11, 0x7f, 0x1000, 0x7f, 0x2, 0x1, 0x4, 0x6, 0x9, 0xdf, 0x8001, 0xfffffffff7e7c205, 0x0, 0x10, 0x3, 0x3f, 0x1, 0x5, 0x7581, 0x1f, 0x100, 0x7, 0x40, 0x9, 0x80, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x200, 0x101, 0xd5c8c4a, 0x7, 0x2, 0x52f, 0x4}, r2, 0x0, r0, 0x1) ustat(0x0, &(0x7f0000000080)) 2018/04/10 00:29:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000f6c000)) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001480)={'team0\x00'}) 2018/04/10 00:29:25 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:25 executing program 6: r0 = socket(0x10, 0x802, 0x6) sendmsg$nl_route(r0, &(0x7f0000932fc8)={&(0x7f0000927ff4)={0x10}, 0xc, &(0x7f000095e000)={&(0x7f000019df7c)=@ipv6_getaddr={0x40, 0x16, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xad, "fa9bcd161630b7fd2a905437ba98a8069f7b6a2747824e157490d0bea3b2ee0c72a49bc9d25dffee088eede537d40745210c50f38883ef4c6f85e9f8fa13c07a8b1699ff686214ab928cbd202d76da47c8892be70a4b6ec930ba0dd5397820cdfb48b86fac9b0dc68e3f9c1cec6a2d0d0f849f879354cd87f1d35715423e9f96f6cd2aa1be3e3f58464c8fafd0c92cd6e56a65d5283f1a64fb962797af5282f4311a2360e45a6358da31c47965"}, &(0x7f00000000c0)=0xb5) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000001c0)={0x50000001}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000200)={r3, 0x200, 0x0, 0x8001, 0x7}, &(0x7f0000000240)=0x18) 2018/04/10 00:29:25 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000002c0)="6e65742f74637000a174d36bf3413f13f1fa62812d72e39ce1aae3ed848159f6fca7fd7b8f7fe18e3e379ccc3ef0c77fa300abcfd426f814dbeb7441f939caa39f3baab9b8d1aab4c9457f2a93cc13041c18f73da3fd3698012b2f03804c09779e60594fb91e4a024dce766d7113a327b2627bb1c0284ddbcd3b8ab0220b7ad1d65db5dd5454160a048ebceaf32d233597387d2725a33484faa6dacaea4a80f94e1c3511ab7062721b157a17399f4961be9ed018c493c9d0d59c4347") preadv(r1, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x6c}], 0x1, 0xff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbfe, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x90e9}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendto(r1, &(0x7f0000000040)="d64ca681b4b0654ea00ca8e831dc431c0114b7a8ba15703d99ecb9a2b2fb963927ce2c367a89ac08b7e58366784bc581fbb508b90c173c50aab09a2cb81cc1e71618e70481a0b037a8f7df3aeef4099458a252e155f9c9f34900f84151c4e95ee78b0d1a4a1bce9eaa1cf8793c7851181b517f5f4744fe3c0bb6a1ac2a408c4c39466a3603847852f932c202e3f4ad4152fc5b2ad5909869a9234d2f43abcfc00b0f64fadad5725ad1d23f4c7c29a407fdda1b3b4047b47e5a8dc44793d5030405bbb87cdd1ad8e9bf5b0abe5d8254317eb8d9db8b5d421464245b3fd96d29e2448ec9e066", 0xe5, 0x0, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @host=0x2}, 0x80) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'nr0\x00', 0x2b}) 2018/04/10 00:29:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001380)={r4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000014000104000000000000000002000000", @ANYBLOB="14000d300581366772653000000000000000000008000400ffffffff08000200ac1414aafa99118de623a345971fb97f38310bb9355abecf7295c8ff3ad27f76316aeb41483154516005fb551b58b9d9e23505de5d35da1c44c0344e2520d2ff317ed014e7ab4f5afff770a8a5934a3cbc48a0d80f1da8259e68959ec68a53bf91e8200a8b4e7ece12a06b35070335bf7a6756dba38f"], 0x2}, 0x1}, 0x0) 2018/04/10 00:29:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000009effffff0000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:25 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b5dfa8)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x41) creat(&(0x7f0000000200)='./file0\x00', 0x2) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) futex(&(0x7f0000000040), 0x3, 0x0, &(0x7f00000000c0)={r5, r6+30000000}, &(0x7f0000000100), 0x0) fallocate(r4, 0x0, 0x0, 0x73e0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendfile(r3, r4, &(0x7f0000145000), 0x53) 2018/04/10 00:29:25 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:25 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x186a0}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000ffffff9e00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000740)={0x400fffd, {{0x2, 0x4e24}}}, 0xfe31be9541bf722e) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'ipddp0\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000000)) sendto$unix(r0, &(0x7f00000008c0)="d68ff9f3d2facc9614e8a6f3610d0ca94a68eeb7e6310b2a1681274cdf579ebde1aa5540388e024dc8ae4f406486febb4bbe32de5613cf5a604bf0b3e5b6553f6ee9ee181d8cd26c0a0de7db57310f9c1608541fdb96ea3b3f5e6718c9d997e1920789c012b9a3bd0315bc02b16c2631e7760632ddfc86b3883662ff4ca7599d317da56b2856fd7383800ab2a4bf12c90a47a55017710e1d04aef8ac0b413a67943e072e2e906ade663d658ed6ff984641931bd78781c8dd27af8258c11094654bbd8de9", 0xc4, 0x40, &(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b819259}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_timedreceive(r1, &(0x7f00000002c0)=""/15, 0xf, 0x5, &(0x7f0000000380)={0x77359400}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() r9 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000d00)={{0x1, 0x0, r5, r6, r8, 0x66, 0x2f}, 0x20, 0x654, 0xe2e, 0x81, 0x2, 0x8, 0x0, r9}) writev(r2, &(0x7f0000000800), 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000500)={0x2, 'ipddp0\x00'}, 0x18) ioctl$sock_ifreq(r3, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x10000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f00000001c0)={@multicast1}, &(0x7f00000004c0)=0xc) getsockopt$EBT_SO_GET_ENTRIES(r10, 0x0, 0x81, &(0x7f00000006c0)={'broute\x00', 0x0, 0x3, 0x9c, [], 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=""/156}, &(0x7f00000003c0)=0x78) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000000)=0x5, 0x4) r12 = msgget$private(0x0, 0x200000000000400) msgctl$IPC_SET(r12, 0x1, &(0x7f0000000300)={{0x1, r4, r7, r6, r5, 0x1c1, 0x9712}, 0xffffffffffffff00, 0xc8, 0x9, 0x5, 0x7, 0x6, r9, r9}) setsockopt$inet_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000240)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000280)='/dev/rtc\x00') 2018/04/10 00:29:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0xfffffffffffffeca) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000000400)="5e1860416963a72c1718673e35425ae9eca8779df268aa55a0e94ae9a1f4ed99af4f1abd648c26c85eab0d7b10d59c2804", 0x31) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/237, 0xed}], 0x1, &(0x7f0000000300)=""/149, 0x95}, 0x0) clock_adjtime(0x7, &(0x7f0000000440)={0xf7a3, 0x8, 0x2c3, 0x0, 0x3, 0x5, 0x0, 0x101, 0x1, 0x9, 0x26, 0x1f, 0x4d6c, 0x401, 0x100000000, 0x3a4edcc40000, 0x632, 0x0, 0x101, 0xffff, 0xfffffffffffffff9, 0x7, 0x96, 0x1, 0x6, 0xc4}) 2018/04/10 00:29:25 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) dup(r0) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000000080)={&(0x7f0000553ff8), 0x8}) 2018/04/10 00:29:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001380)={r4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000040010000000000004001000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000001ecb0000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c20000000000000000000000000000000000000000000000000000000000000000007f00000104000000ffffffff7f0000017f000001ff000000ffffffff00000000000000000000000000000000000000000000000000ffffff00ff000000000000000000000000000000000000000000000000000000000000000000000000ff0000ff00000000000000000000d44c0008000000003955000364756d6d7930000000000000000000006970365f76746930000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000010000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000000e0000001ffffffff0f00000001000000ffffffffac1414bbffffff00ffffffffaaaaaaaaaaaa0000000000000000000000000000000000000000ff0000ff000000000000000000005082300f39c2000000000000000000000000000000000000ff000000ffff00000000000000000000000700760004003f008100066c6f000000000000000000000000000073797a5f74756e00000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000a0000000000000000000000f000180100000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000009f2b1b45ab45792c7d8d8d6b5974da54"], 0x4d0) timer_create(0x0, &(0x7f0000b3d000)={0x0, 0x30, 0x0, @thr={&(0x7f000022f000), &(0x7f0000298000)}}, &(0x7f0000a7e000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000ef9fe0)) 2018/04/10 00:29:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000010000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:25 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:25 executing program 6: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00006da000)=0x2, 0x4) bind$inet(r1, &(0x7f0000bf4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f00009ef000), 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback=0x7f000001}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000640)={0x7, 0x70, 0xfffffffffffffffb, 0x8, 0x7, 0x80000000, 0x0, 0x7, 0x201, 0x9, 0xfffffffffffffc01, 0x8, 0x800, 0x6, 0xffffffffffffe154, 0x400, 0x4, 0x6, 0x10000, 0xffffffff, 0x4, 0x3a67, 0x20, 0x6, 0x8, 0x2, 0x1, 0x80000001, 0x5, 0x0, 0x800, 0x5, 0x4, 0x5, 0x8, 0x8, 0x800, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x92, 0x3}, 0x800, 0x343, 0x6, 0x2, 0x1, 0x7}, r2, 0x4, r0, 0x0) process_vm_writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f0000000140)=""/55, 0x37}], 0x6, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x200000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x5}, 0x0, 0x4000000000000000}, 0xe) 2018/04/10 00:29:25 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x500}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000888000)={&(0x7f0000ad3000)={0x10}, 0xc, &(0x7f0000a9f000)={&(0x7f0000193000)=@newspdinfo={0x1c, 0x24, 0xc01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [@ipv6_hthresh={0x8, 0x4, {0x0, 0xffffffffffffffff}}]}, 0x1c}, 0x1}, 0x0) 2018/04/10 00:29:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000fffffff000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:25 executing program 4: r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) mmap(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x8, 0x10052, r0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) nanosleep(&(0x7f0000000200)={r1}, &(0x7f0000000100)) nanosleep(&(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) shmdt(0x0) modify_ldt$read(0x0, &(0x7f00000002c0)=""/156, 0x9c) 2018/04/10 00:29:25 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001380)={r4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:25 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) 2018/04/10 00:29:25 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10d100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x11) 2018/04/10 00:29:27 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) fcntl$setstatus(r0, 0x4, 0x2000) epoll_wait(r1, &(0x7f000000affb)=[{}], 0xea, 0xfffffffffffffef7) shutdown(r0, 0x1) shutdown(r0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) 2018/04/10 00:29:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000007f100000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:27 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rtc\x00', 0x501802, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000580)) r1 = socket$inet(0x2, 0x200000000003, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f0000000000)) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f0000002000), 0x4) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0xa52, 0x800, 0x81, 0x2, 0x6, 0x8, 0xf5, 0x40, 0x236, 0x4, 0x1000, 0x38, 0x1, 0x1200000000, 0x0, 0x3}, [{0x4, 0xbe, 0x9, 0x8, 0x4, 0x0, 0x8, 0x4}, {0x6474e551, 0x7, 0x2, 0xe51, 0xf8b, 0x2, 0xffffffffffffff81, 0x7fff}], "cd88d1766e7f5ed63c022e2c1f3bdf2f532ac9053cbc7ac9ced369444104af9b048b930cf2c52bc0", [[], [], [], []]}, 0x4d8) 2018/04/10 00:29:27 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x401f}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001380)={r4}) r5 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xce6) 2018/04/10 00:29:27 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:27 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00001400000081000d000800480000280000000000009078e0000000e0000001440c0603000000000000000035204e2000089078"], 0x0) getpid() fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="6cd31c69703c00") fadvise64(r1, 0x0, 0x8, 0x4) 2018/04/10 00:29:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000100000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:27 executing program 6: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fe4)={0x6, 0x4, 0x4, 0x40}, 0x1c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000636ff0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x80000000002, 0x4) sysfs$1(0x1, &(0x7f0000000000)='bdev\x00') 2018/04/10 00:29:27 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0xfff, 0x2}, &(0x7f0000000180)=0x8) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x7}}, 0x41, 0xffffffffffffffff}, &(0x7f0000000280)=0x90) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/10 00:29:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="ad0f0155c3", 0x5, 0x0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ipddp0\x00'}}, 0x80) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x5, 0x9a1, 0x3}, 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000440)="66b8b7d2e5c50f23c80f21f866350c0070000f23f80f1f40000f323d00a0baf80c66b81c6a168e66efbafc0c66eddfaa070036260f0766b8000000000f23c00f21f86635010006000f23f8660fd088670066b97a0800000f32", 0x59}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xffffffffffff7fff, 0x1}, &(0x7f00000001c0)=0x8) ioctl$fiemap(r5, 0xc020660b, &(0x7f0000000380)={0xfffffffffffffffc, 0x20, 0x2, 0x5, 0x2, [{0x6, 0x10000, 0xe4, 0x0, 0x0, 0x3800}, {0x2, 0x2, 0x8, 0x0, 0x0, 0x1000}]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r6, @in6={{0xa, 0x4e21, 0xffffffffffffffff, @local={0xfe, 0x80, [], 0xaa}, 0x7ff}}, 0x3f, 0x0, 0xfb1, 0x0, 0x1}, 0x98) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/10 00:29:27 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x20000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000007f100000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:27 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5455, &(0x7f0000000000)=0x80000000003) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="691f42e35b900bdfb4b52cda9a83dbd0602ea9fc6186e61c06b0fd1ee2585b0f848c0cb86c1c83f88249f41636bd88fbd9cd31a3ddd2fc6c1199538f35124e3f4860e5214e8cce601443e5b1ffae82a0e981d735f22e3b842729580de5efa42ea4a8ee5f0a7e1bcf6e0a428a98686d4d7c71b67e19a4b70bab39b0d0c8ee3b496553081e53c389d830a7114b24d98e676be030dfe6fe9f58b6af2ab2f37ddec65d45a455b359785592ed0728388afc1e4036c5b212ac47779f152d3fc757dcc9de638023dd9266bab7297937e8ed21250a419cf0e87d7a1ef72ef74e55726bf9e1bcbceda4d0e1f531762224a5b8d115550f", 0xf2, 0xfffffffffffffff8) r2 = request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) keyctl$unlink(0x9, r1, r2) perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x70, 0x4, 0x8000, 0x12d, 0x7, 0x0, 0x8, 0x10005, 0x8, 0x3, 0x7443aa67, 0x8, 0x1, 0x7, 0x0, 0x4, 0x250, 0x1000000, 0x4, 0x0, 0x5, 0x7ff, 0x0, 0xffff, 0x8, 0x6, 0x0, 0x59, 0x1f, 0x10000, 0x1f, 0x9, 0x2, 0xfffffffffffffffc, 0x9c, 0x5, 0x7813, 0x0, 0xfffffffffffffff7, 0x1, @perf_config_ext={0x20, 0x3}, 0x0, 0x32, 0xc8, 0x7, 0x8, 0x5, 0x6}, r0, 0x0, r0, 0x2) 2018/04/10 00:29:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001380)={r4}) r5 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:27 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fd8)={0x2, 0x18, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x5, 0x0, 0xa0, 0x0, @in={0x2, 0x4e20, @multicast2=0xe0000002}}]}, 0x28}, 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) 2018/04/10 00:29:27 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x2}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:27 executing program 4: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x29, 0x36, &(0x7f0000000ff0), 0x346b090f6a6ec4f7) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10000, 0x480) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 2018/04/10 00:29:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001380)={r4}) r5 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:27 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2018/04/10 00:29:27 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x10800) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x10000, 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x5}, 0x1) accept4$alg(r1, 0x0, 0x0, 0x80000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000c26000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff}, 0xc) 2018/04/10 00:29:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000f0ffff0000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000007f10000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:27 executing program 3: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000b00)={0x0, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x10580) userfaultfd(0x80000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000012000)}], 0x1, 0x0) r1 = getpgrp(0x0) wait4(r1, 0x0, 0x1, &(0x7f0000781f70)) prctl$setendian(0x14, 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) dup2(r4, r3) accept4$ax25(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x10, 0x800) pread64(r2, &(0x7f0000000900)=""/195, 0xc3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000001040)=ANY=[@ANYBLOB="1a17612be07ed0e8b6ab0166e88f982858a58727b20e4f938a5c73fd0f054441b33be49417878bdeecb0b0e0"]) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f000079d000)=0x100000000000001) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000f80)={r0, r0, 0x1f}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000012c0)) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x16907e, 0x0) pwritev(r6, &(0x7f0000001400)=[{&(0x7f0000001440)="39c90c1158e1ab5b77c4f0229ed23cc22ff000db1614e319ff204ece57c167f012e2d15721c01471db853677fb7d712a423e12e784514bebcad00afb8bd093577a09e2767c39c91d04fa1e851984d465e5dd70c4c597210bb8a3b207613cc81106057f3dd7adb88cc2d4b5e6ff1051e548bcc006f1bd078caacb4f6d8848e605aef192a496e3d6782f6dfe7def701de53a41f332d9a77e5bbe161009760e013620148169afcd6bfc62dcac806afc80773e099d8ef0c2623ea3c3316b1fa09abcdcef4a030a755fb2cdb1ddd0a0b724408fe30180f931148b1eaaf28415fab39aaad2f332aa5143bc89279323a2b2a6697b8e1d202c99aabe8c2b7be24c1362c7992179132dbfd398510f513d4e7a497a0195c9f3271091dc8067d96874edb829e64261a83863dacfb746ffc7c02c518def2fa2a160d2fe8a07dffc91bbeaf3463ad48159437ff83134d74b6ea257ad6783ec69351f5987a8f2f973d8fc2ea16d4b18b2a17db18fde0033e7687fa102b1b02038605997c9c1f5307612ac0d4795f8a56b58c9d247f41a2d57c7e533bf86feb80a6b4f83d45c7d60ee8b528a740e0fba37c36d5ad282b16a8fedddf7f158d1c4a368d807bca431a80f9fef197f8120e8695e847b06b9558a924622822d2608ab62f878e4413265152ad900c3accd0e60a060ed2f7384d4232b88432a0cdd81e736564e8300968877c0398fb816ef8a0d5c20839329f8d6e05f290abc0ee3f199d8618b58d093cb5d5d0d4bf0d5e5843c817826bf33151111d2f282cd48721c752fc0c62268473fb060c760cada06192b470b3204e7f4c968f5749def7ab4ee95e552c800b3808159075fc9b8a9e63090fdc216cbb4fe6ce31c12aa39f1d15e4cf3c8b560ca8fff4e023e2ae6921493827759216e08a5472ba772901d388ad30b8cf0aa15bd12c52529e298798b3a90e02f86a519a0d9569be5080f26ef59eb7f7efc5b8e658b256372f129a508f75e50027a1691937e78e68f0eb041fec73de0ef5b1c8c08b085a4f71b8f0988dc179a4ff9dc4f5c709f6392194a1da8e60e02937a076b8b319be52da19645602df10250e624ba80637234f72a36102f55f9289b4ce2e5d2cdbb084b7ecaa478ead33b9ce3d7ea0a9d45a92dfdc56f3164c986bc7ba93a4b51c00496e8ec3668f34410a7da110adef16fd2d4027a06345595374c74a5dcc27320454b418700b614d667a913129b98058fd29755da1332ab7bfa8325d3a7a83566454b90ff6362d713bff42c2b903082d6ff16c36b7b7481443523d82c1ff8108443bc635c8364725e5464d06fa346f1e91093cb3945e00f26f9154fe02cc193d2ca74e137b1943a729e21fbadeb6d65be0cccf1922c56b81896b15b12df5288aeeef93b1cf8d7f76da939b82d638122dedc6cdc4f4e90869421069e7cb0abdad08eeee5a4be2bb8a146c500d4daed3c9c2ad20a98879e31f2956b29ede05eb10b82d4e743b591503d628720c8e99f27574e4e6e01f8cb8195353415c7191c6fb26f822ec1713d3fc469e6aaab1cbf2075eb8cd912f913e9da7b66f65d11a16769300b63bb91f6bf63f158cf07ced499537f6f55fe95e3a8adaec9346ce22f6363ece0e246aff8b6e7fc72a9e406bdb9463937ce5e48d57f4d4280bb4e94d76f3336c7778d45828dad8c4155dc1314c27979b75a53d738520844a72dd02323c84bf16f5d83e32b119f24bc2b1a952b2d77efdc1f1a2882f2866566d75c787a6db4c14bf6d82441ea3a8fefd2ca1b8499b456608a595582aa03f99ae3ceea75464707be0456da882066c4a8abb71d890276b697fe0c931817382042218f3a6513a00e1cfcb0a17ffc82f41081ba815ed7989b918429427dcf302dbda3acd19924cc4f69dd7789d4e31be52f1064238abcd34589cd4b6a584c4158e4ee16364e5a05a28d221f732605ec2a618ab0de74139b615a4174ebe6efe7fe3e3bb5d99c90a19ffe39fa777fb6e44a91a01f767f740d91eaa5527713c23da4781be430577ebedc212404c63b1a8ff51c91c62d8647410738417ec19b17c5f901e6329f873508c4bb3f5b0aec0ebab258b9c96829b29be2464970b68fa60b23498fd3c3ca9173c37fdb827dff96b27b9292678dfa506ccb84b6724ca685205e681cf2c22c08dc71babd0dbec8e1fe68ca098614db5f56dbd2f84a36eaaf1a7b1488d879b15cccea98ceafa0ce8ab6591cf00cfda024206c00ae28075a9792335022610c0a0dc592d7ad7c003aeb7869e5eb072df47801392cb82c070f69052183acc010fe5b4ac22b2d8b7722f9920658b8c90473eb85d8ad26aabda5199a57544f6b0f90809670499ef7053b24526f1f07245401f3dff00dff31c5f815ec185f58ba3be632e390bfab1790b6d82c234e2338a350cd6a4ab6341d18b01596f6eb7aa36794f0774d6bf3d27480fe081dc809b50738dbb47719bad43fb299bc83e6c49bf8cc8c9f7bc58cf9696c77a37dcd2e95907d11caaa92de2358fc4dd83336e1273ffc2e86344311fcf4da531261b444300785a58294cc0e954510d026a5969a2daadc2650c63856dc754889d3d6a72e1d04a6294ba809b2f6329355f01c307868876a55e56b63d8d369f1952782061a3ee5a6bf64261c3003ffab3ee4124cb3d57d733b80bf3d8293b427762eadcd3bc94a127411e1c137c1a48f5a19d528e8f22e1713f9a1d45dc82ab9270eaad80ed0cae6291c27f573e175d56b510f12cbd8be79cd4248cd848906a814fa1c28c47c44f7ba776c5d0a156fddf7301011645986fe5570f76dd5a8441d9c40f7809c59187b3052d28fdfdeb96368fd47587ee35197da7ab3b1133254f696e44e24053b1b6cda1d8a2117040c2ba91b1b99b15eed0f3beeeccf96a55f738b42f5c4fc0ead873e35bf76c1d3970c9f4d1448e6e3b73c8d693ed328188154cb827e5f5f03575c77099710a80c6b1c53ad1c657bf1e89519eccb848b30f6c946d082af980563d7d7206a22d62479ef11f38f9ef9dd6aee83301fe42aeecbe0aaa7af1cd3c8b1ddca1752b887b97d6442f24236a6b57ba6de5ea9b071d78f2e45b436c535e592533780fa50fd6522c14b5b5ecd391bdbd7acbcf3d571731c604ed437fa1af9cd367a066e01f98c996fad367ec8e9d47b9f427ca299e982386970fe89c9da68cc72832d1d1e18934d5db7f49446ecacea9812a09b7186e51addb5d71c4e7cd2e44576ca87b3e2d92b69e3ae44a6df41214d4f6add3538a8bbe457cd6a3fd255afba7986a521ecae557409812e706764a29efe8ba1b34935549614bc151dfeed1c93f10483f9a867ca1b104f6942fa57cfe4fcf3ce24091279e3c0d17a4bfa0b6efa60c47ea9a7e42c43a2790663d6d702915e0c637b1fcaffcc0273a7d4cf00620f7117fd2d7a70ff9b06503d494a7da5d82d904fa995fd01073718997054aa5ba4f187685ca6a36be41f62e5af2dbc4fe739a3e4d2236756b8e9cd61790b1fc19a3cd3d924d8711e5b456121ebd0976d08b63a44f095aeb40f9d5b04ba9233e6efb0243dd95a8d119283452771bb0980e06c25027be6424c746b61cca317b69313b439950e52fcba852fc5eae8273a4bb288bf970b3ce9823f63ffd708232339dbc4bcc8e84ba885b21568decf985953042a70f37bc931ccf2b50102cac97fe0d2f0d11b80920299bc935c1494005085f60da5b5972bfc5e61ff5e736f7d15c4a9018614e628153d23fedc6b2ba9e71baae94c94154e0757b785973e0372845f40c61d82254fb6d79e1916bb8eb7873def79afeb2545fbc4cb1e84af9d4ca1da1de1c5a0f8b5001a54b4547d14623d407590bc0bf48c9d6cb1b5a2117db491942708a3c6baf79c5668ac786c5a57760e44cb5bb80412a352c803f47df5b38274381f09f2ccaa1212f601df91aa6f0dd9c54e5ad4aeb1eabc5746b90b5c574e5db8606675ffe0090497d0ca2e06bef28e40cfa70e07826f5c095a66c004e2f471c5b9f6c09197d6582f75e1c8c1dd9ec37c586756b26a8311f5b19e31b93865cbd632478f0c0e168f83e64947ee77b318f2738c42a266ace04f94afaa9166e595fcc09458987056664110430553b19f621414debc4d8ee3fa95f0681b3d8158a294308e6d81c4a47b6038b308a56814225dcc67d0cb5ba34deb5b2f33ba7bd41a2ff4fca9948c1016d51a87c7a9f41c85d711b0e9a90a2fe3da262e9f7820d137a03a0f66b3d8b8e00e2bbc06e755b722f2336c1fe585f66958db544d3b5bb9867f5cc8893274123f5818413ec873595aa2c86fb387caab1a4a0e9b50e555cab2cb4cb6b67b521dcfdcb92b683918a636965b4538986637c1ed6531443a26808dca14a9cbe778a0cba16a7b51919b4ffd28fffee755404be5f58a7a9b5af4c48d73a19641b1407c16943ad810edc3b84537fb35c3754e5a8bfbe4b3ec5fa40ac7cd2b089a959e21310f147e97d2ccb2981ebb58a09581f296c941e74c2976ea7b27d0ddc608f513960ffdcf38b496d45dcc05240a37b2909630623b7ed12548e7132fe8e863cef460e04870c3340a00ca27d4aa93d491eb7115348ef745bfb8c6875d259612bf4752e2b6915a48603b7c21edce24b4ba2f7066a669c0786cb4f8e910b5916f9c5c95836e97e205c299a9ff2f48edce2d39dd5dddc7de8b6a4d773c6769676888e400cf9e8cafb2239540428857ab4318bfce847ecaa91dcaacce3e3a21ff3035bd9f6e66d28c9bb134c55826ccadde8bca69ce96e871051310871d32f2cb91685242e7d51c240a68ce89dcce7645f39bfcd35d4d4535673b2071a69d7135a47f52f25bc613baab52334a97753a101c04fb2a8c75d58379c63d7751157ce9386bda220cab0aa829c73967d38f268f318b060948ad2e89701961ab90149430184e41147d7aaa29f5853e3b5b9f718a4e0fae43f48ff2012a19a0fc8abb2c42032bf72d81593ae1a8e422ccda661a7224f6b9dd434bd2cedba103d0acb05a50e9593690", 0xdce}], 0x1, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001180)=@generic={0x0, 0x3, 0xe4}) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x200000000022) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) userfaultfd(0x0) ioctl$sock_netrom_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) 2018/04/10 00:29:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32165c66}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x630b}], 0x1c4, 0x0, &(0x7f0000011f9d)}) 2018/04/10 00:29:27 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000062bff1)='sessionid\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000240)="d63528b9badc2ef50812d05308c18484688474f460832d6f97764a4854d156d9be1255576fb19985d28bbb21053f0c9966e69b850608eb359757eba11daa0d092b1699b975401fdea72a99e0a2fd0877f980ee7ea463f0023d81cc2a130470d0f936f509447b259f3af5258ce29c979c9e06199ed432c1ceff8d487467397d35ea010f476974fcd74da6d1c41748ca376021f2fe0e4ebba941316bafcd08ccb7f432928124a0a4e7ed00313501a1e8107711272084b84702e484cfabdb353e6481c11fb9cae1413b15c190d3b01f64d54941d3b723b7a3b487c93f989d927b64085f21dd1e3eaf2b50") sendfile(r2, r1, &(0x7f0000000040), 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[@ANYBLOB="370000000000000096188d0b9a4d9379499385fb7c799f2feb4d74504866122806a7ca69113564b4d2869cf14921c0b9035574dd81ddab"], 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x5c) setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f0000000ffc), 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000100)={0x1f, {{0xa, 0x4e21, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x9}}, {{0xa, 0x4e21, 0xe4, @dev={0xfe, 0x80, [], 0x17}, 0x6}}}, 0x108) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000340)=0x80000000, 0x4) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/163, &(0x7f0000000380)=0xa3) ioctl$TCSBRK(r0, 0x5409, 0x5) 2018/04/10 00:29:28 executing program 5: syz_emit_ethernet(0xe, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@generic={0x88f5}}}, &(0x7f00000000c0)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) init_module(&(0x7f0000000880)='/dev/vcsa#\x00', 0xb, &(0x7f00000008c0)='^\'-wlan0\x00') ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000840)=0x7fffffff) process_vm_writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000340)=""/158, 0x9e}], 0x5, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/61, 0x3d}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/26, 0x1a}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)=""/62, 0x3e}], 0x6, 0x0) 2018/04/10 00:29:28 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x2000000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000020000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001340)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:28 executing program 6: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [{[{0x9100, 0x1f1, 0x13, 0x2}], {0x8100, 0x0, 0x8, 0x3}}], {@generic={0x4305, "de0fb3833dd1e9018d1c1b2b1c17a35e72b4f78305c8d86e"}}}, &(0x7f0000000000)={0x0, 0x0, [0x0, 0x20000]}) 2018/04/10 00:29:28 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000000001000000001f6e7cf9725c450a8e00000000000000000000000000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x1f) 2018/04/10 00:29:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(xeta)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000052000)="21130000000000000000000000000000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f00000003c0)="44180c5030827edcf6bf39b97527f6f21443881bb2a1f64db2727897a0d1f3a55d000100007667b83ce7046eb086be4413b96bb4d6bc226737336a656cba4e5fa6a03d222835d12356b961885d6a5d93d15d9c5165522024", 0x58) readv(r0, &(0x7f00006e8ff0)=[{&(0x7f000070bf52)=""/174, 0xae}], 0x1) [ 497.357830] binder: 32588:32601 ERROR: BC_REGISTER_LOOPER called without request [ 497.365545] binder: 32588:32601 unknown command 0 [ 497.387310] binder: 32588:32601 ioctl c0306201 20000040 returned -22 [ 497.429581] binder: 32588:32613 ERROR: BC_REGISTER_LOOPER called without request [ 497.437209] binder: 32588:32613 unknown command 0 [ 497.470000] binder: 32588:32613 ioctl c0306201 20000040 returned -22 2018/04/10 00:29:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000f0ffffffffffff00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:28 executing program 6: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = shmat(r0, &(0x7f0000a1d000/0x200000)=nil, 0x4000) mmap(&(0x7f0000c14000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x812f, 0x4440) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0xfffffffffffffff7}, 0x8) shmdt(r1) 2018/04/10 00:29:28 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xd00700}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:28 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f00008e5ff4)={0x10}, 0xc, &(0x7f0000f4a000)={&(0x7f000019bf9b)={0x14, 0x28, 0x311}, 0x14}, 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_generic(r1, &(0x7f0000028fc8)={&(0x7f0000007ff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000023000)={0x1c, 0x20, 0xaff, 0x0, 0x0, {0x1000a}, [@generic="fffffe0121"]}, 0x1c}, 0x1}, 0x0) 2018/04/10 00:29:28 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) shutdown(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00002cb000)=0xd9e0, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}]}) sendto(r1, &(0x7f0000b9efd6), 0x53, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000ba1000)=[{&(0x7f0000ba1f26)=""/2, 0x2}], 0x1) 2018/04/10 00:29:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000001340)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:28 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:28 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)) ioctl$TIOCSBRK(r0, 0x40044590) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000080)=""/89) 2018/04/10 00:29:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000200000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:28 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = semget$private(0x0, 0x0, 0x5d0) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f0000000000)=""/34) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000651000), 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000080)={0x7, 0x8}) 2018/04/10 00:29:28 executing program 6: r0 = add_key(&(0x7f0000016ff8)='keyring\x00', &(0x7f000000b000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x6) keyctl$setperm(0x5, r0, 0x80004) keyctl$join(0x1, &(0x7f0000019ffb)={0x73, 0x79, 0x7a, 0x0}) keyctl$session_to_parent(0x12) 2018/04/10 00:29:28 executing program 5: mkdir(&(0x7f0000f73ff6)='./control\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x400, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, 0x41, 0x10c, 0x70bd27, 0x25dfdbfc, {0x10}, [@typed={0x8, 0x62, @u32=0x6}, @typed={0x8, 0x22, @u32=0x7}, @typed={0x10, 0x14, @str='/dev/vcs#\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000f1eff6)='./control\x00', 0x220000000009) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3ff, 0x800) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'gretap0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}) inotify_add_watch(r2, &(0x7f000001eff6)='./control\x00', 0x2000200) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) rmdir(&(0x7f000075aff6)='./control\x00') r4 = getpgrp(0x0) ptrace$setregset(0x4205, r4, 0x203, &(0x7f00000001c0)={&(0x7f00000000c0)="7d26ab404958693b7717a79c3f1dff54589b6425e7f21d520d1c0b7c317fa132f39cd13bbb9bb183ea7619d249a2e261d9f07afb6fe5deebd34a262da2598a8e087646a3023d8705c19c241a4812f2a0205d2e5785ee1ae4f430b01f08a6abefbd8d1d074dc4aa85dd2bbd144384dd5789fd5901d1bc1004be3f3d16750ec70e5dfd4a3d149a35995e11f4cd065b9a704f44dc687c25020655df174468190313526c9fa8b4f5e456905688ae25a24b568ae284df49a1cf13e9ac22282f6c56b3340aa5b0ef5702cf9202805ec9911ef269698dda34699b7c789748afa999221d31b70a3bfac8afeeaa562cf09138c6e7281b", 0xf2}) 2018/04/10 00:29:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000fffffffffffff00000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:28 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:28 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xa000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:28 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f0000573000)=[{{&(0x7f0000bab000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0xff9}], 0x1, &(0x7f0000000140)}}], 0x1, 0x0) getpeername$ax25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2018/04/10 00:29:28 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet(0x2, 0x5, 0x6) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000000)={@rand_addr, @dev}, &(0x7f0000000040)=0x8) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(tnepres-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000704000)={0x0, 0x0, &(0x7f0000724ff0)=[{&(0x7f0000fa7f12)="b1", 0x1}], 0x1, &(0x7f00000003c0)}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0xd339, 0xfffffffffffff000}, 0x90) 2018/04/10 00:29:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f757000361a6f74a1b774b8642f3dfdd313d92946ff0167415d8dc22791dcd496520c1c99f4b07d3b2a11090000000229210b73abdcd2986fc290ac9b6ace278586d39949a54fb276eb1fd3964b0cad27e417b33abb8d3b00e64e75e4dff47de27536dccdde5fc746b04faafcec347560a31b3a35a5f20bc949d75cbb763987", 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040), 0x1) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) fchown(r1, r2, r3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x40, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x8000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000480)={r6, 0x40, 0x1f, "669a77bbfebc030dac216c00ce24991a3d9b6ceb9c1c126552137e848d122f8bef30dc844231cd504390d0769db8d671787b116a1fe21e223857ce70354764cea42823d77745e57389140b87fb6f884630af09c637d7d29e77e5ee51e6250927945fb1d768566641e8fd051de3bc42eb58b5de3ed34d7d27dd61b2bb80e6e6041eaf98810d1da92b94b0b8e6edc92f1fe8f4615721591aab5243eb96ccee7e0382bfcd6761d7add5c7d0a93e520adf9a71ae619ef0766928df1441c2f5003459eb4952b9dfbb9dd4098381857669bc83cf000cceaf107aa093cc8c1d7ef857967761"}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000240)={0xffff}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) mq_timedreceive(r5, &(0x7f0000000700)=""/121, 0x79, 0xff, &(0x7f00000007c0)={r7, r8+10000000}) r9 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) getsockname$inet(r9, &(0x7f00000000c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000100)=0x10) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xffffffffffffff90) r10 = dup2(r0, r1) getsockopt$netrom_NETROM_T4(r10, 0x103, 0x6, &(0x7f0000000380), &(0x7f00000003c0)=0x4) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) ppoll(&(0x7f0000000600)=[{r6, 0x4100}, {r1, 0x2200}, {r1, 0x8000}], 0x3, &(0x7f0000000680)={r11, r12+10000000}, &(0x7f00000006c0)={0x2}, 0x8) 2018/04/10 00:29:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000fffffff00000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:29 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) io_setup(0x2, &(0x7f0000000080)=0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x6, r0}) ioctl$TIOCSBRK(r2, 0x5427) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="02020000000000000000012924af7b7f", 0x10, 0x0, 0x0, 0x80000000000000}]) 2018/04/10 00:29:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:29 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x7d0000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:29 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eb8000)='/dev/sequencer2\x00', 0x0, 0x0) accept$nfc_llcp(r0, 0x0, &(0x7f0000000000)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1ff) ioctl$KDGKBLED(r0, 0xc0046d00, &(0x7f0000000040)) 2018/04/10 00:29:29 executing program 5: unshare(0x400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x40, 0x8400) ioctl$KVM_NMI(r0, 0xae9a) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x3, 0xdc) sendmmsg(r1, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}], 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000100)=""/195, &(0x7f0000000200)=0xc3) 2018/04/10 00:29:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000800)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x190}, 0x1}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x80, 0x80000) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x9, 0x2000) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) 2018/04/10 00:29:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:29 executing program 3: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x0, 0x80000000, 0x7) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x20400) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x9, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0xa, 0x4) r2 = socket$netlink(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x99, "d56e2921689b480abc42f838c8d8568c9a928b8b6ac92ed9cb1d8d69b12dd56178880b55c4ed4297efb90d0bc3acbcb520fd4e7d6c70cc04f8960ef1bc0a3467df2da3d51877e9253523a1cac654003f54409a2bd4559205ab38e510e3bf856f62b465f6fcbd2e0765c302b8ee46364c5734a2c01601cbb4956a87cffa92548dcbc04e1e2a0237642ed95692bd00413e0c7300338c25173a63"}, &(0x7f0000000200)=0xbd) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000240)={'eql\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000280)={0x0, r1}) openat$cgroup_type(r1, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000300), &(0x7f0000000340)=0x4) epoll_pwait(r1, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x5, 0x3, &(0x7f00000003c0)={0x80000001}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f00000009c0)={0x11, 0x0, r4, 0x1, 0x8000, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x200020000000000, 0x2b, 0xfffffffffffff800, 0x400, 0x4}, &(0x7f0000000ac0)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000b00)={r5, 0x3, 0x3f, 0x0, 0xffffffffffff65ad, 0x80}, 0x14) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000b40)=0x1, &(0x7f0000000b80)=0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000bc0)={0x0}, &(0x7f0000000c00)=0xc) get_robust_list(r6, &(0x7f0000000d80)=&(0x7f0000000d40)={&(0x7f0000000c80)={&(0x7f0000000c40)}, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)}}, &(0x7f0000000dc0)=0x18) r7 = add_key$keyring(&(0x7f0000000ec0)='keyring\x00', &(0x7f0000000f00)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000e00)='blacklist\x00', &(0x7f0000000e40)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000e80)='cgroup.type\x00', r7) add_key$user(&(0x7f0000000f40)='user\x00', &(0x7f0000000f80)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000fc0)="ea94985b9461bdbe93ce5d8b9444f871ae7face73d099736ef4c6ba4ff63fc8f18202a8dc4f08b182c47f5ec5b16c334a6ce11d8791b86d9cfcf0f7122992b6e8a0815aa8812b92c27c28d758b45f5aa497b99097a4af06613fecfd8d3cee8e83e4278510d24b3c46bd8a2352073a795e0a34b2c2fb8022ac5bd41099ed263d81be69a14b2d158e7de8ba71851a40534b166dfe6504453d561659797a90ab2dcd01ca32bc4ee3c3a322cdce187cee1168ed907569dae63edce7426645a0ab31f5c40c6d68401263b823c0d06376d6f69791c01e80dc4616ce74ff5da6208363f64c31dd17041f9b28d", 0xe9, r7) epoll_pwait(r1, &(0x7f00000010c0)=[{}, {}], 0x2, 0x8, &(0x7f0000001100)={0x7}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001140)={r5, 0x800}, 0x8) socket$netlink(0x10, 0x3, 0xe) name_to_handle_at(r1, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0xd8, 0x81, "9ad9903ca7c57bf1cd29bb7d5ad9a6ef931eb539b8be4d22dce1536d8a8283a77ce1957b3db96035166e896bd05ca081fdb009c73c9fa0235886ab8df078a2acfccedfac4b952cd631ec6035b9c9379cbe98a3ffec5b4766514e0258780c86fc33fe622c9f5d8069d0c3e082373da2bcc7fb51245e1ba12fb33d8c738c8f9e6cd828ffe502c975c7d097a8255895794394c949adcde2bbd118f7ed38616b96db1204f16b077cb549bd318d9fb55aeca885d18f19d5a8ebf829bb49772124b07050b635286103ca1f621d76076cc0a75a"}, &(0x7f00000012c0), 0x1000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001300)={r5, 0xffffffffffffffff}, 0x8) syz_open_procfs(r6, &(0x7f0000001340)='io\x00') 2018/04/10 00:29:29 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000040)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer\x00', 0x2, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001180)=0x0) getpriority(0xf4198674d3c136f3, r3) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/4096, 0x1000) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x0) 2018/04/10 00:29:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:29 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x1600000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) readv(0xffffffffffffffff, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:29 executing program 6: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80, 0x80800) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x50, r1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$fiemap(r1, 0xc0c0583b, &(0x7f0000000080)) 2018/04/10 00:29:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:29 executing program 4: r0 = timerfd_create(0x7, 0x80000) lseek(r0, 0x0, 0x3) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80040005, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@can={0x0, 0x0}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/117, 0x75}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/148, 0x94}], 0xa, &(0x7f0000001840)=""/201, 0xc9, 0x6}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001940)=""/99, 0x63}, {&(0x7f00000019c0)=""/177, 0xb1}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/132, 0x84}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)=""/97, 0x61}, {&(0x7f0000002c00)=""/17, 0x11}], 0x7, &(0x7f0000002cc0)=""/109, 0x6d, 0x4}, 0x1f}], 0x2, 0x102, &(0x7f0000002dc0)={0x77359400}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000002e00)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) fallocate(r1, 0x8, 0x4000, 0x1000) get_mempolicy(&(0x7f0000000100), &(0x7f0000000080), 0x1, &(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffffffe) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) 2018/04/10 00:29:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) write(r0, &(0x7f0000000480)="4f7ad0c9e9ffe94802a848144523c0c253772400d4bba29028eac32e8d1e221207d3fa6c00644fe58f5930fd4c8ebb78dcf50bbc54c90c0ea17b4763dde5f9eedfc810b38375640258335444c9fe3d13", 0x50) r1 = syz_open_pts(r0, 0x41) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x102) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='/dev/ptmx\x00') writev(r1, &(0x7f000036ef90)=[{&(0x7f0000dcb000)="10", 0x1}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000a30fdc)) 2018/04/10 00:29:29 executing program 5: r0 = socket$inet6(0xa, 0x200000002, 0x20000) r1 = memfd_create(&(0x7f0000209ff0)='userloppp1ptoc\'\x00', 0x3) mmap(&(0x7f00005b5000/0x4000)=nil, 0x4000, 0x0, 0x14011, r1, 0x0) fcntl$addseals(r1, 0x409, 0xa) bind$inet6(r0, &(0x7f00005d6fe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x400000000000003f, &(0x7f0000000180), 0xffffffffffffff39) clock_nanosleep(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000200)) 2018/04/10 00:29:29 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000feb000), 0x4) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000040)="0707f5a2190cf09e1164c1e107f8836ccf520d40bf32d25a09f03a8382f421b3f06cf236db4424a4663fba62a64aaad85f4de5a17254be6c50385751c948e8cdcdd8f24950f16d6288", 0x49}, {&(0x7f00000000c0)="08abf8a95ea28a75c22ac002629b458a238c7bce858e57cff1b22d9d5641bcb41c49cfcb8f150b04aacb59e576ac8e75d28e522b4940912b3a49725325a7c97ade1edb38bdf478f48a6068b4921d83982d34b0a1003e03ebb9aea7afaf394fca7ff766a0499896239eb486658531ca0fb23f6b8299cb7178db3bebf6ea", 0x7d}, {&(0x7f0000000140)="a39de84b6a355b70701edf161af1f30bc0e3911debab522c35d437672434897300bf913588bb42118f148b30ded2e614c7ba2ebcbbd57abc9dc04e4e7cb7d34487fbc1859704050984a70c4342c3dc567c82a60f4d2b5956209e2f6c2e1d52c11df659580557f1916ae815687119c1d09dd80208a770123d05aa3da6cfa12f9e615c4f9a5e59bd3c14362241054e80a05349b62f1c3bf1517588e4d2978cd9158e47366f3bd673de7fd03c6e9948c1f80af02e85056f5e60ec3bb4938e47ac1877c553b3c19d83bb05a06496261afbeda3625e7abd8e9537a6e45276d974551d20dc2b35f4e013b56bafc0fc5ed4d0edf850ceff5e472f7c6f6ac221a1a527c43c17dbe2739a2e87e66c151772e459575f5d2522074acfdbd2a69665108809f5ea29b76a99baf4cf6050d665575d727a3f4aeba8016aa3b3ab9857af8c2d85d070779d951489364e52aa93ac14900a51746998e5c0c93aaa0b42a847a6f97f77facb11194b10b3740d985fdedadc38b7b8cd8729befbc76bf50b927152efaf899c2448c4e2eadb341a1ef1755666c665744cf702e36660b2de2d4213e016b342825b413a9beb8eff9234bab72da07d1398113b57232c4366155b15601200877c5bb03ad85d64bd44015e8f72ffdf7f0369400d3b808e7576055691d2f9af9479f64f5b08d960190afad1a555d875bae040ac57f9ba8238e2a71ddd5e529f90850a4120998e735233263bc4a7984d339d96ca69062cb32c5ac130de693d1aaed3357e395ddffbc3c365320e4af72d0ba2221ed9586bd7bee0880ff8861491ac3df936b18cf29901c7525f1ebd34bef79583afe21f2fe0faae2a8d958997a6f8adee5cb4021a1c3aaac9ea58c3399a053f5b8ce9fcc49e3de84845008413644f387749030fe4000c567f803b704439037643cbe003995da778f4696c6d2c29aa4d6036d18e06e870e55aeb7185d6bc6d30c4296a8e65f542af9dc2a0e9d57f629b0af16941ae14bdad4e2bc3867ad4d025555db9e14970a2c2ee3f055e142e7ee060b9db6c943ecb8aac289797207a50e8c2ac7f7744cab18e93dfa33ce2b18a4927761c92d02e61b8b3e38c76a714989b7538c72509edd43f6edbce52ee4466ab62ea7e2aa4b06f31fa25c705833807523694f8f7ec753369a8b8a8e7bf4d4b2b7e4e53cd397e8d298f490b565ae57ea58dc8360fd4211670311481c0625c8234ac5e9256ba5e68e01a3fa5086ef0fe580b147ebb4deaf70c505f50684b4390ef6912f782b7b96d9d391faa58e286de8f8362f2047a87b4b8efd72fc89ec90973eee061f58cd0abfa23881680fe367a1fb6f91b925840937b270333187f563468fbd642b69f18694f48fda17bc50d371a68921b283c7680b3b8e19c15752a5e6d499d229ccc24a5bce0e0b45bc5da94f32c57bbbfd3f5f1aab8ef3b77aed4bcd24303e71a63d3c943c34e96d0dd5fc5235a63cd40be13947713c9449f762f90f34bb0112589c731d69efe4ece326d47cfec6f25feb91a2774878cf7c0b417b1fea1929dd25705802d3b4d0d815d7a2d8bd8d5480e50726134476ca85ef6eb6a88e6ae61c48326553dacf5bc190d96f919ff1664bf09e6b82a11f9a8e2221dc433d745725eb710ae5d3f5eaa479657e5b20d426b625a7599f6ad32a6bfea8ec3d8c634efe59e7b4e07180e946486965f8c23d00090d6867fd588b912ad27f7e4697b6bfc36ae92eb5c6680c66db284968ff4e5d30754dc01b2954981b4df1545ae646ca2ff2949cd0033f451e04e79a1a1382aa0bbf9749d99264c4ee0846f27f529fde5c1a743da4b95297512341b0480fcae914c10a582670663376c503ffad015c4a47b557cc1e3a2d74fbf734754e65105925a952b892015a35c62fcb04ea789c7dcb93c84a4d39c1f23183a04ff73ab200ae29c0994130ddf8aef32e8c35501f567183cb22a1517d3e34f728f87e0c1aed36ab25765c4187b48aa5e73415b037d41096f7818b250d8ff2b1b2a6ffbc8cf3c5ed3ea7a5715e8466a95e18263016110a5e1e79e2940b88901a4683351a0fc43c306b4ec801b99cef6c009ca0ceab627baee3e679a152dc1809e2550ef7dfa264a20a69e3bbcb6e911b04273ffa1ec688ac0c27a3ad140a1633bbea4c91057701c87dd02bcd763bcf0aa58ed8f829a202d8ca56fc0213ccd4c17fe8edeee448f3e023bbf024ec942f469688300573f65316479f5cb65a7defd79875a636230ece1f2d53079c43eedc5e9d1b49d8373a15f7f3ae86a00c9fe213d90a47aff4486afaf2e2e5cc3d897d1edf7d74377923b6db5664d5761a4af674ff80c1db8cf35262cd12a3ede5b72597e0382d291d2d35d31e32d04c267497b18a5432dcb287cfb2397eca03e4899b343cc28108d65a194645318b5a42369a4e4c36d5b38496f6117421ce695e8177fed0ff11a0002c1c7e95cf29876d7b3db8cba22c9224f7530a1a6697893bd10e39e62592735ef59de5acf04de9a66fe806896f581420c4ec2ff5ab9276d78ff8bf2fe966afd003c0f97d6e51aca6bc8428609e41060832af6b30b7af77934e9f543fb680a49eb7b3ed0ed9825831536f478fff778e52a46b90d652c8a14e65bbe13bf35bfcf0430152bbfd5636e161f3c3e8a73edc7232f9bd41dd40eb74faa83916485cd78e5062ef28a79c48638eacbedf177d3f108de4b1338ce53bb981000a649c821e25d4b8aa3edb5cc152d1be6a1d3e9d4d8232d6889bb0342a71ec9462c674dccf5a7e2b97fc86a89bf6260d3b84340d33197473e9df96725942e139c8ca7196f50a061ac13415733b978388a0e74efb3c9d36d731e4f200a14bf82114fcd1526466458e5a8b958b95093e92b0d0d5d21f6714e2dc8d52619c6e1d19462ebf9f7e252b230aa9e83f9e0f679a4f42650376741c343c4835700b39861894b5015cfc7873d19351aa58f253bb4881b93ebe5056f359ce56f2954dc6c26e737ebff99644db4077c88a0fdcbb64a967cb78846164020b8f32d7badc72a06c9942c19f688e850bc4043ddf64b859bc1822042741208230869b18cc88dc82c543370f2cf13563a43c5080333fa99968a8800ac2a52ce3e3d60d3677a0b02f304b856706c487983ada37126040ca64007d7d0e14c117b5792e7ae252e6156344eca9086b7666c05fca5ea50c8c94496629498c5d13e85c78e7e3d80368f2cd2b78d914780869c319e564c54e2725d3a9bb793fbe14fc25f7c7c95599701e9472cf8361eeb879805b381e18bcb3d2f85b557cf46324052b3c973c68419e2f77566b3e64150392808ad9fb61ccdd86774ee436e19381f3db7dfbf9e93394d351e53ea74bb21d55f4d906be94dc3bbdaec8f7d2d6d42a5b310b46235b00d76ca413d9513228646524fb88fd8474518906c8dd3783d7a79b2de04c7ba3a572a357adfbdea2b8c608d46f3f601d70fddc4bda4542ae9d8f9591047a8f193171a5658a94abebf7b2f83e469fc3637d5902a3e328f2b443890781557ca7780dd53b629d16b5d9d5a3217aa4a1c6173ab664c21213f426478c044b71835743d0b61da453dab5dbaa72f89106a7b330a9564aa12748a77661fa4b305ba5a5a8ffb013ba466020460f089317bdf44e71e19fa62bdff7039094f83ced7a3ace8071ffa50cc115d703e96d3a2fec70bcbfa3e921a8184daa2990a24a69b26fdc0c1308d5b78c3bc5994609d772260991857e4cc36612c604896b293248c1665910213a48c6e4e7a77244f9457e3bb52e52e9003ef6e3664e64a8ac70a96133be6d9fbdd7a19b8dde9480401b7cb141f6c4a5f93dfbd9573a9cf31fb95292c621f56b37b04abf59053c44d26ae618dd049ef5ecd65edd461d304d6bb4f3bd79778e3ffff97f4d35ea922cc20e134559ba86ecc62ef78abf2aed1af62552014fca929017493a05592321277cffa887d2138a838a5f765cd3d58870c766dc7703de3ad159857aecbcafbe4af992861a82c805f9ba141427b37e451716ce0c4638e6915806f2fb08890f6f070bc89cb7d8dfcb0d16490b260aa22427c1c9a307d048b01896a64d10f1521231fa75545f27351a2338ec7f62f56b73ae323fcf49ff6f3b059cd13635a627f341d4b98d70df8f05c3f432941c61ec1aa64a248215682d6ff11887955221da63684b2cfb735ca57b4b26252695c26f7226741b8968bb2b3a69795b132a80a2ecba59049259515b0e2118e68932923fe9569003662c4c2805765290fa382e784594b290b07cbb0debdfc8f6c24c84c9b239b7fffe6fc10d5009801ddce36951d3a323ca9481716d3b807c53238f4807c0a0bd1df42316fb54fc28efda0af8cfdd3b78f5bd7c4a675b83e40d7893ef70e347527ae802b20ad5eb252cb13aed8d43e8389162be0c401157ccc9150efcbf56fb1b474a200f1cb0812abaacd5ebd64ca71062c05acb00f2165347dd85c877c41c8d3ac109f4d024da36f322ef934b6a8c4159fdc3887140caabb8b13d3936cceb7ec223c84f6ff1056900f3b9e375c587d07a00f2d217c15912b0afd30c5b6b05a2a4ef6b5f58b88410dda1525b6ba58bfdf64192fa30a9772cef6de93f0a1e05ec91c608b2618c4879efdb70ea0474e2ac1e4f2b4a9f1115a5598450768320e2156bf1f43b189d99b76a82402b1949f24524a1306685a359378bf7342e0644e36c766d5ab366c87340b7127c94844c930b9336c127a5e141c287bd2028291d48f06cb336f3c8a74b8d635aae8e719da55575c031bd48e79c1a1ca76055daa84a0d8aa2b2789ee02890f6ce6e322dd6c3eab3df1c3389903ad0910780bb6457041dfce9d428f5e24b9bce348a3586b2bdaf134543d20ac9eefe4b2ad65dd852815a5d9026aa19c957cd96b13a3ca84dc8a41b8a0c980a7d075e74270e5c17ad97418371e14b8230580f5fd191352e9d658b070416a0698bf160904096cddf09e7bbcd3030f22546365853251411224bf2bf6a12a587c835807b1dfc4d5d04bacf072e33a748ba90299d4aaba62ad9fb6c0f10ef5e99b663b3beddf054bf9d3fce1dde8d6c6b90ff2ca45aa677e71ab0adf80edfbea5c197e169d9f9a4ac7deaeca671bf72f92d1c43d2ccbfdb986dcdcfd9a0e96e34dfa860324fafdf6830ab459553d5813f0d4277b9e70010b2397dcc14a21c141fb42f5c8bc4861665f2ce83e1eed6e6078885c91abaabf04098afd009cb79244b8489d6591462140b18ce15288716074ea7e5ff0baf760863a1b09b12cd0bac76bb719610d2a5bdf993a3591fee3b9919489b97b1fb4a02e4a8bece0a11de4cf23d9883afdce5aa18f93b1a904c1108e6c533b2e4938fd3e2385b4b31b980b8a242eff1ef09906e5ade1dcac4e332520578cdae817ed7efb3128c8b39082105cf0a03a2ea4d1db7f195ef9e10fe7c3eb7523a849160305bb065193db45f6187ad15081c1c1243d571f5109d4fce079220220a11c1354ae3b9215086fae59d0a120a42c19d671d366eb94fd33bdb952486d2796fcac49fdae8b232e07a46943c16e25689f3a12b3e17071cea3271fcdf7ae83760139e311a9aa295ca2728b00e8bf8da5850d7dad4295dd1904cccf26cece2c00739a3b2e08598ce238af8c8c3403634001ba30fdbe30bebce25c57f744b56e4029cef40e7dbc0678e1cef0a6f22b9836c28c97c05774bbcdcbae3f60742d4893451d4671b20cba6da2de58fe303b0a4220e1f79ddac34b9b598d1e02ad27b9abd98a043cd1698a6c1d64eefca6c72702c22b87d33f760b9de0ebaf96c87ff6202f2bbde52d68f0b6aa", 0xfffffffffffffdec}, {&(0x7f0000001140)="51c983343ab24d2070e2aca4cd4faf49063ace35b507f31265507cdf7d00752639f5a65a2852fcd8297e863e057b53e9cd5c4a233d00c491d48105a255ee41b2a3edaea86383dcb295f68288040bf07b", 0x50}, {&(0x7f00000011c0)="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", 0xfc}, {&(0x7f00000012c0)="9d181157", 0x4}, {&(0x7f0000001300)="87e16e9b481563490208f5014c5121b1d187f9b076964e4d2f0a450c49b248ad684e0ec0ee90c8a21c8f0bdb37e69da143247122c81ca5986e65aa209b5f51dd6f6b46bed541158ba0b9c90ea371c919f1249dac9124b0a726d1154676fdac6fe082d905970648b622cf2510ad200e375f1a8e30a7fb75873a", 0x79}], 0x7}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa, 0x4e20}, 0x1c) 2018/04/10 00:29:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:29 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x100000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:29 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x101400, 0x13) open_by_handle_at(r0, &(0x7f0000000100)={0xd4, 0xfff, "5cdd9e5229f06688e0b69ccd1a66c6ff0d9738b1f948d003c48f027dcaf25e0dbc560c70f01a527c7bc1a453d1f6a38ff481f46dad508a3811fd59bce2bf5ce0a815ad485088c50dc48577b11e642b417c842716ee5f74f74bd640683c17fc986d9c989ca264e23581c7ca91db986e56f728268e8d6b6d234c56c32444822d9b087ea11f7ee1817be0131ccec036404a2729bc5f3aee1af4d16652a0a6b0f9eeb819e75eead78ba5fea9406ba0704fefa22a2253c3db53034fd93a558bde54db87a495ca3f18e444a821a2f5"}, 0x40000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, r3, 0x4}) 2018/04/10 00:29:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@empty, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803ffdff, r1}) 2018/04/10 00:29:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:29 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xb00000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000007fffffff00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00001e0ffc)=0x3ff, 0x4) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{}, {r0}], 0x2, 0x0) connect$inet6(r0, &(0x7f0000f03000)={0xa, 0x0, 0x800, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) accept4(r0, 0x0, &(0x7f0000000040), 0x800) 2018/04/10 00:29:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000fffff0000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:29 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x7d0000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:30 executing program 6: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x3b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000001600)={0x3ff}, 0x10) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0x5, {{0xa, 0x4e23, 0x400, @loopback={0x0, 0x1}, 0x1ff}}}, 0x88) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xfffffffffffffffd, 0x40000) r3 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0xb7, 0x7, 0xc7, 0xc4d, "de97a9d5b428ce214d4c093f9af7c31a40166413920843c436015915c437d77590f396c47369ffec67710545", 0x401}, 0x0, 0x0, 0x0, r3, 0xfffffffffffffff8, 0x40, "62c846d94d0506d0b6996f931f13bb82492a27e27341cb2ffa26730f114d430e5b605e8bc90620dc62df9578f15f41964eada282af88eaed1ed8a676e3addf92", &(0x7f0000000180)='(#^eth1-cpuset\x00', 0xf, [], [0x7ff, 0x1ff, 0x80000000, 0xffffffffffff7fff]}) clone(0x0, &(0x7f0000001480), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) 2018/04/10 00:29:30 executing program 3: syz_emit_ethernet(0xfffffffffffffdc3, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, [0x0, 0xfffffffffffffffc]}) syz_emit_ethernet(0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000003aac3aaaabd1f02e21508b9520001f3060000bcf5708a4a5932dd036da632024ab4962e71cfb0b60d10c4d6c4"], &(0x7f0000000080)={0x1, 0x3, [0xca2, 0xea2, 0xae2, 0x8a6]}) r0 = syz_open_dev$sndmidi(&(0x7f0000000400)='/dev/snd/midiC#D#\x00', 0x2, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000440)="0a792f7906e0d38831435cf80c7ed4c545d598623ee632b222a88c08c30bde61cb4ce5b0f6c45a31a0b9d88e7d030619957826d4b6546c5405ed677c873ad93ed2") r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10, 0x0) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000200)={0x3, r2}) accept4(r1, &(0x7f00000002c0)=@rc, &(0x7f0000000340)=0x80, 0x800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000280)={0x2b, @loopback=0x7f000001, 0x4e21, 0x1, 'fo\x00', 0x22, 0x100000000, 0x9}, 0x2c) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000100)="9e867eba23701376ee3888cb459d9fb21472f815c917debd4dbaa9fefbe003872151ae33ab7ca6d79dbbb074a4627cb76a68303c81aa001b94e87545cbaa440e6989bb1e354be2576a811fb93ea14d22707f7386900baeecc6e15f21c991618bbbfda2d2aaadd0021d955a8b573728cb9672babf9a1d25b648d4e4e563902e67a2d9187e573d5289a8825a89ed4227eabe6432351468a800ad3de6ec684bdb6efd691de89a47a19adde718b272aa25eb84abf85c367a987a5d04268113a6") getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000003c0)=0x4) 2018/04/10 00:29:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000020000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:30 executing program 5: r0 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r2) getrandom(&(0x7f0000000600)=""/184, 0xb8, 0x0) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000002c80)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x3e4, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000040ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x7) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r6, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, &(0x7f0000a53ffb)=""/5, 0x68, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'rmd256-generic\x00'}}) 2018/04/10 00:29:30 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:30 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xc4f7e759}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000c7e000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000080)=""/167) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000f3bffc), 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00001c7000)={0x0, 0x2710}, 0x10) sendmmsg$unix(r0, &(0x7f00000bd000), 0x11, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x100) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xbfffffffffff16bc) setsockopt$inet6_dccp_int(r3, 0x21, 0x1, &(0x7f0000000140)=0x3, 0x4) 2018/04/10 00:29:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000ffffff9e000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:30 executing program 3: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) write$evdev(r2, &(0x7f0000000040)=[{{0x0, 0x7530}}], 0x18) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setpipe(r1, 0x407, 0x0) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r1, r3) ftruncate(r1, 0x16) 2018/04/10 00:29:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000fffffff0000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:30 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xd00}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:30 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:30 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) r2 = add_key(&(0x7f0000001040)='keyring\x00', &(0x7f0000001080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000010c0)="b7e15242b5c35df886f9601cefddcae52dec57cd3dffceaac48db3d600b909780f3cc171905ca6b93a7d3086ac52832daec34fcfcee53cb304fe2c8d947852153794e7ece1b0d0f48af88b2c7c98fe4cce6633ad928aa7f90fbc4a09ce1cc0ca5fbbfa816daab145bf59ee73e3f1890980d1a8e8da5156b801430686764882e2ebe82964b1bb796a0ffea0aadeaa224f0dfcd103eb9145f09ab432bfc0762fa24c103c44d9bcbc7a9b51cf49f1262de6952bb899c633193484b3b916ca471a1ded950dba38f85353192551429b0321f856", 0xd1, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) socket$alg(0x26, 0x5, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000001200)=0x7) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) 2018/04/10 00:29:30 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000002c0)=0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) kcmp(r0, r1, 0x6, r2, r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x800, 0x80000) getsockopt$inet_dccp_buf(r4, 0x21, 0xf, &(0x7f00000000c0)=""/103, &(0x7f0000000140)=0x67) r5 = add_key(&(0x7f0000002000)='big_key\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000040)='1', 0x1, 0xfffffffffffffffc) sendto$inet6(r4, &(0x7f0000000180)="512084a31aab39b9306c80033eff7aaa1726b050eefb781c92fadb322976b1044a2785e5e3a52d1708b3ffb1dffb14068a0a1a05fbb4eb11b46fb4a035cce3fc8448d49128b77f00258f7e7ecf2558ea6a2c01fc1566fbc6cd8fba13a820e67aad5b735b6aeb0b7dfa6b063471b5f3834ac3a84e944280a0f4aa1a2e5e4b7f5017350ad39fb7ca99", 0x88, 0x0, 0x0, 0x0) keyctl$read(0xb, r5, &(0x7f0000003500)=""/2392, 0xffffffffffffff53) 2018/04/10 00:29:31 executing program 5: getrandom(&(0x7f0000000140)=""/112, 0xffffffffffffffef, 0x2) 2018/04/10 00:29:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000f0ffff00000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:31 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x0) accept$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="d6a479cd7f5e7b7a2952d272276f489b0e2590febc9969313288020a5af2c80157ed69c1ee82bb6e3fe5387bb5b4604396aaae7266f4a8c29b4ef554d9e26918ae", 0x41) 2018/04/10 00:29:31 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x4}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:31 executing program 6: writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000140)="290000002000190702003fffffffda060200000622e80002040000140d008f4ba2e09e1fbdd2d14c81", 0x29}], 0x1) 2018/04/10 00:29:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/mcfilter\x00') bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="40020020", 0x4) sendfile(r3, r2, &(0x7f0000807000), 0x3f) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000001c0)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x6) 2018/04/10 00:29:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000f107000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:31 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa}) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x8a000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/45) r1 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="59baaf0cacf7e094f7", 0x9, 0x0) keyctl$describe(0x6, r1, &(0x7f0000000140)=""/201, 0xc9) 2018/04/10 00:29:31 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x8) ftruncate(r1, 0x7fff) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x1f, &(0x7f0000000080)=0x2) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000140)={@loopback}, &(0x7f0000000180)=0x14) r2 = open(&(0x7f00002bd93e)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) readv(r2, &(0x7f00000002c0), 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7, 0x101003) setsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f00000000c0), 0x4) close(r1) 2018/04/10 00:29:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180)=0x404, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0xb, 0x4, "b7e886fa06d708942afbbc9606ad29de8bcb35bf2c078beaf18785fa75c9d91e5cba34496f98ce32cf2283bba13a886475b98a23dac97e74cbbaae9898f0cb9b", "24a9ea1a10f0683f380a4447404b6856f83fb231da519341ac277cf13f7c03bf19b71cdfcb34613622bbe9e0f8c7fb6570b8a847fb30f6914ebecf96d859b98c", "574b02fd01c77328371f9a308eb8731999e0c6051f6e6639a61e7544d95172bb", [0x76a64b71, 0x200]}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x7, 0x80, 0x5, 0x1}, {0x4, 0x7ff, 0x3f, 0xef}, {0x3, 0x400, 0x80000000, 0x9}]}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="440f20c0350e000000440f22c0260f013ab805000000b9078000000f01d9b9321001c0b802000000ba000000000f30c744240000f0d9e8c744240204000000c7442406000000000f011424c4227d0ff70f353e660f38814d0ac4e27d8c07668ec5", 0x61}], 0x1, 0xfffffffffffffffe, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f00000001c0)={0x80000001, 0x400, 0x5, 0x1, 0x2d388751fe6c682e, 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/10 00:29:31 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xe}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:32 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x24000) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000009effffff00000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:32 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xb9, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="93f227071eea75e9fbb9460c685ea291f663ab10b93f9b39c9344212407422be93075abbe212b0061100030080887691817b21f57ee2fd6b9e6fb4ef95058c59583f4f93028123a23a69fd6e65ed2abee93226231a91e798417e56929dd0a19d71254503ec3ba003a50ac7bca45541a171564abb9c32212a3a0e404fc8ae0faf488bce89fb6c206f288ecf5e31a1fe4888", 0x91}, {&(0x7f0000000240)="2b209e1a747bf9c63718944d17c759ca1875c6150f2a2f4e084044a4489c7df4136bea567527018815d7865b3f60e5c903cb4cadb12d3ca9f487d9810a4cca00649b9389352a55623623ee9cd0fa775f5a33ac555985a143e0c58a1fe00270b11df5ac9f6d49d43083d98cc97be85048dfb923d53942dc9c093ac28e5fde4ef60229924cde6ec73beeef7a73a8488bdde58197e8f47e884ce5", 0x99}], 0x2) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000180)={0x1, r0, 0x1}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x401, @local={0xfe, 0x80, [], 0xaa}, 0x20ad}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r3, 0x3}, 0x8) r4 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x48000) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000340)) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000140)={0x8, 0x100000000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x7, @empty, 0x2}}, 0x1000, 0x40}, &(0x7f0000000440)=0x90) 2018/04/10 00:29:32 executing program 5: socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r2 = add_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000340)="d67e3bb2028ec3", 0x7, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r1, r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'rose0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "26564cf5127a8cbcfc3e24b14c4b06a08ee563d7c93acfda1cdb2296e293a69c", "1e02ea656a25a88f434f3daca3794b9781039103065e02ee35b30887e6bc3dde", "f7978d3e9593e442cb4fd0f166f5bbb9020b7c30d1efef2fd020a518798b3bae", "a40d368f5744f3ef255d1068bf1d6663342ad847b587f8dfed3d63652f94bfcf", "48f9d97c1ac3b64b82e748897d9034806bcbcb2634df9a29a8dc6f6cbc4bdf46", "8d656af7724bb4067af43d7f", 0x4, 0xa5, 0x3, 0x3, 0x800}}) splice(r0, &(0x7f00000001c0), r0, &(0x7f0000000200)=0x28, 0x9, 0xc) r3 = memfd_create(&(0x7f0000000380)="2f6465760f64737023002a7572971e5dde52069708bd0b5fc65b3337392b1081b2e113d590ee38b05ccec6b1a17590d0c38aadd6b7d1be376eb9d6e9e77484c1494b43a15cfd150b36a8beb2a8572e70ac64c993f5c0246fa91fe25edae999289db68c2639ea19086a0c437834f08f6bf2ec163d0687b1d010b8f2f7a6117af3c43c6217071028bdff17e444ce03b49ea8caa2d16f5a", 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x0, 0x0) dup3(r3, r4, 0x0) 2018/04/10 00:29:32 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000004ff0)=@ipx, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000001f7f)=""/129, 0x81}, 0x0) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000000)={0x14, 0x0, 0xffffffffffffffff, 0x25}, 0x10) 2018/04/10 00:29:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000f0ffffffffffff000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:32 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:32 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x200000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:32 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x16) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f00000001c0)=0x40) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f00000000c0)=0x1c, 0x800) getsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000100)=""/55, &(0x7f0000000140)=0x37) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x10003) 2018/04/10 00:29:32 executing program 3: r0 = socket(0x2, 0x805, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) accept$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0xd63b, 0x4) readv(r0, &(0x7f0000000e00)=[{&(0x7f0000000d80)=""/79, 0x4f}], 0x1) 2018/04/10 00:29:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="010100010000000000000000409d9256", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$vnet(r1, &(0x7f0000000100)={0x1, {&(0x7f0000000280)=""/231, 0xfffffffffffffe05, &(0x7f0000000400)=""/195, 0xfffffffffffffffc, 0x2}}, 0x68) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000180)=0x30) 2018/04/10 00:29:32 executing program 4: listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/14, 0xe) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x2000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/176, &(0x7f0000000240)=0xb0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, r0, 0x0) socket$inet6(0xa, 0x800, 0x8) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x1000004, 0x40000002871, 0xffffffffffffffff, 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000001) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x2, r1}) renameat(r2, &(0x7f0000000280)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000053c000/0x4000)=nil, 0x4000}, 0x2}) madvise(&(0x7f00000cc000/0x4000)=nil, 0x4000, 0x3) 2018/04/10 00:29:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000007f100000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:33 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x28e200, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x13, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000018000)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x14, 0x2b, 0xffffffffffffffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/04/10 00:29:33 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:33 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x1000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:33 executing program 3: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000001080)="009000899893fbcb28412f0d8cca3abf395be201bd8ada9e0f8326c2d8a91c1b") r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f00000010c0)=""/4096, 0x1000) r3 = fcntl$dupfd(r1, 0x406, r2) sched_setscheduler(r0, 0x0, &(0x7f0000000080)=0x101) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x2, 0x80000000, 0x6}) gettid() setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000200)={0x20}, 0x4) 2018/04/10 00:29:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000ffffff9e00000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:33 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x325200, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x470, 0x118, 0x0, 0x248, 0x388, 0x388, 0x388, 0x4, &(0x7f00000002c0), {[{{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0xffffffff, 0xffffffff, @empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0xff, 0xff]}, 0x3, 0x8, 0x8000, 0x6, 0x2, 0x8, 'bcsh0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x100000000}}}, {{@uncond, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8ea316ea135121c95e6efba09c1eb8e6dd269f11d9160ee28fe3f2109e21"}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x10}, @remote={0xac, 0x14, 0x14, 0xbb}, 0xb, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff0200000000000000652b00142100fe800000000022f1041fe030586f576c7768708f000000000000000000aafe8000000000000000000000000000aa005ad748c2ec85c68f03f6962fceb845c7edd58aa4e37ecc014d2c14349ef2d2766a05471307751f5995598fee6d10c6003a9e51000000000000d88604601dcd18596fda6803410ea97e0080000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000100)) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x3, @rand_addr=0x9}}, 0x1e) socketpair(0xa, 0xe, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x8020000}, 0xc) 2018/04/10 00:29:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000002000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x80400) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x14, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x2, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffffffffffff9c, 0x0, &(0x7f0000002000)}) 2018/04/10 00:29:33 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000590fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000ef5000)=[{&(0x7f0000afd000)='!', 0x1}], 0x1, &(0x7f00002e7000)}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r2, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/10 00:29:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000fffff00000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:33 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0xf4, {{0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x20}}}, 0x88) r1 = socket(0x200000000000002, 0x80003, 0x1) setsockopt(r1, 0xff, 0x1, &(0x7f0000000000), 0x0) 2018/04/10 00:29:33 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000851000)='./file0\x00', 0x1, 0x0) mkdirat(r0, &(0x7f000003f154)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f00008deff8)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000e20000)='./file0\x00', &(0x7f00000e4000)='./file0\x00', &(0x7f000044fff9)='autofs\x00', 0x1000, &(0x7f00006b8000)) pause() ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x4, 0x4}) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000000)={0xe50, 0x14, [0x1, 0xc5d8, 0x1, 0x4, 0xfffffffffffffffe]}) utimensat(r2, &(0x7f0000520000)='./file0/file0\x00', &(0x7f000023e000)={{0x77359400}}, 0x0) 2018/04/10 00:29:33 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x4000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:33 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x0, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000007f1000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:33 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x81, 0x6000) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0xb) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0xf7, &(0x7f0000000380)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}, [], {@generic={0xffff, "a3b753c81fb9526f2bdd9d4302fbd4fc08a7d74f85cb7f84b9d8043d8ffacf1f0e2890ec8619b02eab5072c19f953ff83cb8b67943f8d80a1253d6088f51a7a08b111b673736c2948f6b9760d717627187dda310013ee08eef36a521c8f0054797130e1401938c05b3e370034c3f1b11b8f7556e2aa1219c4e4a451eba76a0e8dd484c9086cf449abdc4774a2bf791d470f1ca187d3e9b9adba08b9b8b8dc8e8c1a2a08839aa51c42c18029e4cd406df775bc4967048744b7dd102d68ad3d426d6a0507a091c4a00a9d13219361cb096d26d25ea0d05cb26aaf31f33d3834f365e2bf9243d20b2d609"}}}, &(0x7f0000000480)={0x0, 0x4, [0x7b6, 0x433, 0x299, 0x64c]}) 2018/04/10 00:29:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:33 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x12, &(0x7f0000000580)) r1 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x42, 0x1c200) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x2, 0x7fffffff, 0x7, 0x0, 0x1}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xffffffff00000001, 0xfffffffffffffffd, 0xfffffffffffffe00, 0x1, 0x0, 0x5, 0x1, 0xd, 0x1000, 0x9, 0x0, 0x40, 0x1, 0x8000, 0x5, 0x0, 0x1, 0x4, 0x8, 0x9403, 0x80000000, 0x8, 0x1, 0xfff, 0x4e, 0x672, 0x6a, 0x4, 0x3b, 0x0, 0x3, 0x5, 0x5, 0x7, 0x3ff, 0x7ff, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x40, 0x3974b918, 0x8, 0x0, 0x200, 0x5}, r2, 0x2, r0, 0x0) 2018/04/10 00:29:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:33 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xb000200}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:33 executing program 6: unshare(0x400) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, &(0x7f0000000100), 0x8) 2018/04/10 00:29:33 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000000007f1000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 503.197581] binder_alloc: 560: binder_alloc_buf, no vma [ 503.203108] binder: 560:637 transaction failed 29189/-3, size 0-0 line 2963 2018/04/10 00:29:34 executing program 5: r0 = socket(0x1e, 0x1000000000005, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0xc7, 0x8) 2018/04/10 00:29:34 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000f97000)={@multicast1=0xe0000001, @loopback=0x7f000001}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/66, 0x42}], 0x1) 2018/04/10 00:29:34 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) readv(r2, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 503.317068] binder: BINDER_SET_CONTEXT_MGR already set [ 503.322402] binder: 560:638 ioctl 40046207 0 returned -16 2018/04/10 00:29:34 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x7}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000052000)="2113000000", 0x5) r1 = accept$alg(r0, 0x0, 0x0) write(r1, &(0x7f0000000340)="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", 0x1b0) readv(r1, &(0x7f00006e8ff0)=[{&(0x7f000070bf52)=""/174, 0xfffffde9}], 0x1) 2018/04/10 00:29:34 executing program 4: socket(0x1, 0x802, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x101400) 2018/04/10 00:29:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(xtea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0x7, 0x20}, 0xc) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000740)="7312c1a72ce67ebf", 0x8}], 0x1, &(0x7f00000013c0)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, &(0x7f0000000080)=""/107, 0x6b}, 0x0) modify_ldt$read_default(0x2, &(0x7f0000001380)=""/4096, 0x1000) 2018/04/10 00:29:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000100000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:34 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r2, 0x4, 0x800) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:34 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000031bff8)='./file0\x00', 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB="c333c0a8204ff1841503528cc3075ee41ba5c2092b76f6b5a6819aea0734e583ec6be8db1830a8d2"], @ANYBLOB="d48b4f26c4862e6884"], @ANYRES16=r0, @ANYRES16=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYPTR64, @ANYRES64, @ANYRES64], @ANYRES32=r0], &(0x7f0000000080)=""/176, 0x7b) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000006009707008200000000000000", 0x14, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./control\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}}, &(0x7f00000001c0)=0x90) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x90000) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000380)) 2018/04/10 00:29:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000fffffff000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:34 executing program 6: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x600000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xfffffffffffffffa, 0x4) futex(&(0x7f000000cffc), 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000004, 0x0, &(0x7f0000cc3ff0)={0x0, 0x989680}, &(0x7f0000000080), 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000180)) fchdir(r0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000480)=ANY=[]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000540)={@broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8) 2018/04/10 00:29:34 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x92}) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000340)={r1, 0x0, r2}) r3 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000aaaaaaaa0000810000008848450000580000000000009078e00000017f0000010420880b0000000000000800000086dd00f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], &(0x7f0000000f00)) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000f40)=""/4096, 0x1000) write$binfmt_script(r3, &(0x7f00000000c0)={'#! ', './file0', [{0x20}, {0x20}, {0x20, ')-eth1'}, {0x20, ',self\'^em1&/ppp1bdev@selfcgroup'}, {0x20, 'security'}, {0x20, "2a2d47504c29e36b657972696e67bb776c616e3076626f786e65743128"}, {0x20, 'cgroupcpusetvmnet0md5sumvmnet1em1vmnet0em0['}, {0x20, 'mime_typewlan1&lowlan0em1:^$[system'}], 0xa, "9504016640dbee2eb8d43f8ae7f0bb364bf5107faf36d3d6a15b464474cdc4ecdbcb577f4e9eaca010de4aa62add729c4c3df773d8dbf7e4be657b52d462b576a4439bb60485f011f55e673a4a7d1405c67603eff2eb4c19198b94861d46271349a67cd46e89b9de290d33464d21a8cbcae5bad282c665f49393e1a7237f5450e8a86dc4dd0c9044300d54a9ee9eaf440cd3ac6763ffc404e24e013f9058676a60b1f9a7e49e9dd4667f44ebe8dc6480c01da66c671b525ed3b644661a00735827d72b2f52024b6f33e8ecfe5303251f53482b46d48a7cda7095f9004fc68fd3ebe80cf1402851b4991ec05a"}, 0x197) 2018/04/10 00:29:34 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xaae, 0x2) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000011c0)={0x9, 0x0, 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x61, &(0x7f0000001080)=""/97, 0xa7, &(0x7f0000001100)=""/167}) unshare(0x8000400) execve(&(0x7f0000000000)='./control\x00', &(0x7f00000001c0), &(0x7f0000000300)) 2018/04/10 00:29:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000200000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:35 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xf}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000f0ffffff00000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:35 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0x1, 0x8, [@empty, @broadcast=0xffffffff, @loopback=0x7f000001, @rand_addr, @dev={0xac, 0x14, 0x14, 0x13}, @loopback=0x7f000001, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}]}, 0x30) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) 2018/04/10 00:29:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4f00070000000000000085980400000000a9572426a476c2", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000012, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x10000, 0x4000) 2018/04/10 00:29:35 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, {0x30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x200}, @in6={0xa, 0x4e23, 0x1ff, @loopback={0x0, 0x1}, 0xfff}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0xe1) accept$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) 2018/04/10 00:29:35 executing program 4: rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x15) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 2018/04/10 00:29:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:35 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0)=0x101, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000000040), &(0x7f000034dffc)=0x4) 2018/04/10 00:29:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="726177000000004e3e2334cf30965800000000000000000000000000000000003500000050b8048ac1761a3eb7439c05cb2f10f07e3897a30d042d428355024c1c31143af525d05fd69d76eb72688f7af2d5f59abb806d396bc46ecf53c8342ad1dee1b13aaedeb7203d38e2738958570b930c42ee5505f1e48aaf132c0a6b094bcf0f5876b87bfdcc"], &(0x7f0000000140)=0x59) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)=@pic={0xfffffffffffff001, 0x758257b1, 0x7, 0x1, 0x80000000, 0x3ff, 0x100000000, 0x8e1, 0x0, 0x5, 0x7ba, 0x8, 0x6, 0x5, 0x1, 0x100000000}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"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"}) 2018/04/10 00:29:35 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x7d00}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:35 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000007fffffff00000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:36 executing program 6: syz_emit_ethernet(0x5e, &(0x7f0000000040)={@random="a16e8aa67acf", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "52cdfa", 0x28, 0x0, 0x0, @empty, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@dstopts={0x0, 0x2, [], [@enc_lim={0x4, 0x1}, @enc_lim={0x4, 0x1}, @jumbo={0xc2, 0x4}, @ra={0x5, 0x2}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "b1ee68", 0x0, "6a629a"}}}}}}}, &(0x7f000038eff4)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') ioctl$KDDISABIO(r0, 0x4b37) 2018/04/10 00:29:36 executing program 5: r0 = syz_fuse_mount(&(0x7f0000f65000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/20, 0x14}], 0x2, &(0x7f0000000240)=""/2, 0x2, 0x8}, 0x40000000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00004e2000)) r2 = semget(0x3, 0x1, 0x12) semop(r2, &(0x7f00000002c0)=[{0x2, 0x1, 0x800}], 0x1) 2018/04/10 00:29:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:36 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x7000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:36 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x8000000004e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r1, 0x4) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x7fffffff}, 0x14) 2018/04/10 00:29:36 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:36 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000f8000)={@random="cd390b081bf2", @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x401, 0x400002) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x94f7, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 2018/04/10 00:29:36 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x104, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x22bf, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="5d6ce84065acde13f9648b8148be3ddf7a8751820fb91fb62ca631ae1176a622b027dd9478aed823784124e79abd6742241f79032f6f615005f8dd3fdc75c9a4e0f6dcdfc5a8f3e0db71a555acc8c0f45162e215ce35ad65a205f797f438eeb703e1616e15b4c873a11825004be07cab55ae2f55b37072", 0x77, 0xfffffffffffffffd}, {&(0x7f00000001c0)="e5f6dbac0d22dfefcd0a717e0dc66826191e75c3490ff097af4b10fceb45f9994d48888dd1d08e3d215169a74f2bf5a774dd874dc01eed8af66f53f455ce591630d944df89fbb4f52d43ee5141e24e4391ef7ec813a4c8c08192b20eee4961c38dc7afd1e8b9b2122327b3bff5e471823543c889378b9731b91ad251", 0x7c, 0x5}], 0x2081001, &(0x7f0000000280)={[{@space_cache='space_cache', 0x2c}, {@subvolid={'subvolid', 0x3d, ')cgroupwlan0system\\trusted*%'}, 0x2c}, {@noinode_cache='noinode_cache', 0x2c}, {@space_cache_v2='space_cache=v2', 0x2c}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 2018/04/10 00:29:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000f000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x800) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) exit(0x0) pselect6(0x40, &(0x7f0000000080)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:37 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x300}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:37 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x4) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:37 executing program 6: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @loopback=0x7f000001}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x2, 0x4, 0x4, 0xf0, r2}, 0x10) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004daff0)={&(0x7f0000006fb8)={0x5, 0x360, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a01c25e50766"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0xa7}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "510200"}}, 0x48}, 0x1}, 0x0) 2018/04/10 00:29:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000002000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4ddc989d, 0x400000) fcntl$setsig(r0, 0xa, 0x3f) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x100000000002000, 0x0) ioctl$TCSETSF(r1, 0xc074510c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1b}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) migrate_pages(r2, 0x10000, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x8) [ 506.148658] sctp: [Deprecated]: syz-executor4 (pid 789) Use of int in maxseg socket option. [ 506.148658] Use struct sctp_assoc_value instead 2018/04/10 00:29:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:37 executing program 6: r0 = socket$inet6(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x100, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffe6b, &(0x7f0000000280)={&(0x7f0000000700)={0x10c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {0x2}, [@IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x0, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x0, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000100)="5500000018007fbdb72d1cb2a4a280930a06000000a84308910000003900090008000500000000001900a307006c8bd560000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec", 0x55}], 0x1, &(0x7f0000006000)}, 0x0) r3 = memfd_create(&(0x7f0000000300)='gretap0\x00', 0x3) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000340)={'filter\x00'}, &(0x7f00000003c0)=0x44) 2018/04/10 00:29:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000fffffffffffff000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:37 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xfeffffff00000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)="6370755b8ed701e0fb2d0bac54f170028eff72616363742e754a8340fc922002f54ca150cbbac911f2554927af2f78bdca4eb036067112a3054358cd35ba69209ca522a651f562b58cf9cb0595e8d345535e29a85c6bec108472826d3f36dd3933b8514f8d6cf941c4f3e9e2c14930de61c5bcb83fdc84142cc6859a22825b646cea3c1c8689c01d464942c6f0ae796d9d", 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/85, 0x55}], 0x1, 0x0) [ 506.332738] sctp: [Deprecated]: syz-executor4 (pid 836) Use of int in maxseg socket option. [ 506.332738] Use struct sctp_assoc_value instead 2018/04/10 00:29:38 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0x3) socket$inet6_udp(0xa, 0x2, 0x0) getitimer(0x3, &(0x7f0000000000)) 2018/04/10 00:29:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:38 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x4) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write$evdev(r0, &(0x7f0000e95000)=[{}, {}], 0x30) write(r0, &(0x7f0000eaffa7)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13cecb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697ae707d4a70f330e6fe3a1c9c76f314ffab329", 0x58) write$tun(r0, &(0x7f0000253000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x36) write$sndseq(r0, &(0x7f00006d9000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0x0, 0x0, 0x7fffffff}}], 0x30) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x5, 0x2}) poll(&(0x7f0000df8fe0)=[{r0}], 0x1, 0x0) 2018/04/10 00:29:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000200000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:38 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x200000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1000000000003a) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}}, 0x1c) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ff0)=[{&(0x7f00000001c0)="da45b4", 0x3}], 0x1, &(0x7f0000000040)}, 0x400c840) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001000)="90c0", 0x2}], 0x1, &(0x7f0000003000)}}], 0x1, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000340)=0x101, &(0x7f0000000380)=0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec0000002001000000009f84b6db2111181f73cfbbdf2af874c10a000000fd00", @ANYRES16=r2, @ANYBLOB="080026bd7000fedbdf251100000008000400ffffffff2c000200080002004e23000008000b000a000000080002004e2100000800070021030000080009000100010014000100080001000a0000000800050000000000840003000800030000000000080007004e2100000800040009000000080003000300000008000500000000001400020073797a5f74756e000000000000000000080007004e240000140006000000000000000000000000000000000114000200677265300000000000000000000000001400020073797a6b616c6c6572310000000000000c0003000800010003000000"], 0xec}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) 2018/04/10 00:29:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="00000000000080006fddc30027386fbdcbaf08ebce336d32fa5ebba3b8daad0fd92bec4919f1bce82eede745ed8b5d9808807f92b16a5c4c22ddc457b8e4e499056da820db214bd763bae673314b9f2f677f4f56dc1578bfa8f740959f6073c88d78e03018e74ff12b2f1d29b0349555b06d9f") fchdir(r0) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000040)="38e3bfe68e9f79eae4014d58f394c5f2d61c17bb5dffa59f7b4980e681a0a30f6b57284e87") syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000) 2018/04/10 00:29:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:38 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) dup2(r0, r0) connect$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x1f) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"776c616e3000001d0084000021000899", &(0x7f0000000000)=ANY=[]}) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x200, 0xffffffff, 0x7fff, r2}, 0x10) 2018/04/10 00:29:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0xfffffffffffffe05) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x4}, 0x8) 2018/04/10 00:29:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414bb0000000003000000ac1c14bbac1414aaffffffff"], 0x1c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)="6e65742f6d2366696c74c23fe4276df6ee4ba8639d7648964db7657200") readv(r2, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}, {&(0x7f0000120000)=""/4096, 0x1000}], 0x2) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x10000000}) 2018/04/10 00:29:38 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x4) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:38 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xfeffffff}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000fffffff00000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x4b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x1000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)) 2018/04/10 00:29:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:38 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000ec0)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000001180)=r0) fallocate(r0, 0x3, 0x5, 0xb6d1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) getresuid(&(0x7f0000000f40)=0x0, &(0x7f0000000f80), &(0x7f0000000fc0)) stat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f00000010c0)='./file0\x00', 0x2000, r1, r2, 0x2, 0x80000000080) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x4) listen(r3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280), 0x4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000440)=0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000e40)={0x3ff, 0xbc2, 0x20, 0x8, 0x100, 0x3, 0x7, 0x7, 0x2, 0xa17, 0xc, 0x7}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800) r4 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="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", 0xd05, 0xfffffffffffffffc) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/rfkill\x00', 0x210000, 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, r4) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x7, 0x7, 0x20ba, 0x5, 0x8, 0xfff, 0x200, 0x20, 0x1, 0x3, 0xfffffffffffffff8, 0x9}) accept4$unix(r5, &(0x7f0000001100)=@abs, &(0x7f0000000e00)=0x6e, 0x80800) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000e80)=0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x1, 0xf7, &(0x7f0000000180)="bf24c8d50c0bc09883793d52204b3c0435443d388935fc2cc42084ba99ef51fc75e9c59d9b74e691372b89aefde1f37d3be1d5317e047368f5cd384989448ea813c12c5423fe047b0ec8585207f814605a2c92d52277e30843526104cba8f3877dbb5485b25179793075070dd1057845c6735d03815fd95c8220f7cce7bccf61cbbdfee688469d912bdee2c1761f726f184f794a02c9b9723b6470c6d27a0b4c6bdc90f6063f9ea10aa0ac271c1ea93ba5959cfbed92c9376c24131b83b913b4f442d8f3b48fdbd805b20b5bae4ed128b35313de5ab0cc09faa96b36525123f9437882039cae46b7bd78aad2393be518a3bb2d66560880"}) connect$ipx(r0, &(0x7f0000000140)={0x4, 0x0, 0xff, "851779d0cb52", 0xa37}, 0x10) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000380)={0x221, 0x8000, 0x8, 0x80000000, 0x20, 0x401, 0x7, 0x2, 0x400, 0xc6, 0x9, 0x2}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) 2018/04/10 00:29:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000002000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:38 executing program 6: unshare(0x20000400) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400100, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f00000000c0)={0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000048000)={0xd, 0x3, 0x4, 0x9, 0x0, r1}, 0x2c) 2018/04/10 00:29:38 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0xac5, 0x100) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000032fe8)={0x1000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000065fc8)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000fd1000)={&(0x7f0000000000)={0x14}, 0x14}, 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xe, 0x40, 0x20, 0x200, 0x1e, r3, 0x80000001}, 0x2c) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x401, 0x0) accept4$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10, 0x80800) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f0000000180)=@fragment={0x9f, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x67}, 0x8) 2018/04/10 00:29:38 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x1600}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:38 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x4) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000f1070000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000580)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r1 = socket(0x2, 0x800, 0x3) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0xfffffffffffffffa, 0xfdf6) 2018/04/10 00:29:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x8, 0x800, 0xfffffffffffffffd}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)=0x3) 2018/04/10 00:29:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0xfffffffffffffffd, 0x2) ioctl(r0, 0x227b, &(0x7f0000d27862)="ff") write$fuse(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500000000000000000a579d79d2d136098e8b1a20000000004000007049a91fe09da2c7aa7fffffffc00000091a5b7741d51d60000"], 0x2a) read(r0, &(0x7f0000000100)=""/154, 0x1e) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) 2018/04/10 00:29:39 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x300000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:39 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x4) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:39 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) uselib(&(0x7f0000000000)='./file0/file0\x00') 2018/04/10 00:29:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:39 executing program 6: mkdir(&(0x7f0000249ff8)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000faeff4)) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)) truncate(&(0x7f0000000040)='./file0\x00', 0x20) bind$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) chroot(&(0x7f0000fddff8)='./file0\x00') mount(&(0x7f00008bcff8)='./file0\x00', &(0x7f0000a51ff8)='./file0\x00', &(0x7f00002d6ffd)='9p\x00', 0x5000, 0x0) pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') 2018/04/10 00:29:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000009effffff000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:39 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009cc000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 2018/04/10 00:29:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000007f10000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:39 executing program 6: r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2401, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x2, 0x2) gettid() ptrace(0x8, r0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), 0x4) uselib(&(0x7f0000000100)='./file0\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000002c0)={0x6, 0x8}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r4, r5) 2018/04/10 00:29:39 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x105000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0xa0000000004, 0x14, [0x10001, 0x1000, 0x200, 0x4, 0x8a]}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000d93ff0)=[{&(0x7f0000000000)="3900000011000947011b61e6c30500fe070000000200000045efffff08009b0019001a000f0000090000010000000000060004000400000004", 0x39}], 0x1) 2018/04/10 00:29:39 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x4) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:39 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xa00000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:39 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r2) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000200)={{0xffffffff, 0xffff}, 'port0\x00', 0x20, 0x0, 0x0, 0x40, 0x7ff, 0x7fffffff, 0x10001, 0x0, 0x2, 0xfff}) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)) fstat(r3, &(0x7f0000000400)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000540)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8) getresgid(&(0x7f0000001680), &(0x7f0000000700)=0x0, &(0x7f0000000740)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000008c0)=0xe8) fstat(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000e80)) getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000ec0), &(0x7f0000000f00)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000f40)={0x0}, &(0x7f0000000f80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000fc0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000010c0)=0xe8) r13 = getgid() r14 = getpid() getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001200)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0xc) r17 = gettid() r18 = getuid() gettid() getuid() fstat(r4, &(0x7f0000002e40)) r19 = getpid() fstat(r0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getegid() r22 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003140)={{{@in=@broadcast, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000003240)=0xe8) getresgid(&(0x7f0000003280)=0x0, &(0x7f00000032c0), &(0x7f0000003300)) r24 = openat$cgroup(r4, &(0x7f0000003340)='syz0\x00', 0x200002, 0x0) gettid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000003380)={{{@in6=@ipv4={[], [], @loopback}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}}}, &(0x7f0000003480)=0xe8) r26 = getgid() gettid() getresuid(&(0x7f0000003740), &(0x7f0000003780), &(0x7f00000037c0)) getegid() ioctl$sock_SIOCGPGRP(r24, 0x8904, &(0x7f0000001640)) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000003840)={{{@in, @in6=@dev}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000003940)=0xe8) getegid() gettid() geteuid() stat(&(0x7f0000003980)='./file0\x00', &(0x7f00000039c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000004040)=0x0) lstat(&(0x7f0000004080)='./file0\x00', &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000004140)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r4, &(0x7f0000004200)=[{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000340)="0a8e8b4432991de5ef7c1f7457013d05a19372f8d7047a944bad26ec1cfba918bb79b60537972be09fee50d8ec31495cfe1942189526f24e3bfb49e888db88fd2d5f19c021b52acf9bc044e7caa434f63c1d196c5729305363ebea45df461a3ee41cac04fc28c3197d67e73c75c65baa34c56608e437c39c3689df7e504a388baad5778842910be0a8745a85a56e90d8301e0f35e267645d236b548406d706217d2baefbd1d650fae5", 0xa9}], 0x1, &(0x7f0000000980)=[@rights={0x20, 0x1, 0x1, [r4, r0, r4]}, @rights={0x20, 0x1, 0x1, [r3, r3, r4]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}, @rights={0x30, 0x1, 0x1, [r2, r2, r1, r2, r4, r4, r1, r4]}, @rights={0x18, 0x1, 0x1, [r3]}], 0xe0, 0x40000}, {&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000b00)="ad1effd988a4693fb1bcbd458266c98dd0dcbe3c403cd17a554e8c9e39a195f7f0cf1224036222e9ca5c11596b6827fe34a17a12b62b6eeee60b50431e", 0x3d}, {&(0x7f0000000b80)="fad057d249ee50ef8464299ba8ee6a200cd6b1673890c16ffefe9889ccefaa4c2c5e3b1bedba92cf8ef5b70c24dfcedfc440707f112173f0b7bda2103e7200a83d1733215a29279d86c2d9ac9ec7a23bd144464fa8942da32b78dec288837c2e25a572d5aeebcd92b4a406bdfcf5a7c8469459ff998d4ff83d937fcda96995fa97f24a485220d80922064b69822b65db583548dca3c09f", 0x97}, {&(0x7f0000000d40)="e4656ab38f87a3a4f5c1d871580bcf0515dae8c474f0ced6234b80d4114c32b9f607a9a52438f6afa18136951e99dcc9438d27629cf23b0e2c6b522dd75cc4d10001528636c156dba24ab9c40c3267499e0f87300e209b88f4015b9fbb68c7733f9769f9f13d780afac2f3e230004c4752630758b15bc16acf041e07deefdef6dd71d56a1c7120de909fc351633572b507894e0a9833fe220ba429ae16e82ad8a7b3824bac5049be41a6c8de5dea26d820fe6b3549ece977b6", 0xb9}], 0x3, &(0x7f00000012c0)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r0, r4, r2, r3, r2]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x20, 0x1, 0x1, [r2, r2, r0]}], 0x88, 0x24000000}, {&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001400)="9a4796ab85d04fa5d4e0dd3891b59cfd433501d278614073911708a6093d932d4e97cdb2d695fd18f5de3599ca59de8dd84a149477afe5204c7a679c18c1382889a1e4add2cd8b647cf62a2e3c552b7cc6334278600a58c3c80586709f3a14bf92e2e7efa1eadaf00e78b4", 0x6b}, {&(0x7f0000001500)="99a0896b94d12308ece0df7150310e3a2fcaf573533080f9193f2b030368485e3eed8d35d104fb263229744567ac51354461bbb1d72cf976c24637", 0x3b}], 0x2, &(0x7f00000016c0)=[@rights={0x20, 0x1, 0x1, [r4, r4, r2]}, @rights={0x18, 0x1, 0x1, [r4, r2]}, @rights={0x28, 0x1, 0x1, [r0, r4, r0, r2, r4]}, @rights={0x30, 0x1, 0x1, [r0, r1, r3, r3, r3, r3, r4]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r17, r18}, @rights={0x28, 0x1, 0x1, [r1, r1, r3, r4, r1]}], 0x108, 0x40}, {&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001880)="bc5ef29cf993134a482d81c088aeebbece7d0e8c6e4cecfda1e2ff8d20dcb2d96e2364cdcaad7f6c94fceb24aeb26e2a32eab2e89a263e6a58a4db29f3a4a8c828ad4914cf77e7bafc7bb041aade9e1ca05f47f0358375c7e0949c2472cdd764f544f4a755", 0x65}, {&(0x7f0000001940)="ca0f2e87329eaf64a9a480f6cb93be34125e0086548441b9316c41bd4ef9094c45c37adb5bf66a1ffface3ae5c0197fa0b3652feec45856ad21eb481d214c4e1d879757d8098c2022dd324fe026d4e", 0x4f}, {&(0x7f0000001a40)="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", 0xffc}, {&(0x7f0000002b00)="d388d9403124676408e13584f0676a177521572385638c675b6a804847394e06f768882ebd6fe739b21b995a26d24b14d3b0aa69ce66f4f6b136305070f53381d2053d863a219f4026a5247905d91f9e3ec9bcb6113285a8b6ecf84b027da93b5f8424d8e06889171685d402f4cce3b67f73c6f1cd2b06eb5eb781c3ca868471e81b426ed964d6622c8a8420bc7df4357d6d13a506652a9ae8b79d7fcdd407a4fa15fd8b72a5c19ee408e22a6ba3540d3f20e905ab4f378a3b9b8592315b85e1b762bbe8a2", 0xc5}, {&(0x7f0000002c80)="6d960c38485705b320fa6cddc6ac9f97579977743c39cd631520ca8b5a0f4dcc9daba201e1bcff2541ad98881c24631df50b0d5753d9d3bc9a005cf968260f0e9fde1bf5612c657cb87a6c666242e99c0982d361b267584a24affd7c886bb45fdeed39e6f0ff3743efac16f4e45c51295e691c650eea6715fc7e4790cd11ffcbbe6356aec53811e07ecf0dd7a2cde9305a77c337972cb14cacafc8b6e82a892b0302b0db032d5dee4725e52c2cd21c276e4f1ed336981e76c2420979bd5d9c2543", 0xc1}], 0x5, &(0x7f0000002f40)=[@rights={0x28, 0x1, 0x1, [r0, r2, r3, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r19, r20, r21}], 0x48, 0x4000}, {&(0x7f0000002fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000003040)="c0171842035419d13c542725427718be4816ab68995a83d19b638546b645a4a0c1414090541c3afd5479a1fd7dfe35b0e243a920fdb78a57a778095de1c8e905a6addde1d16e44786e8c70ecead7d3be7bd0873c64d8f3ecfda7183c3fde588766005f934fa6fff6ab4f30b53138bf94d0e463733e4204424f3cb497d780ca75971a9f6f4dfe47f2623634966176", 0x8e}], 0x1, &(0x7f0000004600)=ANY=[@ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="00000000280000000000000001001b14af6f98181a073ad4b1b8f6000001000000", @ANYRES32=r24, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="00000020000000000000000100efd2a4dced0b00000200000000", @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x9f, 0x814}, {&(0x7f0000003b40)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000003bc0)="968db4da863fbbeebfd8f13e1466bbf88bea8b3972e2098cf40bf35875160856706cd1f46c1d884a7b9553c033b0c71fdc1affa646f473d9cc9f76344992503e2b353d69d801538aa3bf02c9c11a48267c525b1ff90fba47a1cd353dd170", 0x5e}, {&(0x7f0000003d00)="d994602cf5b18036102c32733f7f302d0ec59ad683f1d85e7551f91811545ce615a8ea34597051c826351da225723dec668726a853af3cf588be4674e47e835be41cde2d132d2954d5fb5423e056e85928d407cdb954379c409bba19ff141ee50192b7ec8763cbc5ef444c8a2a02b3f294c14610404f659689fd8a981e301f7b33600ae89cde98e32866aee9b8e283d55f85e775c0ea3a23b2e43141e47151553de71f232e5e7c067ae2676627ef9b24e6f00370b7dd4b6c16f70954a2094d8d9bc93672bee57e8b4d2ccc9a3c90e6652dbf9222", 0xd4}, {&(0x7f0000003ec0)="de7dfd222430c35bea3f4760bea4ff83510b9c5757b07720419402159a51b217884f4e4d4ded31e758b6189a9dd8379fb8d89c9d77d0c52ea8b4f05c7a188fb22f817d8ed46dddc66cf5f23429ef4bff9724592b7c8b2f7c9256cb3711e73602a3ef30b471e19a34e87ee49b61398cddc0a7f8115646145fb5b2358253566f6a48b6ed8c269e946169b6751274afa9d843e43633a244d6b60454c3637c710f7d890a05c57817de1c9f0693eb042db571f7f19373372d363e43578a3c87e547c5e44d57977eaecf769bb9123fbb11fba717f0ad4f", 0xd4}], 0x3, &(0x7f0000004180)=[@rights={0x20, 0x1, 0x1, [r2, r0, r1]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}], 0x40, 0x8000}], 0x6, 0x8000) 2018/04/10 00:29:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:39 executing program 4: r0 = getpid() gettid() perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() tgkill(r1, r0, 0x0) 2018/04/10 00:29:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000007fffffff000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:39 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x20000) setsockopt$inet_dccp_int(r0, 0x21, 0x6, &(0x7f0000000040)=0x1, 0x4) shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) getdents64(r0, &(0x7f0000000080)=""/219, 0xdb) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000280)={0x10000, 0x0, [0x80000000, 0xf224, 0x5, 0x4, 0x0, 0x100, 0x9]}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000300)=0x3) accept4$packet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x14, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'sit0\x00', r2}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000440)=""/68) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000004c0)=0x401) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x9) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e22, 0x80000000000, @local={0xfe, 0x80, [], 0xaa}, 0x2}}, 0x3, 0x6, 0x7, 0x100, 0x20}, &(0x7f00000005c0)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000600)={r3, 0x100}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000640)={{0x1000, 0x61}, 'port0\x00', 0x8, 0x400, 0x4, 0x3, 0x1, 0xffffffffffff8000, 0x2, 0x0, 0x2, 0x7fffffff}) flock(r1, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000700)={r3, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x8, 0x1, 0x0, 0xffff, 0xcc}, &(0x7f00000007c0)=0x98) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000800)={{0x6, 0x6}, 0x1, 0x280000000000, 0x7fffffff, {0x2, 0x63}, 0x6, 0x9}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000880)={r4, 0x1}, &(0x7f00000008c0)=0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000900)={0xd542, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000940)={r5, 0x7ff}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000980)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000009c0)=@assoc_value, &(0x7f0000000a00)=0x8) timerfd_gettime(r0, &(0x7f0000000a40)) getpeername$ax25(r0, &(0x7f0000000a80), &(0x7f0000000ac0)=0x10) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000b00)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000b40)=0x9) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000b80)={r4, 0x8}, &(0x7f0000000bc0)=0x8) 2018/04/10 00:29:39 executing program 3: r0 = socket(0x10, 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1f, 0x101000) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x40) write(r0, &(0x7f0000000040)="24000000210025f0075c0165ff0ffc0e020000000010000002e1100c0800180000000000", 0x24) 2018/04/10 00:29:39 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x140) getsockname$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="866675430f070f01cbc4e1fde64e7f410dabd20000b805000000b9000000000f01c12edfc4c744240000400000c744240227c20000c7442406000000000f0114240f009cb0f1ef1a6bc422592c0c10", 0x4f}], 0x1, 0x0, &(0x7f0000000300), 0x0) prctl$setendian(0x14, 0x3) 2018/04/10 00:29:39 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xe000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rpc\x00') fchdir(r0) stat(&(0x7f0000000000)='8/file0/file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='8/file0/file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000200)=[r1, r2]) syz_fuseblk_mount(&(0x7f0000976000)='8/file0\x00', &(0x7f0000000080)='8/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/10 00:29:39 executing program 6: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4000000000084) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) getsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000640)=""/4096, &(0x7f00000002c0)=0x1000) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)="a3", 0x1}], 0x1, &(0x7f0000000000)}, 0xc100) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0)=[{&(0x7f0000000100)="bce232", 0x3}], 0x1, &(0x7f000000ae80)}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000000)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x2, 0xeb8b, 0x8, 0xb5b}, 0x0, 0x2, 0x0, 0x0, "eead06ed598f48fa8bbfa31c69306132ac3cc065cb0166b0d10c82a03ebfa4ccaadabcc9199cf3c6505f61e718d82903fa9d4ed9cc0a58f68cec505ffc0eb011"}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x4008040) mkdirat(r0, &(0x7f000002cff6)='./control\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./control\x00', 0x0, 0x18}, 0x10) mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000280)) renameat2(0xffffffffffffffff, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) 2018/04/10 00:29:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:40 executing program 6: r0 = socket$inet6(0xa, 0x13ffffffffffb, 0x3f) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffe}, &(0x7f0000000940), 0x8) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}, {0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}, 0x5}, 0x9, [0x4, 0xff5c, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x1f0]}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x2000000c, &(0x7f00000001c0)={0xa}, 0x1c) write(r0, &(0x7f0000000080)="6179520fde7ffe8c18b2ec32b60683e5718816552e1bd51fa4cfb63a95bfd571a6dcd5fa8521a2718e0900000081c85923477acc0f77d632f49c580e8b31d8d0aa26e028561b558a8d8734c61d7cc493514e0f6f287cabecd3ba0a55", 0x5c) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000340)={'teql0\x00', 0x5004}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f0000000480)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x9}, &(0x7f0000000540)=0xc) pread64(r0, &(0x7f0000000000)=""/35, 0x23, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x8, 0x3}) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='statm\x00') socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0xf9, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffff}}}, 0x84) 2018/04/10 00:29:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fffffff, 0x200) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000080)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$rdma_cm(r0, &(0x7f0000000f40)=@accept={0x8, 0x0, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x2aa) [ 509.106801] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.132192] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.167539] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.200219] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.207949] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.215628] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.222460] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.229901] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.236723] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.243929] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.250756] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.258221] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.265640] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.272941] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.280100] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.286873] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.293580] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.300260] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.306958] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.313637] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.320328] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.327015] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.333725] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.340413] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.347096] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa530 returned -22 [ 509.363842] binder_alloc: binder_alloc_mmap_handler: 1049 20000000-20002000 already mapped failed -16 [ 509.373601] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.380355] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.387060] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.393766] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 [ 509.400459] binder: 1049:1063 ioctl 4020ae46 7f8a4f8aa510 returned -22 2018/04/10 00:29:40 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xffffff7f00000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000f0ffffff000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:40 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f00000001c0)) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000000c0)) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000080)="4f00070000000000000085980400000000a9572426a476c2", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000012, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) clock_gettime(0x7, &(0x7f0000000000)) 2018/04/10 00:29:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000), 0xfe5b) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x4540) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x3, 0x3, 0x7, "b7b59296d81f6deaa7dc0186c659fdab508b0676e909a2974fa2b0a6eb940452bc09b0ce7a66304eeb3caa98c3a26219a3c67332e9aeb42fdee0098112dd0b428d913dd43b065d38089c796843a9c296"}, 0xd8) getsockname$ax25(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) 2018/04/10 00:29:40 executing program 6: prctl$void(0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80980) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000100)=0x40) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000180)={0x0, 0x90, 0x4, &(0x7f0000000140)}) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000000)={0x0, 0x10000, 0x800010006, &(0x7f00000000c0)}) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000ff4ea0)=ANY=[@ANYBLOB="3801000010001307000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000160000a54b24", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000006c000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0xc040}, 0x0) recvfrom(r0, &(0x7f00000001c0)=""/194, 0xc2, 0x60, &(0x7f00000002c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x80) 2018/04/10 00:29:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x8, 0x600) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000300)={0x4, {{0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, {{0xa, 0x4e24, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x80}}}, 0x108) fadvise64(r1, 0x0, 0x9, 0x4) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000240)="370f32ba2000b001ee0f01c9baf80c66b810813a8e66efbafc0ced66b8010000000f01c1360f01cf670f200766b9800000c00f326635010000000f30673e662e660cee", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x32f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="d06a5e0f01d19a34d43a0167f20f0d7580baf80c66b884157e8d66efbafc0c66b81c00000066ef0f23d63ef4baf80c66b85a17308d66efbafc0cb80000efb89b000f00d06766c74424003f865aad6766c7442402166b00006766c744240600000000670f011c24", 0x67}], 0x1, 0x0, &(0x7f00000002c0)=[@cr4={0x1, 0x40200}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000180)={'rose0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x810, r3, 0x0) 2018/04/10 00:29:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:40 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000100), 0x10) r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000140)={0x0, 0x8, 0x5ac, 'queue0\x00', 0x1}) ioctl(r0, 0x81204101, &(0x7f0000005e0b)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0x6, @loopback={0x0, 0x1}, 0x7}}, 0x5, 0x10040000000000, 0x400, 0x8, 0x8}, 0x98) sendto$inet(r0, &(0x7f0000000200), 0x0, 0xfffffffffffffffe, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/10 00:29:40 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7001, &(0x7f000002d000), 0x2, r2, 0xa}) r3 = gettid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000200)={'yam0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) migrate_pages(r3, 0xc2, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=0xfffffffffffffe01) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000683000)={0x1, &(0x7f000002d000), 0x2, r2, 0xb}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) ioctl$int_in(r0, 0x5455, &(0x7f00000001c0)=0x40007) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x6, r2, 0x1}) 2018/04/10 00:29:40 executing program 4: capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000080)) r0 = inotify_init1(0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x3}) r3 = memfd_create(&(0x7f00000001c0)='/dev/vhost-net\x00', 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000280)={0x3ff, {{0xa, 0x4e23, 0x20, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x3}}}, 0x88) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r2, 0x80000, r4}) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) migrate_pages(r5, 0x2, &(0x7f0000000200), &(0x7f0000000240)) 2018/04/10 00:29:40 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x2000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:40 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000f0ffff000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0xfffffe84) write$rdma_cm(r0, &(0x7f0000000000)=@listen={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$rdma_cm(r0, &(0x7f00000001c0)=@listen={0x7, 0x8, 0xfa00, {r1}}, 0x10) 2018/04/10 00:29:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:40 executing program 5: socket$inet6(0xa, 0x80002, 0x6) r0 = socket$inet6(0xa, 0xf, 0x9) getsockopt$inet6_buf(r0, 0x29, 0x800040, &(0x7f0000000140)=""/84, &(0x7f0000000100)=0xfffffffffffffff8) 2018/04/10 00:29:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000001000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:40 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x6, 0x3) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) write(r0, &(0x7f0000000200)="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", 0xfc) getsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/04/10 00:29:40 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xa00}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002bc0)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=""/187, 0xbb}}], 0x1, 0x0, &(0x7f0000002b80)={0x77359400}) recvmmsg(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x8, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200)=[{&(0x7f0000003100)=""/226, 0xffffff4a}], 0x1, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/10 00:29:40 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x2) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000007f1000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:41 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f757000361a6f74a1b774b8642f3dfdd313d92946ff0167415d8dc22791dcd496520c1c99f4b07d3b2a11090000000229210b73abdcd2986fc290ac9b6ace278586d39949a54fb276eb1fd3964b0cad27e417b33abb8d3b00e64e75e4dff47de27536dccdde5fc746b04faafcec347560a31b3a35a5f20bc949d75cbb763987", 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(r1, 0x0, 0x0) 2018/04/10 00:29:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x6dfefffffe, 0x501000) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x28001) fcntl$setpipe(r0, 0x407, 0x3) write$evdev(r1, &(0x7f0000f15fd0)=[{{0x77359400}, 0x1, 0x64, 0x4}, {}], 0x30) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) 2018/04/10 00:29:41 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x8bffe, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x40000, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000)="f7", 0x1}]) ioctl$TCXONC(r1, 0x540a, 0x7fff) 2018/04/10 00:29:41 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xe00}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:41 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) socket$nl_generic(0x10, 0x3, 0x10) 2018/04/10 00:29:41 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x2) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x0) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="d3ab27191a01002356ba602dff05000b", 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x400003, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x5}) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/10 00:29:41 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xbc, &(0x7f0000000000)=0x0) r2 = socket(0x2, 0x806, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)='[', 0x1}]) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0xa5b8810920cc5677) 2018/04/10 00:29:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000f0ffffffffffff0000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:41 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x100000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:41 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:41 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563040000000000000000adfe6fed2bbaef831aea907f9e377de47372390a4337c22e47bc08a29250b5be7f7aa3515653"], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xa, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e630c4000000000ed34"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=ANY=[@ANYBLOB="0f63080000000000000000000000000fff630000"], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000bfd0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000011000)}) fadvise64(r1, 0x0, 0x1, 0x5) 2018/04/10 00:29:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000002000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 510.460124] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 00:29:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_getroute={0x20, 0x1a, 0x801, 0x0, 0x0, {0x1c}, [@RTA_DST={0x4, 0x1}]}, 0x20}, 0x1}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x48, "77eb5fd1d61b7d254ee0c9cc9ec70befca94359a661ee5d976493dc8aa462006d3f075430e5390ee8b291971a8a4d45630121d65d32cddb9201133c796d1bb50b9d127522dc0f1e3"}, &(0x7f00000001c0)=0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x3ff, 0x4}, &(0x7f0000000240)=0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 2018/04/10 00:29:41 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xa00000000002, 0x0, &(0x7f00009c6ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$lock(r0, 0x6, &(0x7f0000010000)={0x0, 0x0, 0x0, 0x2}) [ 510.504008] binder: 1207:1225 unknown command 287493 [ 510.544283] binder: 1207:1225 ioctl c0306201 20012000 returned -22 2018/04/10 00:29:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000020000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:41 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x2) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) [ 510.591507] binder: 1207:1225 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 510.601499] netlink: 'syz-executor6': attribute type 1 has an invalid length. [ 510.633686] binder: 1207:1225 unknown command 549647 2018/04/10 00:29:41 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x1100000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:41 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 510.657848] binder: 1207:1225 ioctl c0306201 2000dfd0 returned -22 [ 510.662408] netlink: 'syz-executor6': attribute type 1 has an invalid length. 2018/04/10 00:29:41 executing program 6: mmap(&(0x7f0000000000/0xca9000)=nil, 0xca9000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000942000), 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_netfilter(r0, &(0x7f00000019c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000001980)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c180000080f00042dbd7000fedbdf250c0000035c00580008008800", @ANYRES32=r2, @ANYBLOB="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"], 0x188c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) [ 510.714273] binder: 1207:1248 unknown command 287493 [ 510.748202] binder: 1207:1248 ioctl c0306201 20012000 returned -22 [ 510.796162] binder: 1207:1248 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 510.859269] IPVS: ftp: loaded support on port[0] = 21 [ 510.859350] binder: 1207:1225 unknown command 549647 [ 510.894190] binder: 1207:1225 ioctl c0306201 2000dfd0 returned -22 2018/04/10 00:29:41 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x3b9ac9ff}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:41 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="0f20e035000002000f22e066ba4000b009ee48b80b000000000000000f23c00f21f83503000a000f23f80f2025b805000000b95cfb2d030f01c166b81a010f00d06526deefc4c2f921d826650f3066ba6100ed", 0x53}], 0x1, 0x0, &(0x7f0000000540), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e9066b894000f00d86566673636df571c660f3840c6ea210000006e000f6fe0c7442400bde4bd82c74424023bfb58adc7442406000000000f011c24b9640800000f32190e66baf80cb8245e848fef66bafc0ced", 0x54}], 0x1, 0x0, &(0x7f00000002c0), 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYRES32=r5]) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040), 0x2) r6 = dup(r0) ioctl$TIOCCBRK(r6, 0x5428) 2018/04/10 00:29:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80510400}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000010080000000000000000000000000000", @ANYBLOB="000000000000020008000d000000000008001b0000000000"], 0x2}, 0x1}, 0x0) 2018/04/10 00:29:41 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r0, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 2018/04/10 00:29:41 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}], 0x2) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000007fffffff0000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:41 executing program 5: perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89a2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[]}) 2018/04/10 00:29:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000fffffffffffff0000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54010000140013079a000000000000000000000000000000009e25ab28000000000000000000ffffac14ffaa0000000000000100000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c001700000000000000000000000000000000000000000008000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x154}, 0x1}, 0x0) 2018/04/10 00:29:42 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}], 0x2) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:42 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}], 0x2) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:42 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xd00000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:42 executing program 6: clock_adjtime(0xa, &(0x7f000090e000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x5, 0x8000) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x46b68639f66298e9, &(0x7f0000000400)={@remote, @local, 0x0}, &(0x7f0000000440)=0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x40001) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=@ipmr_delroute={0xdc, 0x19, 0x100, 0x70bd29, 0x25dfdbfb, {0x80, 0x80, 0x80, 0x1000, 0xfc, 0x3, 0xfd, 0xe, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffffffffc00}, @RTA_OIF={0x8, 0x4, r1}, @RTA_UID={0x8, 0x19, r3}, @RTA_METRICS={0x98, 0x8, "2b39f11d435ff9efcd57a94b1f9025e701417215e3d1494731820b079639390c15bc16142e7fcb1c6fd7b49ddb0905994ce29dea30c61b04d0bdd18df8605e4e157e7f94911b7a8762aa39c62a98d6a6fda234c4c3e684d89e2a4273cf34e1d5c4055212c126ae1d34bce0b5587305d283a218573acbe3b113feb8a4cd0dd724b9b5b958e63c0b3f5af13ce4f7a07b867fb383be"}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x2}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x200}]}, 0xdc}, 0x1, 0x0, 0x0, 0x90}, 0x8040) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000240)) 2018/04/10 00:29:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000ffffff9e000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 511.253297] netlink: 260 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/10 00:29:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000100)={0x8, 0x7fffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000240)="370f32ba2000b001ee0f01c9baf80c66b810813a8e66efbafc0ced66b8010000000f01c1360f01cf670f200766b9800000c00f326635010000000f30673e662e660cee", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x32f) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="d06a5e0f01d19a34d43a0167f20f0d7580baf80c66b884157e8d66efbafc0c66b81c00000066ef0f23d63ef4baf80c66b85a17308d66efbafc0cb80000efb89b000f00d06766c74424003f865aad6766c7442402166b00006766c744240600000000670f011c24", 0x67}], 0x1, 0x0, &(0x7f00000002c0)=[@cr4={0x1, 0x40200}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/10 00:29:42 executing program 4: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xd67, 0xb, 0x14, 0xc, "7e9ab23461d2de0a8d18bed138ae045b136fdb577126727a7c9f0d7b91912cddeed0dae588a79240b9efd97f19e248065093f5cd8ca4752c3c80e68f91c8d9fa", "27ef140dd140defd2e0d0fb7c99059b4f5ade179e9a2d3cc6568e128959684d3", [0x4, 0xffffffff]}) fcntl$getown(r0, 0x9) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = signalfd4(r0, &(0x7f0000000180)={0x80000001}, 0x8, 0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x1, [0x1]}, &(0x7f0000000200)=0xa) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r2, 0x80}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r2}, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='teql0\x00', 0x10) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000340)={{}, {r3, r4+10000000}}, &(0x7f0000000380)) sendmsg$nl_crypto(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@alg={0xf0, 0x10, 0x8, 0x70bd25, 0x25dfdbff, {{'ctr-blowfish-asm\x00'}, [], [], 0x400, 0x2400}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0xfffffffffffffffc}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x810) recvfrom$llc(r0, &(0x7f0000000580)=""/190, 0xbe, 0x2001, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000640)=[{0xe, 0x3ff}, {0x55a785e871b7c5e2, 0x7}, {0x8, 0x100}], 0x3) clock_gettime(0x4, &(0x7f0000000680)) flock(r0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000006c0)=[@in={0x2, 0x4e22, @rand_addr=0xfffffffffffff000}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in6={0xa, 0x4e23, 0x2, @loopback={0x0, 0x1}, 0x3}, @in={0x2, 0x4e20}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}], 0x5c) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000740)=0xff) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x80000000, 0x4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) timerfd_settime(r5, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, &(0x7f0000000800)) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7fffffff, 0x4) ioctl$sock_netrom_SIOCGSTAMP(r5, 0x8906, &(0x7f0000000840)) gettid() setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000880)=0x80000000, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r5, &(0x7f00000008c0)="056b22eb6ab7cb22f930edfb2a5012e4150650b1b4af1c38b5e4e62b48b1b68703b5623394f78137ebaa3109a86f8200b344d2c486d08769b11e44e29c2466dba015438d19c450a0ec857139e202abb02bedc04992ddb5e56d0f4825adf5ed81a1ff8b76", &(0x7f0000000940)=""/109}, 0x18) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000a00)=""/10, &(0x7f0000000a40)=0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r5, 0x28, &(0x7f0000000a80)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={r6, 0x8817, 0x8}, 0xc) [ 511.503086] netlink: 64 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/10 00:29:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00') fgetxattr(r0, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) 2018/04/10 00:29:42 executing program 3: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = socket$netlink(0x10, 0x3, 0x11) writev(r0, &(0x7f0000000000), 0x1000000000000118) 2018/04/10 00:29:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000fffffff0000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:42 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}], 0x2) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:42 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xe00000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:42 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f0000000040)=""/31, 0x1f, 0x100, &(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f00002dfff4)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x4, 0x400008, 0xfffffffffffffffd}, 0x14}, 0x1}, 0x0) 2018/04/10 00:29:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) exit(0x22) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa}, 0x1c) sendfile(r0, r1, &(0x7f0000000040), 0x0) close(r0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 2018/04/10 00:29:42 executing program 6: r0 = socket$inet6(0xa, 0x5, 0xce) sendto$inet6(r0, &(0x7f0000e13f4e), 0xffffffffffffffbf, 0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x109042, 0x0) ioctl$TIOCSBRK(r1, 0x5427) getdents(r1, &(0x7f0000000040)=""/129, 0x81) 2018/04/10 00:29:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000fffff000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x80000000}}, 0x8, 0x20, 0x6, 0x40, 0x8}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x9, &(0x7f0000000300)={r3, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x4}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000280)="11b540ecdc6e9df91a44832ca642da6f14a877f6b2731dfcd2d4f7f4f78598615891e100f034050efefc5749c64991c6beb610fdfdaa167d0a238a10f37d245309768d536c9e6e2a14335566a3419921d59c10ae", 0x54, 0x4, &(0x7f00000001c0)=@ethernet={0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80) ioctl$TCXONC(r0, 0x540a, 0x80000001) write(r0, &(0x7f0000caf000)="9c", 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x6) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="030000002c6af27044c808699adf8d050b2b8fae120fe01ccfab91403f260277e05959242ac47b5f28fc43b2967ec011a800c62522a4d7613351af4c40136a70825eb282cb122b186af552e942bd921b36074b7135fb4c36d18a116597ab6cda0c85cb855a697372e1c1f4a1ea48c7e370d3e23cd10605f30efc5a9082082cb77867aea8c17f8ac5ee1edfaa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x8}, 0xc) r5 = semget$private(0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000480)={r3, 0x15f7}, 0x8) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000001280)={"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"}) semctl$SEM_STAT(r5, 0x0, 0x12, &(0x7f0000000000)=""/25) [ 511.816631] netlink: 64 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/10 00:29:42 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xffffffff00000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:42 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000007f10000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:42 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/156) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/225, &(0x7f0000000240)=0xe1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000ea5fb0)={{0x4000001ff, 0x800009}, {0x0, 0xfffffffffffffffd}, 0xfffffffffffffffc, 0x2}) signalfd(r1, &(0x7f0000000040)={0x4}, 0x8) 2018/04/10 00:29:42 executing program 6: r0 = bpf$MAP_CREATE(0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x14) open_by_handle_at(r0, &(0x7f0000000040)={0x8, 0x26}, 0x2881) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x2000) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x8) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000100)={0x3, r2}) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7, 0x400) 2018/04/10 00:29:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000200000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 512.214889] netlink: 64 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/10 00:29:43 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x3000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/250, 0xfa}, {&(0x7f0000000340)=""/75, 0x4b}], 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'ip6tnl0\x00'}) 2018/04/10 00:29:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000a5e000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000010000034d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/10 00:29:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000f0ffff0000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0xffff800000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x9, 0x1, 0x1c11, 0xffffffffffff4e07, 0x97, 0x81, 0xade, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, [0x1, 0x3, 0xfffffffffffffe01, 0x4, 0x80000001, 0x7104, 0x7fffffff, 0x40, 0x6, 0x86ed, 0x9, 0x0, 0x5, 0x40, 0xe49]}, &(0x7f0000000200)=0x100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xff) 2018/04/10 00:29:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00') ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = syz_open_dev$binder(&(0x7f0000e5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20015, r0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000480)) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/250, 0xff1a}], 0x1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x0, 0x70bd2c, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0xc004) ioctl(r2, 0xc1004110, &(0x7f0000001f64)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x23d, 0x9, 0xfffffffffffffffb, 0x7, 0x10001}, &(0x7f00000003c0)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400)={r4, 0x7fffffff}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x34c) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 2018/04/10 00:29:43 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000fffffff00000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:43 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000f44000)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) listen(r0, 0x0) connect(r0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "eb9cb2251ba9"}, 0x10) r1 = dup3(r0, r0, 0x0) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x335, 0x101, 0xb76, 0x1ff, 0x80, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/04/10 00:29:43 executing program 5: socketpair(0xa, 0xb, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x2, 0x20, 0x8001, 0x2, 0x9d, 0x8, 0x40, 0x10000, 0x100000001, 0x101, 0x8001, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) close(r1) readv(r2, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/108, 0x6c}], 0x1) 2018/04/10 00:29:43 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x1100}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:44 executing program 6: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', @ifru_addrs=@ethernet={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}) 2018/04/10 00:29:44 executing program 3: r0 = socket$inet6(0xa, 0x400000000006, 0x2) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc), 0x0) 2018/04/10 00:29:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="ac0fbf55c3", 0x5, 0x0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'ipddp0\x00'}}, 0x80) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, &(0x7f0000000440)="66b8b7d2e5c50f23c80f21f866350c0070000f23f80f1f40000f323d00a0baf80c66b81c6a168e66efbafc0c66eddfaa070036260f0766b8000000000f23c00f21f86635010006000f23f8660fd088670066b97a0800000f32"}], 0x1, 0x0, &(0x7f0000000040), 0x1000000000000072) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000003ffc), &(0x7f0000001ffc)=0x2cb4bdcc3d32ae10) r5 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x6, 0x400) ioctl$KVM_ASSIGN_PCI_DEVICE(r5, 0x8040ae69, &(0x7f0000000240)={0x0, 0xfffffffffffffff7, 0x6, 0x1, 0x5}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe0000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="c4e24947470d66b8bf000f00d8653ef767fc66baf80cb8e0fb4f8bef66bafc0c66edb97e0b0000b82ff11332ba000000000f30440f20c03503000000440f22c0c4c185e955d666b8ad000f00d8673636f46485af0c000000", 0x58}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 00:29:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000010000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:44 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='ns\x00') prctl$setptracer(0x59616d61, r0) fchdir(r1) exit(0x0) syz_fuseblk_mount(&(0x7f0000976000)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x400, 0x70bd27, 0x25dfdbfb, {0xb}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004}, 0xc004) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getsa={0x3c, 0x12, 0x4, 0x70bd29, 0x25dfdbfe, {@in=@broadcast=0xffffffff, 0x4d6, 0x2}, [@srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0xd}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 2018/04/10 00:29:44 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:44 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x2000b}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:44 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) gettid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='children\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x3, r2}) sendfile(r0, r2, &(0x7f0000a2effc)=0x4000000, 0x1002) 2018/04/10 00:29:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000007f10000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100000000106, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = semget$private(0x0, 0x6, 0x6d1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) getgroups(0x3, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000380)={{0x9, r3, r4, r5, r6, 0xd, 0x1}, 0x2, 0x7ff, 0x401}) writev(0xffffffffffffffff, &(0x7f000036bfd0), 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x4000000058) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) ioctl$TCSETA(r1, 0x5402, &(0x7f0000a26fec)={0x5}) 2018/04/10 00:29:44 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x700}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000020000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:44 executing program 6: pipe2(&(0x7f00000001c0), 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt(r1, 0x0, 0x50, &(0x7f0000000080)=""/8, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000140)=@buf={0xe, &(0x7f0000000100)="31b4e5e5a08a889dc30082d55957"}) 2018/04/10 00:29:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000000007f100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:45 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000e00)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000dc0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000e40)=@bind={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}}, 0x461) r2 = getpid() ptrace$pokeuser(0x6, r2, 0x0, 0xf1) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) 2018/04/10 00:29:45 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x0, 0x2) getsockname$ax25(r1, &(0x7f0000992ff0), &(0x7f0000000a0b)=0x10) fsetxattr(r0, &(0x7f0000af1fe8)=@known='system.posix_acl_access\x00', &(0x7f00009b8000)="020000000800000000000000", 0xc, 0x0) 2018/04/10 00:29:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000fffffff000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:45 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x11}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:45 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x0) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) fremovexattr(r0, &(0x7f0000000000)=@known='security.selinux\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192300834b80040d8c560a060000ec04a200000543dfd87c5800004824ca94326400890005000000000000000004830600000000000000000003ed83fff5dde4ffff0f000100070c09a11b45ffd46f8a3731", 0x56}], 0x1) 2018/04/10 00:29:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f0000000000)={0x18, 0x13, 0x2ff, 0x0, 0x0, {}, [@generic='X']}, 0x18}, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4000, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) connect$packet(r1, &(0x7f0000000100)={0x11, 0xf5, r2, 0x1, 0xfffffffffffffffc, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) 2018/04/10 00:29:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:45 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x458003) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x48d}}, [0x7, 0x9b, 0x9fdc, 0x9, 0x5, 0x4, 0x3ff, 0xffffffff, 0x0, 0x100000000, 0x40, 0x4, 0x7, 0x8, 0x6]}, &(0x7f0000000240)=0x100) 2018/04/10 00:29:45 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xff000000000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x1, 0x0) getsockopt(r0, 0x10d, 0x20000000010, &(0x7f0000320ffc)=""/4, &(0x7f0000d5f000)=0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x4}, 0x8) 2018/04/10 00:29:45 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x40000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, "0a4ceaa05dad126e00000002a1569b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write$sndseq(r0, &(0x7f0000000000)=[{0x3, 0x9, 0x405, 0x3, @tick=0x7f, {0x7fff, 0xff}, {0x9}, @queue={0x401, {0xff, 0x8}}}], 0x3f8) 2018/04/10 00:29:45 executing program 6: r0 = socket$inet(0xa, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000080), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x1d, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], 0x120, 0x150, 0x180, [@statistic={'statistic\x00', 0x18}, @stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0xc02}}}]}, [@common=@redirect={'redirect\x00', 0x1d}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}, {{{0x5, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @empty, [], @empty, [], 0x70, 0x70, 0x1a0}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:audisp_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x428) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x100000000, 0x200000) 2018/04/10 00:29:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:45 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000240)={@host=0x2}) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bind(r1, &(0x7f00000001c0)=@nfc={0x27, 0x1, 0x2, 0x3}, 0x80) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = accept$ipx(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000140)=0x10) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000180), 0x10) memfd_create(&(0x7f0000000280)='eth0\x00', 0x2) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x0) 2018/04/10 00:29:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:46 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x401f000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:46 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x123000) dup3(r0, r1, 0x0) 2018/04/10 00:29:46 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6b0b3de2, 0x200000) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00000000c0)={0x0, 0x1, 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ff5000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000180)=""/4096) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffe) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00000000ff5408000500000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/10 00:29:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000f0ffffffffffff00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:46 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x14, &(0x7f00008a8ff0)={0x0, 0x0, &(0x7f0000d22000)}, &(0x7f0000f6affc)=0x10) ioctl(r0, 0x7ff, &(0x7f0000000000)="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") r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0x80082) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x10001, 0x8c, 0x4, 0x1, 0xfffffffffffff9ef, 0x15b7}) 2018/04/10 00:29:46 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x14280000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:46 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x0) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:46 executing program 4: pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fffe) ioctl$KDMKTONE(r1, 0x4b30, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0xafd, 0x8000040000002) write$evdev(r2, &(0x7f000023cfd0)=[{{}, 0x2, 0x2}, {{}, 0x3}], 0x30e) r3 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x8100) ioctl$VT_WAITACTIVE(r3, 0x5607) r4 = memfd_create(&(0x7f0000000000)="73797374656d287365637572697479b5657468306b657972696e672c2b6367726f75702300", 0x2) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) r5 = socket$alg(0x26, 0x5, 0x0) io_setup(0xffffffffffff8001, &(0x7f0000000400)=0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000340)=0x10000000000) r7 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x6b9, 0x48200) ioctl$KDGKBMETA(r7, 0x4b62, &(0x7f0000000300)) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000440)) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f00000000c0)={0x36, @broadcast=0xffffffff, 0x4e21, 0x4, 'lblc\x00', 0xc, 0x4, 0x2b}, 0x2c) io_cancel(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffa, r3, &(0x7f0000000100)="8c021dbc0aff04dec9b007d4c764a9662405ef00d59d124ea19b866aa5eee054d8cd3d7b0e2fb0b86cf02b2ac467b6e1d51e3718703791e63e6688c1e1f3933e0f6dd35091108a0613a4e821756595c601cd26aa0533142aa3c69670a76e05dc2620f9aed7a007ff2b2c710b78f7f5496ff23fc051d8e1e13078a6570b073547aa316f8b9d0e88aa8a0f81d3c2cd2b4f4c20d807df2950ce5ce255c988ad994218dbd610bcb0108b126ca8d84f362cceff4ee16e7d25fcd9c4574b92d318067299acba", 0xc3, 0x7, 0x0, 0x0, r3}, &(0x7f0000000240)) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f0000000080)={0x2, 0x5, 0x332000, 0x80, 0x6, 0x4b}) write$fuse(r7, &(0x7f0000000280)={0x12, 0x1, 0x5, @fuse_notify_poll_wakeup_out={0x3}}, 0x12) readahead(r2, 0x0, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000040)={r5}) eventfd(0x7) ioctl$VT_WAITACTIVE(r4, 0x5607) 2018/04/10 00:29:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000007fffffff0000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:46 executing program 6: r0 = socket(0x200000011, 0x100000802, 0x800000) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x400000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'ifb0\x00', 0xa201}) 2018/04/10 00:29:47 executing program 5: r0 = socket$inet6(0xa, 0x7fffd, 0x1000000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x7, 0x60800) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x3, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000000000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/04/10 00:29:47 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0xd000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:47 executing program 3: socket$inet6(0xa, 0x80003, 0xff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x200000000032, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000fffff0000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:47 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000003, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) set_mempolicy(0x2, &(0x7f0000000000)=0x571f, 0x0) 2018/04/10 00:29:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000040)=""/86, &(0x7f00000000c0)=0x56) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003933d70aa1db67dd7549d01e2d00ff0a000200000000000003f65ff3c3e0000000b200006ea40001"], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x6, 0x2a00) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x8002, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000001c0)={0x1, r2}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = semget$private(0x0, 0x2, 0x41) semctl$IPC_RMID(r4, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1, 0x3, &(0x7f0000000400)=[{&(0x7f0000000280)="e73d2bff40b40afdc9fd73ffa339f5aa", 0x10, 0x7cc9fcb2}, {&(0x7f00000002c0)="421359b109c0fdb1d3f3e873e701895b7ea7e67008886fe8163ee729373087aa2261d2f859226d2f95dc8bf1ea574c189bcf26cf459a09dfeae2b166c7169e31c41a8dd311f6e2a507f2b069962ffe83840b503787679866f75e49cc20a7e42d521e1da39cef3f58f1e712b31eb0839f07935d3c50604b5586f0b271f475f76565da", 0x82}, {&(0x7f0000000380)="d6ed77835c8cfd2dc9c1d70c9612bff18ab51037b22ec296ab6e4bd85b571dee674cbbd861b65a4ee341373240c17c8872a1910c0e044bc477b7d26b6ccee671aff1", 0x42, 0x5}], 0x1000, &(0x7f0000000480)={[{@gid={'gid', 0x3d, [0x32, 0x30, 0x31, 0x37, 0x35, 0x35, 0x35, 0x37, 0x35]}, 0x2c}, {@dos1xfloppy='dos1xfloppy', 0x2c}, {@discard='discard', 0x2c}, {@nfs='nfs', 0x2c}, {@dmask={'dmask', 0x3d, [0x30, 0x37, 0x37, 0x34]}, 0x2c}]}) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) 2018/04/10 00:29:47 executing program 3: mkdir(&(0x7f000063543e)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00007fcffa)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000fddff8)='./file0\x00') mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x2003002, 0x0) r0 = shmget(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) unshare(0x200) get_thread_area(&(0x7f0000000400)={0x100000000, 0x0, 0x1000, 0x5, 0x5, 0x10001, 0x0, 0x4, 0x9, 0x1000}) chdir(&(0x7f0000bddc23)='./file0\x00') shmctl$IPC_STAT(r0, 0x2, &(0x7f00000002c0)=""/159) poll(&(0x7f00006cd000), 0x0, 0xfffffffffffffffa) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000140)={0x399f1336, r2}, &(0x7f0000000180)={0x7fe, 0x2, 0x7, 0x2, 0x1, 0x440}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) pivot_root(&(0x7f0000359ff8)='./file0\x00', &(0x7f00007d7ff8)='./file0\x00') ioctl$TIOCSTI(r1, 0x5412, 0x800) pivot_root(&(0x7f00000e6ff8)='./file0\x00', &(0x7f0000451000)='./file0\x00') prctl$void(0x1b) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000380)={0x81, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e20, @rand_addr=0x2}, 0x0, 0x4, 0x81, 0x7, 0x5, &(0x7f0000000240)='tunl0\x00', 0x40, 0xff, 0x7}) 2018/04/10 00:29:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x0, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000007f100000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) r2 = openat$cgroup_int(r0, &(0x7f0000000100)='io.weight\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000040), 0x1) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/224) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x4) 2018/04/10 00:29:48 executing program 6: perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00002b5f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000984c2f)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2000000000001, 0x0) 2018/04/10 00:29:48 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x600000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000020000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:48 executing program 4: syz_emit_ethernet(0x7, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES64, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="2cea89f38f50cfeea5097eb9d68886580d1774e5846ffbb7f53721d5fbd7f8f7620452e5e37275eec6329284172db131e9248aea092cfdb513e94f1f17dcdee93508962bda7eea3ab5cd9e8483a1882cb4d3c842d406d3cb323da9eba6a33b21686c51082375f71b0f5fd7a8eb45d39c3fe926a3f3f4bde66e468ed46bab4c7202f58215691a5196f6e6c2943ddb72d4d5d9c173c319bb25f3456cceaa6d222aba", @ANYRES16, @ANYRES16, @ANYRES32], @ANYPTR], @ANYRES64, @ANYRES64, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="d5e6ab5f2af881b9c911a1eff3973c37599a797eaff7a02f9d2edeed585438ff52dca429a04c78c44f262fa424ce6d9499f82bceb4e934758f0ca665470902c7a2f55ca5491ea8846264e559ff4132178929ee334a748840ec0f194a8c67f684c84f19c54ffdc3d1f74b7a7fb9c86849c8f3f32d2d3fae074c14d24d3e7f02984882a09454fa8932b71923b263d3dab35b", @ANYRES16, @ANYPTR, @ANYRES32], @ANYPTR64=&(0x7f0000000340)=ANY=[]], 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [{[{0x9100, 0x3, 0x48e, 0x1}], {0x8100, 0x8, 0x9, 0x2}}], {@generic={0x88b7, "54fcf8de689f2005b072062f0e14e8ee634da1f708a946bd3d5ee373afc477d2ec73a86388bf9ef2036f53e1512198a45695d0e9ff2aaa1990"}}}, 0x0) 2018/04/10 00:29:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000040)="e97868076fb40503a90c82d37d614a99c5e1c1940f1ffa5b752592ddf4a7c862dc28435ecd96bedfe6a309c865ab775975f25be3420d14000feecb7a8e002c21714c00351406e9ca6d252719f296a53c5a6c31edadb2bed632df8724c95d444efd162060153a32d4ab086e7b9e2599fd76ac4de1e61e5f4a9e8e8a82df764ac26790f62d295bdb421ff41159c728a65fa61ac256784c351b5e3f230465501d56fb6d7bbce2e2ea951666", 0xaa, 0x7, 0x0, 0x1, r0}]) memfd_create(&(0x7f0000000280)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) 2018/04/10 00:29:48 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x0) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000009effffff0000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:48 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x100, 0x6, 0x8, 'queue1\x00', 0x800}) r1 = semget(0x3, 0x2, 0x12) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000280)=""/4096) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stat\x00') syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x8000040000002) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006340400035f1949c8e494d407d00000000000000000000000000000000000000000000000000000000000000000000000000002195784f91a20ff34a9aa8daabc2ab4b716de891d47cdccca3f4f94cbfbd2f19c3592e758dc259a24414166414a775c2e3ae9e92735ab1282e346389803e66dcb6329f0756dec1e5b587b97d5959f782f71fcf9435da26b85ef4d3d490561bbca8b3547a08f285f9e7020a93f53845107b45faf96f6e4c4d9ab555a304324173aa117ed78a6e90", @ANYPTR=&(0x7f000026c000)=ANY=[], @ANYPTR=&(0x7f000000afd0)=ANY=[]], 0x0, 0x0, &(0x7f0000009000)}) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) write$evdev(0xffffffffffffffff, &(0x7f000023cfd0)=[{{}, 0x2}, {{}, 0x3}], 0x30e) 2018/04/10 00:29:48 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)="28f5ea215b5c73797374656d2d65746831747275737465c86b3ca612e1eef773656c696e7578261207f629e8ab8801089a167c0f4be16013e5743b694eb3e6af22aeb6c60a17b9014c0df2a27fb023b603009897d93fd2ea00b5bea5ff5bcdc1905bd098877da7e4eb34d119c96f8c10b6dfbee10265d81e58e060262dc76f3e3e23407dbd09eae69108d8826388bfd5d4c85898b8a3e4917548a04211dee312e1f3a747da918076f4f8a5100644e9f35284aa1bb8a53b0000000000000000000000") connect$bt_rfcomm(r0, &(0x7f0000000340)={0x1f, {0x7, 0x1f, 0x5d, 0x6, 0xffffffffffff0000, 0x7fffffff}, 0x8}, 0xa) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={{0x5, 0x27a, 0x3f, 0x5, 0x8, 0x1f}, 0x69, 0x100000000, 0x0, 0x9, 0xffffffffffff7fff, "37cac2008c4c5bf2115b06b557477d82799d53b400fb48bee378500f15bba143ecce1f3b47626157faccc0bb75e8881d739c4ae1f07f6da4a482825500fc03f91bfd5dd45d8ef24f9b1946103ac4fb5ae2481e67a88a53cf58bf7d37e2931c3411cac7cf409ec77c7fc6fe9d75879d091ead0c826ed866e9a0cd0ed66d76d9de"}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000240)=0x2, &(0x7f0000000280)=0x2) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000300)={0x0, 0x6dd980, 0x6, &(0x7f00000002c0)}) 2018/04/10 00:29:48 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x7d0000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) [ 517.539548] binder: 1736:1738 got transaction to invalid handle [ 517.545791] binder: 1736:1738 transaction failed 29201/-22, size 0-0 line 2848 2018/04/10 00:29:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x400000000e) read(r0, &(0x7f0000000140)=""/67, 0x43) r1 = epoll_create1(0x80000) write$binfmt_elf32(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x94, 0x40, 0x8, 0x0, 0x3, 0x6, 0x40, 0x389, 0x38, 0x1b1, 0x10, 0xb142, 0x20, 0x1, 0xfffffffffffffffe, 0x0, 0x9}, [{0x6, 0x20, 0x7fff, 0x5, 0x1f00000000000000, 0x100000000, 0x1, 0xff80000000000000}], "a82b8df5183ced63c4e3d8ad9319fb83b4e357a061719db681f326e4d439a8faa61b", [[], [], [], [], [], [], [], [], []]}, 0x97a) 2018/04/10 00:29:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(chacha20-generic,poly1305)\x00'}, 0x58) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x5, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) 2018/04/10 00:29:48 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37}}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/193, 0xc1}, {&(0x7f0000000180)=""/8, 0x8}], 0x2, &(0x7f0000000200)=""/81, 0x51, 0x8}, 0x80000000}], 0x1, 0x2, &(0x7f0000000300)={r1, r2+30000000}) clock_gettime(0x6, &(0x7f0000000340)) [ 517.633776] binder: 1736:1747 got transaction to invalid handle [ 517.639977] binder: 1736:1747 transaction failed 29201/-22, size 0-0 line 2848 2018/04/10 00:29:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000007fffffff00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:48 executing program 6: r0 = socket$rds(0xa, 0x2, 0x11) sendmsg$rds(r0, &(0x7f000000afc8)={&(0x7f0000004ff0)={0xa, 0x4e21}, 0xe8, &(0x7f0000010000)=[{&(0x7f000000c000)=""/4096}, {&(0x7f000000e000)=""/79}, {&(0x7f000000f000)=""/255}], 0x0, &(0x7f0000002000)=[@rdma_dest={0x14, 0x29, 0x8}, @mask_fadd={0x0, 0x114, 0x8, {{}, &(0x7f000000f000), &(0x7f000000eff8)}}], 0x27}, 0x0) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000040)=""/100, 0x64}, {&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/122, 0x7a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/201, 0xc9}, {&(0x7f00000013c0)=""/26, 0x1a}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000001400)=""/69, 0x45}], 0x9, &(0x7f00000015c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x80000000, 0x4}, &(0x7f0000001540)=0xb855, &(0x7f0000001580)=0x9, 0xffffffffffff4a16, 0x0, 0xfffffffffffffff8, 0x4f, 0x15, 0x20}}], 0x58, 0x4040}, 0x20000001) 2018/04/10 00:29:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x20000805, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x57, 0x20, 0x9, {0x6, 0x40}, {0x6, 0x1}, @period={0x0, 0x3, 0xffffffffffffff9d, 0x3, 0x86, {0x2, 0x10000000000, 0x5, 0x40}, 0x3, [0xfffffffffffffbff, 0x0, 0x100000001]}}) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x30, 0x4) 2018/04/10 00:29:48 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xb}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) [ 517.797145] binder: undelivered TRANSACTION_ERROR: 29201 [ 517.802735] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 00:29:48 executing program 5: ptrace(0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='::,ile:\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f0000000140)) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0xd09a, 0x100000001, 0x8, 0x1000, 0x0, 0x2, 0x38400, 0x8, 0x7fffffff, 0x5, 0xfffffffffffffff9, 0x0, 0x6, 0x8, 0xc662, 0x1e64a4af, 0xff, 0x2, 0x8000, 0x5, 0x101, 0xd7e2, 0x1, 0x5, 0x9, 0x9, 0x7fffffff, 0x6, 0x5, 0xffffffffffffff01, 0x400, 0x8, 0x5, 0x9, 0xc21, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x100000000, 0xf54e}, 0x80, 0x7237c112, 0x20, 0x5, 0x1000, 0x3}, r0, 0xa, r0, 0xa) 2018/04/10 00:29:48 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r2, 0x10}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) dup3(r6, r5, 0x0) io_setup(0x3f, &(0x7f0000000100)=0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240)=0x1000, 0x4) io_cancel(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x8137, r3, &(0x7f0000000140)="8f0419aedc8038485f29434eae9bffa448e575bbb1ab25e7172ecdb0d40ab0d3453611095e0cf2f4f7189866a9b839877cdc08cb713cff7d01e7138e2b1a93e7300460", 0x43, 0x400000000000, 0x0, 0x1, r1}, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x20040000021}]}) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000280)={0x4, 0x9ff}) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x42, 0x1) [ 517.979910] libceph: parse_ips bad ip '::,ile' [ 518.008564] libceph: parse_ips bad ip '::,ile' 2018/04/10 00:29:49 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(0xffffffffffffffff, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:49 executing program 5: r0 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000017000)={&(0x7f0000015ff3)={0x2, 0x4e21}, 0x10, &(0x7f000000d000), 0x0, &(0x7f000000ef03)=ANY=[@ANYBLOB="580000000000000014010000080000000000000000000000", @ANYPTR=&(0x7f0000005ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001aff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000440000000000000014010000060000000000000000000000", @ANYPTR=&(0x7f000001bff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000009ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000011000000000000000000000001000000480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f000000f000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000004000)=ANY=[@ANYPTR=&(0x7f0000012000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000"], @ANYBLOB="010000000000000000000000000000000000000000000000580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f0000007000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001cff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb7}, 0x0) 2018/04/10 00:29:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:49 executing program 3: r0 = epoll_create1(0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x0, 0x0, &(0x7f0000000140), 0x48, 0x0, &(0x7f0000000180)="62164b44a5c310affb2298c023c7036e8915400419dae89cc59e3878ffffff00000000f7d7000003000000070718d1fc0e41a052600c828100000000100000bf244f0f2cc508303a"}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000260000)}) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xfffffffffffffff9, 0x418000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002fd0)={0x4, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="01634040"], 0x0, 0x0, &(0x7f0000002000)}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80000, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/10 00:29:49 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) prctl$setmm(0x23, 0x1, &(0x7f0000ffb000/0x3000)=nil) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x400804, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x83a, 0x6, &(0x7f00000000c0)="c49f0eca0dcfeff7526519359f056454726ebe9b56c38971131817256b809190d777f68a0ebb29e89d542b69db98884387cb53778beccf2fe0bb7a668460a9d57e43e4928b7ad13fa2efaff4a32345763be8ebfca4c95b1f67bab9f5b8334e12650176ae3ce075edb5f1de652d9bfd742e057fdf9926ed7f69408af9fd9505dc329c480fb3", 0x8, 0x7e, 0x9, 0x2, 0x3, 0x100000000, 0x683e04ca, "2eab365908baf79b7547e5684804b9fc50b724ebb5b75b990f165d1e7ab76d51dea9ee4cdc2d32b69130facfde2f1ebc07fed2e921e54e089df5a1de55ef53a5c7a97ca025e437dc80d464975d4839e629512f37115fb1ad3686b31ac17cc425e5aa6fc095f1bb684ae5108f8c3cdc7ed239fe3377dbc20c697089617525c237924cce3fcf6f31bb28fe22ad713845647d9a579c40a4774a094114b3b28f8798c9042abbb6fd190d99fa235502bd2951519f1ee981f435a6865ecddf14c2e93ce517"}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x2b}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa}, 0x1c) 2018/04/10 00:29:49 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x400, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000180)) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000040)=""/105, &(0x7f00000000c0)=0x69) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) 2018/04/10 00:29:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000fffffffffffff00000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:49 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xd00700000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x2000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x8000000000000, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000140), 0x213, 0xfffffffffffffffd) signalfd4(r0, &(0x7f00000004c0)={0xfffffffffffffffb}, 0x8, 0x800) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xd0dd, 0x84000) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000180)=""/87) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000200)) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0x4, 0xfffffffffffffff9, 0x65f3, 0x4}, 0x10) r2 = msgget$private(0x0, 0x400) r3 = geteuid() r4 = getgid() r5 = getuid() getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000440)={{0x3, r3, r4, r5, r6, 0x110, 0x1ff}, 0xffff, 0x6, 0x2, 0x4, 0x1, 0x2, r7, r8}) 2018/04/10 00:29:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 518.884148] binder: 1834 RLIMIT_NICE not set 2018/04/10 00:29:49 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000e8efa7)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) read(r0, &(0x7f0000000040)=""/45, 0x2d) write$evdev(r0, &(0x7f0000d20f58)=[{{0x77359400}}, {}], 0x30) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "11da1d4cfa115dc0a73a2adf7d4620d2187b8d79304c86b5a615204d6694"}, 0x2e) r1 = msgget$private(0x0, 0x8) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000100)=""/104) [ 519.691790] binder: 1834 RLIMIT_NICE not set [ 519.696307] binder: send failed reply for transaction 140 to 1832:1859 [ 519.703065] binder: 1832:1834 ioctl c0306201 20007fd0 returned -14 [ 519.703916] binder: 1832:1859 got reply transaction with no transaction stack [ 519.716781] binder: 1832:1859 transaction failed 29201/-71, size 0-0 line 2763 [ 519.728072] binder: BINDER_SET_CONTEXT_MGR already set [ 519.731782] binder: 1832:1859 ioctl c0306201 20007fd0 returned -14 [ 519.733503] binder: 1832:1834 ioctl 40046207 0 returned -16 [ 519.747538] binder_alloc: 1832: binder_alloc_buf, no vma [ 519.750921] binder: 1832:1860 got reply transaction with no transaction stack [ 519.753092] binder: 1832:1834 transaction failed 29189/-3, size 0-0 line 2963 [ 519.760361] binder: 1832:1860 transaction failed 29201/-71, size 0-0 line 2763 [ 519.786392] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/10 00:29:50 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000058024f0fabd30000030000000000755f"]) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x60000) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f00000000c0)) 2018/04/10 00:29:50 executing program 4: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xd00700000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:50 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(0xffffffffffffffff, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000080)=""/48, 0x30, 0x40000041, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) timerfd_settime(r2, 0x3, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$TIOCLINUX2(r4, 0x541c, &(0x7f0000000180)={0x2, 0x7, 0x40001000, 0x6cfb, 0x1, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001aff4)={0xffffffff80000009}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)={0x2001}) 2018/04/10 00:29:50 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xc4f7e759}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000ffffff9e00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:50 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast2, @in=@dev}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={"62726f7574650500", 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000bc0], 0x0, &(0x7f0000000140), &(0x7f0000000240)=ANY=[]}, 0x78) [ 519.796076] binder: undelivered TRANSACTION_ERROR: 29201 [ 519.807096] binder: undelivered TRANSACTION_COMPLETE [ 519.812299] binder: undelivered TRANSACTION_ERROR: 29201 [ 519.817884] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/10 00:29:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000f10700000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 519.875491] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 519.910860] kernel msg: ebtables bug: please report to author: Entries_size never zero 2018/04/10 00:29:51 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xd00000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:51 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000432fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x42}) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000013000)) dup2(r0, r2) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/04/10 00:29:51 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(0xffffffffffffffff, &(0x7f0000a6fff0)=[{&(0x7f0000881f92)=""/110, 0x6e}], 0x1) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:51 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='md5sumeth1\x00', 0x2) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)={0x0, 0x7fff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000060b000)={0x2, 0x4e26, @multicast1=0xe0000001}, 0x28b) connect$inet(r1, &(0x7f0000936000)={0x2, 0x4e22}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 2018/04/10 00:29:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000200000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:51 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000540)) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000200)=""/128, 0x80}, 0x0) unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0x50, &(0x7f0000000180)}, 0x10) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000140)=0x54) pipe(&(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000840)='\x00', 0x2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000008c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) sendmmsg$alg(r3, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001840)="7c3c2c17750f939e9017490e1bb658b202cd765305d52f24f68785bd3ef1fd25542e216ccc394a68c2dbbc20cbe2b8c5aab1", 0x32}], 0x1, &(0x7f0000001b40)=ANY=[], 0x0, 0x4000}], 0x1, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000600)=""/77, 0x4d}, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000740)='fou\x00') sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000814}, 0x4000000) getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000580)=""/31, &(0x7f00000005c0)=0x1f) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffff, 0x2, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r7}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2=0xe0000002}, 0xc) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'sit0\x00'}) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x6ae3, {0x2, 0x7e, 0xffff, 0x1, 0x6, 0x2}, 0x3, 0xffffffffffff0001}, 0xe) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000480)=[{&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000000300)=""/195, 0xffffffffffffffe5}, {&(0x7f0000000400)=""/26, 0x1a}], 0x3, &(0x7f00000004c0)=""/22, 0x16, 0x240000000}, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount(&(0x7f0000e84ff8)='./file1\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f00009ee000)='autofs\x00', 0x80, &(0x7f00005b7f24)="936602ffb5312b579d0c7d6fce26fbd19847e8af260b25ee22b126df259e8b3f3901d252260518d2d1d83c86a457490d996a28ffcaf9982375ab6b44431f1f40ad57ff810f52765be6442c") r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x610000, 0x0) setsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, &(0x7f0000000080)=0x9, 0x4) 2018/04/10 00:29:51 executing program 4: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x5011, r0, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x30000) pread64(r0, &(0x7f0000000000)=""/50, 0xffffff7f, 0x1fffffffffffd) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x3, 0x2, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x2}}) 2018/04/10 00:29:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000007f1000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 520.176005] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 00:29:51 executing program 4: setrlimit(0x1000000000000007, &(0x7f000068d000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) mq_open(&(0x7f0000000000)='-$\x00', 0x0, 0x0, &(0x7f0000664fc0)) 2018/04/10 00:29:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x101001) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0x1, 0x5, 0x2, 0x3f, 0x6, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x1, 0x0) connect$ipx(r2, &(0x7f0000000440)={0x4, 0xd5, 0x3, "028f689704e8", 0x80000000}, 0x10) r3 = perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)="7569645f6d617000ca3f8f449c59f676dcded5aa0c985fd31263ffa7a464c5446cd675558aa0b5527e7d684d03d141fac2cbcfff030039d0c24512d982de5a34913a329efbef77b1f92f4cbe61ff4e01584138ec2ad2505b7406bac79c2e452bb7110afc2beb129d85ea7732499a0c09ee75bef830491998973efe81e67845a1001faa9cb1f657a85b74258fe1dd970ab9bdb16e1812e1c97023f6743e9cb82e4fb1ae4bc41739909e49a2") writev(r4, &(0x7f0000b97000)=[{&(0x7f00004f2fff)='0', 0x1}], 0x1) getsockopt$inet6_tcp_buf(r3, 0x6, 0x2e, &(0x7f0000000300)=""/33, &(0x7f0000000340)=0x21) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000280)={[0xd000, 0x5000, 0x101000, 0x7000], 0x6, 0x90, 0x400}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000000)=0xfff, 0x4) sendmsg$nl_generic(r5, &(0x7f00009f2000)={&(0x7f000007cff4)={0x10}, 0xc, &(0x7f0000226000)={&(0x7f00008bc000)={0x20, 0x11, 0x2ff, 0x0, 0x0, {}, [@typed={0xc, 0x0, @u32}]}, 0x20}, 0x1}, 0x0) r6 = eventfd(0x1f) poll(&(0x7f0000000040)=[{r6, 0x1}, {r5, 0x1772}, {r5, 0x1}, {r5, 0x400}, {r5, 0x2000}, {r5, 0x2201}, {r5, 0x200}, {r5}, {r5, 0x1}, {r5, 0x1000}], 0xa, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0xbfb) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000380)=""/86) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') fcntl$getownex(r3, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x3, 0x3, 0xfffffffffffffff8, 0x0, r7}) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x0, @multicast2=0xe0000002}, 0xa) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000000100)=ANY=[@ANYBLOB="07000000bc3315ef3c0c4a000200006900000000066441e2c36009db661a28a48959ea32a18436b81ee172fdc665fa8c00cb1de41eecb3f07963403afc3bf061b9b0c3c6c80c99d8f80a"], 0x383}, 0x1}, 0x0) 2018/04/10 00:29:51 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xffffffff00000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:51 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000f0ffffff00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158}, {&(0x7f0000002b80)=""/6}, {&(0x7f0000002bc0)=""/87}, {&(0x7f0000002c40)=""/42, 0xff78}, {&(0x7f0000002c80)=""/38}, {&(0x7f0000002cc0)=""/69}], 0x948f7dcf9dea0b1) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000002000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:51 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6fd52a0e, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000002c0)={"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"}) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(tnepres)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)="87237aa8ce2ee265cf123500000000", 0xf}], 0x1}, 0x0) [ 520.593672] IPVS: ftp: loaded support on port[0] = 21 2018/04/10 00:29:51 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000fffffffffffff000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:51 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd27, 0x25dfdbfc, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x801) r2 = socket$inet(0xa, 0x2, 0x0) sendmsg(r2, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f0000000500)}, 0x0) 2018/04/10 00:29:51 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000100)="691e6737eaa1f854e5002a61900d6ef8c5095230229d6f40b3cad132a2c6566c82ee51aeba888ed2df66a76cb6bee7a0a08bc5e9ec66522589ff84050000", &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000000180)='trusted\x00', 0x0) 2018/04/10 00:29:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x1, 0x4, &(0x7f0000000000), 0x0) 2018/04/10 00:29:51 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000080)) 2018/04/10 00:29:51 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x14280000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000007f100000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:52 executing program 6: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) r0 = syz_open_procfs(0x0, &(0x7f0000593ff6)='ns/cgroup\x00') setns(r0, 0x0) 2018/04/10 00:29:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x200000000074ac3f) r1 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x7, 0x4000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22}}, 0x6, 0x3ddd759e, 0x40, 0x5, 0x9}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={r2, 0xfffffffffffffe01}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r2, 0x7, 0x8, 0xffffffffffff8000, 0x5, 0x180}, 0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r2, 0xba7}, &(0x7f0000000140)=0x8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0bc5310, &(0x7f00000000c0)) 2018/04/10 00:29:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x403, 0x800) ioctl$int_in(r0, 0x5473, &(0x7f0000000040)=0x5) 2018/04/10 00:29:52 executing program 3: unshare(0x8000400) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) iopl(0xffffffffffffff69) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000c00)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rfkill\x00', 0x101, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000980)=0x7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r1, 0x61e}, 0x8) unshare(0xc000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000680)=0x4) r3 = perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000340)=@pppoe, 0x2ea, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f00000007c0)=""/75, 0x4b}, {&(0x7f0000000880)=""/85, 0x55}], 0x5, &(0x7f00000009c0)=""/199, 0xc7, 0x5e542a51}, 0x0) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="ddb7c9f85387995fda830870c2bcb79f2b9e9401dc57eff706cb03985193b9b694878b9ada1c64dc0d06eef073e1b159a5e0dee4147d185ddbc502589297428e6ab36984c5f2b12b8e88758715ad8e40049c5781c800a9", 0x57, 0xfffffffffffffffa) r5 = semget(0x2, 0x0, 0x40d) semctl$SEM_STAT(r5, 0x4, 0x12, &(0x7f0000000b00)=""/253) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000cc0)="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") keyctl$assume_authority(0x10, r4) getsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x3d0f, 0x2}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)=0x9, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='user\x00') 2018/04/10 00:29:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000f000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:52 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x600}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:52 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:52 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)=@sco, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/22, 0x16, 0xfffffffffffffffd}}], 0x1, 0x0, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x22, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_delete(r1) 2018/04/10 00:29:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000fffffff000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:52 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000002c0)=0x7ff, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x400}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x100000001, 0x4, 0xbc5}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000280000fa00000000000000000a00000000000000fe8000000000000000000000000000000000000054215d884a4d6914794aa27dac933a229d04b49f5aa15dd23a9b3ee098358381edb63e3af9cc216e44a1db160aad81a7f0317723b383d0fcc7679cb594f1bb0672f3382a98e04d5ef1f24b64bc146e4601fd484a73744acc5f7eb448b0b69ee00b6654fa456cbb91842166945a65f8d81a8edfafe3c8264e8bbba8878931d669a590cbe195ad4294d2f4fa17725b79dfc1d53f7c8e2c5bbd4fc43f17bdb5553ad3298c81c2a7769b5d", @ANYRES32=0xffffffff], 0x30) 2018/04/10 00:29:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setns(r0, 0x40000000) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000625000), 0x4) fcntl$setlease(r0, 0x400, 0x1) 2018/04/10 00:29:52 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{r1, r2/1000+10000}, 0x7, 0x494f, 0xfffffffffffffff9}, {{r3, r4/1000+10000}, 0x10001, 0xffffffffffffffe0, 0x6}, {{r5, r6/1000+30000}, 0x0, 0x0, 0x1}, {{0x0, 0x7530}, 0x7, 0x53, 0x2}, {{}, 0x8, 0x3, 0x2}], 0x78) fcntl$setstatus(r0, 0x4, 0x2803) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000001c0)) pwrite64(r0, &(0x7f0000000000)='^', 0x1, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/04/10 00:29:52 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x8}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000fffff00000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) sendfile(r0, r1, &(0x7f00000ddff8)=0xe00, 0x102000001) tee(r1, r1, 0x0, 0x3) 2018/04/10 00:29:52 executing program 6: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="6aaa231ab1a09e083263cc97b2531999ef7c197688968775c1cdd29ab4bb752138475e4dcd9ae09d0921dd9f9b05a0e2df55ca7ea9ddc59923180411084fcb0a245852d59f0937528a33b6f3a239e817da399d30b28e7b97f8da14731df6c4de32906e43b686155ff76c279337682f3bd0d502d886e1fb880e0eb25032dce27ee6ac677f217fdb2909317ed6c3a6f91e9ee7bfb193dcedc3ec0b8f12b89aea4e9fb576360ea7f53ef9371f619a1cedca01cddbf20e7d91b122afb30165e16dd946a664290d56ea068f77100289eb855c2a7868e6aa436484b720f92706622d", 0xdf, r2) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x4e20}, 0x1c) 2018/04/10 00:29:52 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0), 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:52 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@mcast2, 0x0}, &(0x7f0000000040)=0x14) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000070c00000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="020000400100000002000000000000002bac4c9ca98ba81b7085920d19842f30652db8911f544fca09ebfc2a38af373cd92b3245c9d0d7000000000000000000000000000000000000000000"], 0x80}, 0x1}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x40) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x5e20, 0x401, 0x4e20, 0x3ff, 0xa, 0x80, 0x80, 0x3b, r1, r3}, {0xfffffffffffffffe, 0x5f57e252, 0x6, 0x22e, 0x80000000, 0x9, 0x2, 0xfffffffffffffffd}, {0x0, 0x401, 0x401, 0x6}, 0x7, 0x6e6bb9, 0x2, 0x0, 0x2, 0x2}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d5, 0xff}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3507, 0x7, 0x2, 0x3, 0x4, 0x2, 0x200}}, 0xe8) clock_settime(0x3, &(0x7f00000000c0)={0x0, 0x989680}) 2018/04/10 00:29:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000f0ffffffffffff000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:52 executing program 6: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000084}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x6, 0x40000) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/12) 2018/04/10 00:29:52 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000000000ffffff9e000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:52 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x100000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:52 executing program 6: syz_emit_ethernet(0x36, &(0x7f0000af0000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1=0xe0000001}, @tcp={{0x0, 0x883e, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) socket$inet6(0xa, 0x6, 0xb8) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=""/99, &(0x7f0000000100)=0x63) listen(r0, 0x10001) 2018/04/10 00:29:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x3d, 0x20020003, &(0x7f0000385ff0)={0x2, 0x20000000004e21, @loopback=0x7f000001}, 0x10) recvfrom$inet(r0, &(0x7f0000000300)=""/149, 0xffffffffffffff39, 0x40000003, 0x0, 0xffffffffffffff7d) 2018/04/10 00:29:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000b0000040000003000000ffefffffffff000000200000000100000001000000004a7bc35802f8501c30f91cfe0e5c8228a7e7743183c512ac83f7c163d9670accbc76c53efa3c075539a38d0b0ea3c66d2bfdf2178110d20d37cecd87a0f7d561fee06fe1eafcc15390f70892c4976ad6fac6fc7fd28aeb2171ba7f98ee30cb65c677a6566c64c3d5e984909e5d402229f822d5da990fbee4529b228c17b86ae706116d8ca634b42cdde23510acbd3314908425895b6e4cb3b0ffa0afd52ddc277eb154"]) 2018/04/10 00:29:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000007fffffff000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000f0ffff00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:53 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:53 executing program 5: r0 = memfd_create(&(0x7f0000002901)='dev ', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/147, 0x93, 0xfffffffffffffffb, &(0x7f0000000000)={0x0, 0x989680}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/101) 2018/04/10 00:29:53 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xd00700}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x400000000e) r1 = shmget$private(0x0, 0x2000, 0x430, &(0x7f0000000000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x4000) ioctl$FIONREAD(r0, 0x80047437, &(0x7f0000000080)) 2018/04/10 00:29:53 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4801, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000140)={&(0x7f00006ac000/0x3000)=nil, 0x3000}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) socket(0x1e, 0x1, 0x0) close(r1) r2 = add_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000440)="4641eee255721ed6ff606eddcc1b55963aeb32edfb1be7313326dda84c41a15340c9567bf6b4f4afbca3ca387a605fcc7ac692f50758e07dbeba35cc1d6cca373c323b4a13691287fad64febbcfa898f835d02ca47316af4f7120500b449f737b6dd5c9c018f049bdc078a42a44464c2840eb79c4c474c7d3da6714bf28c59b0b4e21b41987e1570a6c9cf03992c142b193c5b96345340ddd6739baa7f7f87f4ddb866c5d80fdf9223aabcf1b5939630d3ed6771411b23af7bbd4060ead6e76b6438d6", 0xc3, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="600001e3a255ec4a8d9d652d0527abdffd0587e50ec159997396abc344a7d9f542a3e3af2d90a5df424d68996f51a7b3f20108f152bfd57ac5a50be84a106249abbfc5b3f2e96bf3039474801001807fbf00000000000000000000000000000000", 0x61, r4) r5 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r4) r6 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000f19edc)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea", 0x8c, r4) r7 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="2f6465612f7675746f66730719", r3) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r5, r6, r7}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000180)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x20000000cdfb, 0x20020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000035c0)={'teql0\x00'}) r8 = memfd_create(&(0x7f00000001c0)="2f6465612f7675746f66730719", 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r8, 0x0, 0x0, 0x0) fchmod(r8, 0x0) r9 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r10 = socket(0x0, 0x3, 0x0) recvmsg$netrom(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@ax25={0x3, {"8aafabddcfcc23"}}, 0x10, &(0x7f00000004c0)}, 0x0) write(r10, &(0x7f0000000080)="240000005a005f191415f507125a00000903210308001000fff708", 0x1b) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x106}) r11 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x80000001) r12 = dup2(r11, r9) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'}) 2018/04/10 00:29:53 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) lseek(r0, 0x7ffffffffffffffb, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x8f, 0x230000) read(r0, &(0x7f0000c6bf5d)=""/163, 0xa3) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/04/10 00:29:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000000000fffffff0000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:53 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r1, 0x4, 0x800) readv(r1, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r1, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x400000000000003c, &(0x7f0000000040)="16fc735811bfccd814276b056fbb965479ad59dd0dc81cfee47a93a9262c85b777e8551459ae6d20c83d5812ac518727502f8149b419045c19a440f59b00000000004375ea4cc9ccfecc2ead326df20b92cf8d49488116edc30c96700c5fa2910ce3a669dfea3e3210a06c21b9c19068ba567569eee300cf23f284b22031fa63b1dfc0734db0cd12fb60d89af34a27580fd428ae097e90000000000000000000000000000000", 0xa6) signalfd(r0, &(0x7f0000000000), 0x8) 2018/04/10 00:29:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:54 executing program 6: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400180, 0x0) sendto$ax25(r2, &(0x7f00000000c0)="b7a0754b013505628e5985228305d16f681dc2b0f9f4be9802f074ff7bde731f37e19bef7437c6a29421ef01dbf3bccc960df807adc5f4750897c068ffd2483873d34ac735b917e4c1a175a126561570368d35ad8623386642b82930e687f303e2f5ce", 0x63, 0xc0, &(0x7f0000000140)={0x3, {"1a6a1915ba30bf"}, 0xfffffffffffffc01}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000021ff0)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffffffffffff000}, {0x6}]}, 0x10) write$eventfd(r1, &(0x7f0000000040), 0x8) 2018/04/10 00:29:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00005e1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="75c56b33cce5461a8a406703bf330eff52f42c33db51cdb91a24454bb7c3b7b397650e18948167dcc252bbe0810bc444004bfaf6dea2abbeeffd673c49748b742cd82f72ca2d563ccdc147", 0x4b) fallocate(r0, 0x1, 0x8001, 0x400) 2018/04/10 00:29:54 executing program 7: syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f00000003c0)="b886008ed0b801018ec8660f08660f6d57053ef0f6990100ea8e28a6003664a60f00de0f01c9f3f3f4", 0x29}], 0x1, 0x0, &(0x7f0000000340), 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000240)=0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000600)) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000005c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f00000001c0)="b9880a0000b800000000ba000000000f30b8010000000f01d9b9960a00000f32430fc72ec46219a8f5460f01cbc46225079d8000c0feb9800000c00f32b9800000c00f3235000400000f30460f01f8", 0x4f}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, [0x0, 0x72, 0x0, 0x0, 0x2, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f226066b87df9eab10f23c00f21f8663500000d000f23f8b88e000f00d00f236fbaa10066b8ca4f000066eff966b9800000c00f326635002000000f300fe8d39a0f0043000f01df", 0x48}], 0x1, 0x0, &(0x7f00000000c0), 0x1d8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_delete(0x0) 2018/04/10 00:29:54 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xb000200}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000ffffff9e00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="16f71c000000000000000000000000f5873fe33e7dfc00000000000000000000000000"], 0x1c}, 0x1}, 0x0) 2018/04/10 00:29:54 executing program 3: sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) clone(0x400, &(0x7f0000000040)="6ab82289af70a9c271ebe29181e9428a0d10d58d2215ec6c39dbbe007552cf01997728debdfdb09b0f1c045c410bd73217d786dec1e451a5b9ea60533c1d1c4fa0daab198400da137cc98fee9e3fd1ffeec72102381a784ccf2cab1a6e5b2ec69c9bf6d85c23023a11292680a2e09ba1a064360af3db5f14b3121e8fa08287c22a0c8db967e46fc2e11b2d0e0a713cceb4ace39079cbde56cd1136", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="545553c7bab876cd4a793429b04246fc0c41f432e713b7edf13657d2a5a7e5f9d14c2004a0324328c812205ebee5b8be30f9918e5aef0eb9eed6ed060155b40fbcc824bcf3bd754b6ab36fbf8c33d817b8e41dc622023b7fdbd0e7eb49536de6ee68d264348f1097ac96b3c981166e4df3d9e9336de49ed3b18571afc6baa2a5d94e2970c4367d0368c4258aef2abcef1d24b5f7c4f83464d07a46eb8af5861fe5b3eb44e8531c3d11107251a04fe56a5a48081756691444a71fe7ea47eb4d78228bdf3cb9970fdf81be8993578119a0c8e7563db041d41704d4f6510e9c7f9262ad74b6c8d03c83766bcddd") pkey_alloc(0x0, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, r0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000031dffc), 0x400000085, 0x0, &(0x7f0000004000), &(0x7f0000000000), 0x4030000004) 2018/04/10 00:29:54 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x186a0}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000007fffffff00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:54 executing program 7: syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:54 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x100) bind$netrom(r0, &(0x7f0000000040)=@full={{0x3, {"3df2293fa6caf1"}, 0x4}, [{"fc978672a03e97"}, {"fdfca41eb05418"}, {"b7aef91aa83dee"}, {"9ddab798871cdb"}, {"b61df6d3260fe7"}, {"79707c55f9cd46"}, {"87be82568fac87"}, {"61197e17e702c4"}]}, 0x48) socket$inet(0x2, 0x80003, 0xab) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast1, @multicast1, 0x0}, &(0x7f0000000200)=0xc) sendto$packet(r0, &(0x7f00000000c0)="2c2d24898e66177e26485e96b036cf15cf5966560eb0e9f52158a7d8e003bd11ae3fca1e528b483d38122a046ab934bdf2153b0dd511145a7e78ac85ef655c58fb6a2d4e96d0f217567e944a84b24b8517533b50602341657d4c0a8f1319d346ccbd5f3167c1dd74bd772a9aa8de8cf09503da7e97e1fac187548e38d97c8d51e1625e9ac7dd15cde76fcf1da1c174b6cf08ea2ba2b4398e1a8c6959d82e8c58dce85c418e0647310c9588222311f9fba26244e403af46afe2c3d3", 0xbb, 0x4000080, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2018/04/10 00:29:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000affff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000b15fc8)=ANY=[@ANYBLOB="0100000000000000004000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x10000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x65, "4ba7d6167550116d1d94051bc51210dedd5337d478449e168435ec101cfacaba6bdd09f887a51ed598c550730c97a15d6653456d8ddd478a4f0fb329f2ebff05a008f10c1cbefb939f0ec1f2d020dc10d216437d8a8195d2ec0fad7910265fb37c212d48de"}, &(0x7f0000000100)=0x6d) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f00000003c0)={0x5, 0x6, 0x4, 0x10001, "2e0e2abd0f7710f978fe13185c51f641c704c9be472098d662aa80a77decc71e1bd26e4a50383d6643aa470d", 0x3f}) connect$rds(r0, &(0x7f0000000400)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xe4, "7596e0d874cee83f2825d7222bf19645f6d5f4bfa3c20c8e5ce0eb60685d94c520ca0ce870ec50cf02ca67aba3db7e6d1fcaa312f5d67f5bdcadb93ec31e187ebfab186a1c05483daa4e8d8668ce15715d1d19fb8fd1326926bc4cd2bcf80c0782d18c44a07bbbc6d8d9a9d09ed990080588995cee6844f7f2476e6c0f7b7ef26e99ac864261a266e4576f0502f0eb3fb9cd93c008b5a8e43928c59a4ca9b18b9e5c44d5f79609e1507c30a4b4b54d02cbaa02be0c3d6ed579ad13935c91807da3dccce12fa1c91ed64121ec6ccdb20b2d4c9b11802437a1c6360f38edf70f364e5b89c7"}, &(0x7f0000000240)=0xec) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000280)={r4, 0x5, 0x800, 0x5, 0x2, 0x5, 0x40, 0x3, {r6, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0x1, 0x5, 0x7, 0x7f, 0x6}}, &(0x7f0000000340)=0xb0) 2018/04/10 00:29:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000200000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:54 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xf00}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000009effffff00000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:54 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffffffffffff0f12, 0x10000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x5, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d80)=ANY=[@ANYBLOB="01000000000000000000000000000000e400000000000000", @ANYPTR=&(0x7f0000000c80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/04/10 00:29:54 executing program 4: r0 = gettid() exit(0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(r0, 0x0, &(0x7f0000000040), &(0x7f0000000140)) prlimit64(0x0, 0x0, &(0x7f0000001240)={0x3}, &(0x7f0000001280)) timer_create(0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, @thr={&(0x7f0000001080), &(0x7f00000010c0)}}, &(0x7f0000001180)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x5d, 0xffffffff, 0x5, {}, 0x7f, 0x80000000}) 2018/04/10 00:29:54 executing program 7: syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x40000000000005) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:54 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000a82000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x4, 0xfe, &(0x7f0000000000)=""/254}]}) pwritev(r0, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x400, 0x0) openat$cgroup_type(r1, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x40096101, &(0x7f0000b1cf88)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, {0x2}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000b89ff0)}) getsockname$ipx(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) 2018/04/10 00:29:54 executing program 5: r0 = syz_open_pts(0xffffffffffffff9c, 0x200) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000100)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0xfffffffffffffff7, 0x0, 0x5, 0x3}, 0x8) mq_unlink(&(0x7f0000000040)='drbg_pr_hmac_sha512\x00') setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="0a0775b005f78be00fe381e5b3b60ced5c54dbb7295dd3df8217ced1ec2c000057c2bbca7806b1b0e41dadd2efef5bccceacc748dd5a95a48397ed3935a3a77d61", 0x41) [ 524.003718] QAT: Invalid ioctl [ 524.024242] QAT: Device 2 not found 2018/04/10 00:29:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000f107000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 524.058843] QAT: Invalid ioctl [ 524.073345] QAT: Device 2 not found 2018/04/10 00:29:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x800, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)=""/151, &(0x7f00000002c0)=0x97) 2018/04/10 00:29:55 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'bond0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = shmget(0x2, 0x4000, 0x208, &(0x7f0000ffa000/0x4000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) bind$vsock_dgram(r1, &(0x7f00000006c0)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x8, 0x80) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text32={0x20, &(0x7f0000000600)="9a8000c0fe05012e0f01ca0f009c4c00600000f3d0fc660f708d2556e51ca60fc7581664670f01df66ba200066ed0fa00fae4802", 0x34}], 0x1, 0x0, &(0x7f0000000680)=[@efer={0x2, 0x2000}, @dstype0={0x6, 0x7}], 0x2) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = fcntl$getown(r1, 0x9) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000004c0)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000500)={{0x4, r3, r6, r7, r8, 0x4, 0x5a}, 0x2, 0x7, 0x3ff, 0xfffffffffffffffb, r9, r10, 0x3f}) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'ip6tnl0\x00'}}, 0x1e) unshare(0x8000000) r11 = dup2(r1, r0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r11, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 2018/04/10 00:29:55 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x200000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:55 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001540)={0x0, @local, @remote}, &(0x7f0000001580)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000015c0)={r2, @loopback=0x7f000001, @rand_addr=0xd3}, 0xc) bind$alg(r0, &(0x7f000048d000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00009f9000)={0x0, 0x0, &(0x7f0000d58ff0), 0x4d, &(0x7f00005e5000), 0xfffffffffffffd8c}, 0x8000) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r4, 0x0, 0x0, 0x40007) sendfile(r3, r4, &(0x7f0000ccb000), 0x357) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x7) 2018/04/10 00:29:55 executing program 7: syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000000000000007f1000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000280)={0x0, 0x0, 0x99}, 0x5) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) socket$inet(0x2, 0x800, 0x7ff) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000003000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}, {0x0, 0x401}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x800) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0x56, 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) 2018/04/10 00:29:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:55 executing program 5: chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x6, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r1}, 0x10) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7, &(0x7f0000000200)={0x3}, 0x8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)=0x7, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280), 0x4) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f42a6eabf0398fa6e17799807b0dfcc0fb", 0x11}, {&(0x7f0000000300)="d56f5170060fe1fae3f582fb43dd658e6975fc08386b0f22837ed8692001cad2f83f51799f3bd632b8b022ac80a90326c856e1ea1060a3c95173e8223d948fd510227884bc6f1363c001a76b65c1ce9a142f915e4891fde2b5d718e5372c32c0a414582a35dcdc4f883381d50ada1f3325e6941888914c9ac83cece09504c0a772cd06dba80b85e06dc3f2ceea6e7468edfcd46af4409745b6ac8a0b625e", 0x9e}], 0x2, 0xb) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc\x00', 0x40100, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000440)=0x7) syz_mount_image$xfs(&(0x7f0000000480)='xfs\x00', &(0x7f00000004c0)='./file0\x00', 0x400, 0x5, &(0x7f0000002680)=[{&(0x7f0000000500)="57265b8f60c1c24d46912da401766f51882ad728405c6e4d6bea536f0fac902551e38eec84d4a3027082283d82c9ce8bda9b1be9576e7daca210f5f4af8913750b57b84e0927ea463f990f20493b4effab917d184e3c11180b954ba3a7662729e5246c01", 0x64, 0x5}, {&(0x7f0000000580)="adf20af182b69f05f744a4ba3daac1643326bee48ab2555e62045a33fd4868cd88f4daf0681d7f691ffbd16e2460ba333be4ff6404a5dc85d83f049dabddb3cc05d978dacce3f0176d44dc4e45f80b06d005723617deff64322a26742fa6f801a1252cb3609a879b1dcbcc1167543cfc35d1836d0ea2f06b9d657805ce9be5", 0x7f, 0x4}, {&(0x7f0000000600)="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", 0x1000, 0x1000}, {&(0x7f0000001600)="4bfd081b8b20467b0bc4c0186f3c6e54c175c5e3df6d971c52bf8f47a2ab4c5cb42dd93d291dcb672623232e6c671dadbc3172c235845c3f0bbbb0f4002f023a594a843fe74475413283ae10", 0x4c, 0x6}, {&(0x7f0000001680)="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", 0x1000, 0x89}], 0x400, &(0x7f0000002700)={'nouuid,', {[{@usrquota='usrquota', 0x2c}, {@logbsize={'logbsize', 0x3d, [0x35]}, 0x2c}, {@pquota='pquota', 0x2c}, {@noquota='noquota', 0x2c}, {@dax='dax', 0x2c}, {@usrquota='usrquota', 0x2c}, {@mtpt='mtpt', 0x2c}, {@logbufs={'logbufs', 0x3d, [0x39, 0x0, 0x36]}, 0x2c}]}}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000002780)='/dev/audio\x00', 0xaf4fdfe03042ace9, 0x0) inotify_init1(0x80800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000027c0)={0x0, 0x1000, "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"}, &(0x7f0000003800)=0x1008) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000003840)={r4, 0x6}, 0x8) bind$alg(r3, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r5 = dup2(r3, r2) mkdir(&(0x7f0000003900)='./file0\x00', 0x12c) rename(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)='./file0\x00') recvmmsg(r5, &(0x7f000000da40)=[{{&(0x7f00000098c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000009e80)=[{&(0x7f0000009940)=""/207, 0xcf}, {&(0x7f0000009a40)=""/96, 0x60}, {&(0x7f0000009ac0)=""/90, 0x5a}, {&(0x7f0000009b40)=""/227, 0xe3}, {&(0x7f0000009c40)=""/37, 0x25}, {&(0x7f0000009c80)=""/52, 0x34}, {&(0x7f0000009cc0)=""/146, 0x92}, {&(0x7f0000009d80)=""/142, 0x8e}, {&(0x7f0000009e40)=""/62, 0x3e}], 0x9, 0x0, 0x0, 0xb2}, 0xea}, {{&(0x7f0000009f40)=@hci, 0x80, &(0x7f000000b300)=[{&(0x7f0000009fc0)=""/22, 0x16}, {&(0x7f000000a000)=""/149, 0x95}, {&(0x7f000000a0c0)=""/39, 0x27}, {&(0x7f000000a100)}, {&(0x7f000000a140)=""/4096, 0x1000}, {&(0x7f000000b140)=""/136, 0x88}, {&(0x7f000000b200)=""/231, 0xe7}], 0x7, &(0x7f000000b380)=""/255, 0xff}, 0x3}, {{&(0x7f000000b480)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f000000b780)=[{&(0x7f000000b500)=""/54, 0x36}, {&(0x7f000000b540)=""/190, 0xbe}, {&(0x7f000000b600)=""/145, 0x91}, {&(0x7f000000b6c0)=""/144, 0x90}], 0x4, &(0x7f000000b7c0)=""/20, 0x14, 0x9}, 0xfffffffffffffd21}, {{&(0x7f000000b800)=@hci={0x0, 0x0}, 0x80, &(0x7f000000b900)=[{&(0x7f000000b880)=""/120, 0x78}], 0x1, &(0x7f000000b940)=""/193, 0xc1, 0x8000}, 0x2}, {{&(0x7f000000ba40)=@generic, 0x80, &(0x7f000000bd80)=[{&(0x7f000000bac0)=""/154, 0x9a}, {&(0x7f000000bb80)=""/4, 0x4}, {&(0x7f000000bbc0)=""/83, 0x53}, {&(0x7f000000bc40)=""/118, 0x76}, {&(0x7f000000bcc0)=""/69, 0x45}, {&(0x7f000000bd40)=""/16, 0x10}], 0x6, &(0x7f000000be00)=""/167, 0xa7, 0x3f}, 0x200}, {{&(0x7f000000bec0)=@can, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000bf40)=""/51, 0x33}, {&(0x7f000000bf80)=""/226, 0xe2}, {&(0x7f000000c080)=""/100, 0x64}, {&(0x7f000000c100)=""/59, 0x3b}, {&(0x7f000000c140)=""/159, 0x9f}, {&(0x7f000000c200)=""/51, 0x33}, {&(0x7f000000c240)=""/13, 0xd}, {&(0x7f000000c280)=""/166, 0xa6}, {&(0x7f000000c340)=""/84, 0x54}, {&(0x7f000000c3c0)=""/4096, 0x1000}], 0xa, &(0x7f000000d480)=""/142, 0x8e}, 0x200}, {{0x0, 0x0, &(0x7f000000d8c0)=[{&(0x7f000000d540)=""/154, 0x9a}, {&(0x7f000000d600)=""/229, 0xe5}, {&(0x7f000000d700)=""/216, 0xd8}, {&(0x7f000000d800)=""/65, 0x41}, {&(0x7f000000d880)=""/36, 0x24}], 0x5, &(0x7f000000d940)=""/194, 0xc2, 0x5}, 0x28}], 0x7, 0x40012000, 0x0) sendmsg$can_raw(r0, &(0x7f000000dcc0)={&(0x7f000000dc00)={0x1d, r7}, 0x10, &(0x7f000000dc80)={&(0x7f000000dc40)=@can={{0x2, 0x7, 0x1, 0x400000000000000}, 0x8, 0x2, 0x0, 0x0, "6c8774e0810c4382"}, 0x10}, 0x1, 0x0, 0x0, 0x84}, 0x80) r8 = syz_open_dev$midi(&(0x7f000000dd00)='/dev/midi#\x00', 0x9, 0x2) connect$bt_rfcomm(r2, &(0x7f000000dd40)={0x1f, {0x0, 0x6, 0x8, 0x6, 0x9, 0x80000000}, 0x1}, 0xa) getpeername$packet(r6, &(0x7f000000dd80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f000000ddc0)=0x14) ioctl$TCGETA(r8, 0x5405, &(0x7f000000de00)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) creat(&(0x7f000000de40)='./file0\x00', 0xaf) r9 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) r10 = getuid() getresgid(&(0x7f000000de80)=0x0, &(0x7f000000dec0), &(0x7f000000df00)) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f000000df40)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f000000e040)=0xe8) r13 = getegid() ioctl$TIOCGSID(r3, 0x5429, &(0x7f000000e080)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f000000e0c0)=0x0) shmctl$IPC_SET(r9, 0x1, &(0x7f000000e100)={{0x9, r10, r11, r12, r13, 0x45, 0x5}, 0x7, 0xda, 0x2, 0x3, r14, r15, 0x62c}) 2018/04/10 00:29:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000100000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00007b5000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000000)='P', 0x1, 0x8004, &(0x7f0000001100)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x202) sendto$inet(r0, &(0x7f0000000240)="87ad45db27e1fac97a031f128997fe898f05856297615b370f4b11624b07", 0x1e, 0x20000001, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0xd727}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x98}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={r2, 0xd2, "50651302c247d72f792c7a71ddf3345390c51368cdc3b032f5bcc8ffed0c264ab0f2ae55e7f0c443ead23d16b35e1755a9e46727d8958b228b1e1c70754bdecd100151a371175218acdac859236e7fbefa74f5e45730843a22b41550b4c57990ad6d2fee6bfaf5738293cb18b06a0d891fa8973468d2c26a80e6710f244ba7b7c91e90cda040b479051998ca9cafc7c046a0177768772897768ba6585a8afed136562d9d62d1f578373596a55139073b82f653646296fda14699960eb20b3ca9c8f3c86bc269b397fa68b6474bf500292be8"}, &(0x7f0000000200)=0xda) sendto$inet(r0, &(0x7f0000becfff)='^', 0x1, 0x100000004007fff, &(0x7f0000109ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) 2018/04/10 00:29:55 executing program 4: getrandom(&(0x7f0000000040)=""/112, 0x90, 0x3) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4400, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x2100, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x34, "2ce96f3260d6a75406ab830c74effbb0c961fccdff2284519c90615534a2a6b35f56df9e9a85a94899b78187f26b7d2d8afcb539"}, &(0x7f0000000180)=0x3c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x8}, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r0, 0x7c4b8ff0478482a5) socket$vsock_stream(0x28, 0x1, 0x0) fchdir(r1) 2018/04/10 00:29:55 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x100000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:55 executing program 7: syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000480)=0x1c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0xd067, 0xe51, 0x6, 0x100000000, 0x9, 0x9, 0x8, {0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x0, 0x200, 0x22, 0x0, 0xff}}, &(0x7f0000000580)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000005c0)={r2, 0x1}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000080)={0x79}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000101}]}) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)) 2018/04/10 00:29:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x9, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) 2018/04/10 00:29:56 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x10000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:56 executing program 7 (fault-call:5 fault-nth:0): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget(0x3, 0x0, 0xc2) semctl$IPC_RMID(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f000024dff0)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x800000001, 0x0, 0x0, {}, [@typed={0x14, 0x12, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, 0x28}, 0x1}, 0x0) 2018/04/10 00:29:56 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x62002, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xffffffffffffffe2, 0x1, 0x4, 0x200, 0xffffffff, 0xef, 0xff, 0x100000001, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0x4, 0x30}, 0xc) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000040)) getsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f000091b000), &(0x7f0000ab2000)=0x4) [ 525.315143] FAULT_INJECTION: forcing a failure. [ 525.315143] name failslab, interval 1, probability 0, space 0, times 0 [ 525.326472] CPU: 1 PID: 2376 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 525.333311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 525.342658] Call Trace: [ 525.345254] dump_stack+0x1b9/0x294 [ 525.348891] ? dump_stack_print_info.cold.2+0x52/0x52 [ 525.354090] ? rcu_read_lock+0x70/0x70 [ 525.357997] should_fail.cold.4+0xa/0x1a [ 525.362061] ? unlock_page_memcg+0x2c/0x40 [ 525.366305] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 525.371421] ? page_add_new_anon_rmap+0x850/0x850 [ 525.376263] ? print_usage_bug+0xc0/0xc0 [ 525.380307] ? print_usage_bug+0xc0/0xc0 [ 525.384350] ? graph_lock+0x170/0x170 [ 525.388133] ? print_usage_bug+0xc0/0xc0 [ 525.392175] ? __wake_up_common_lock+0x1c2/0x300 [ 525.396915] ? find_held_lock+0x36/0x1c0 [ 525.400959] ? __lock_is_held+0xb5/0x140 [ 525.405024] ? check_same_owner+0x320/0x320 [ 525.409333] ? rcu_note_context_switch+0x710/0x710 [ 525.414244] ? alloc_set_pte+0x1077/0x16a0 [ 525.418465] __should_failslab+0x124/0x180 [ 525.422685] should_failslab+0x9/0x14 [ 525.426468] kmem_cache_alloc_trace+0x2cb/0x780 [ 525.431122] ? lock_downgrade+0x8e0/0x8e0 [ 525.435256] snd_pcm_oss_change_params_locked+0x1f9/0x3ce0 [ 525.440864] ? debug_check_no_locks_freed+0x310/0x310 [ 525.446036] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 525.451207] ? print_usage_bug+0xc0/0xc0 [ 525.455251] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 525.461114] ? print_usage_bug+0xc0/0xc0 [ 525.465157] ? debug_check_no_locks_freed+0x310/0x310 [ 525.470330] ? __lock_acquire+0x7f5/0x5130 [ 525.474548] ? debug_check_no_locks_freed+0x310/0x310 [ 525.479720] ? __lock_acquire+0x7f5/0x5130 [ 525.483940] ? debug_check_no_locks_freed+0x310/0x310 [ 525.489110] ? print_usage_bug+0xc0/0xc0 [ 525.493156] ? debug_check_no_locks_freed+0x310/0x310 [ 525.498338] snd_pcm_oss_change_params+0x80/0xe0 [ 525.503082] snd_pcm_oss_make_ready+0xbe/0x170 [ 525.507644] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 525.512465] ? __lock_acquire+0x7f5/0x5130 [ 525.516679] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 525.521068] ? find_held_lock+0x36/0x1c0 [ 525.525113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 525.530628] ? _parse_integer+0x13b/0x190 [ 525.534759] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 525.539931] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 525.544235] ? _parse_integer+0x190/0x190 [ 525.548369] ? graph_lock+0x170/0x170 [ 525.552150] ? snd_pcm_oss_release+0x290/0x290 [ 525.556711] ? find_held_lock+0x36/0x1c0 [ 525.560762] ? graph_lock+0x170/0x170 [ 525.564546] ? find_held_lock+0x36/0x1c0 [ 525.568592] ? lock_downgrade+0x8e0/0x8e0 [ 525.572724] ? kasan_check_read+0x11/0x20 [ 525.576852] ? rcu_is_watching+0x85/0x140 [ 525.580983] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 525.586160] ? __fget+0x40c/0x650 [ 525.589599] ? match_held_lock+0x881/0x8b0 [ 525.593816] ? expand_files.part.8+0x9a0/0x9a0 [ 525.598378] ? kasan_check_write+0x14/0x20 [ 525.602596] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 525.607507] ? wait_for_completion+0x870/0x870 [ 525.612071] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 525.617241] ? snd_pcm_oss_release+0x290/0x290 [ 525.621804] do_vfs_ioctl+0x1cf/0x1650 [ 525.625675] ? ioctl_preallocate+0x2e0/0x2e0 [ 525.630064] ? fget_raw+0x20/0x20 [ 525.633501] ? __sb_end_write+0xac/0xe0 [ 525.637459] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 525.642975] ? fput+0x130/0x1a0 [ 525.646237] ? ksys_write+0x1a6/0x250 [ 525.650029] ? security_file_ioctl+0x94/0xc0 [ 525.654423] ksys_ioctl+0xa9/0xd0 [ 525.657860] SyS_ioctl+0x24/0x30 [ 525.661209] ? ksys_ioctl+0xd0/0xd0 [ 525.664821] do_syscall_64+0x29e/0x9d0 [ 525.668691] ? vmalloc_sync_all+0x30/0x30 [ 525.672833] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 525.677659] ? syscall_return_slowpath+0x5c0/0x5c0 [ 525.682569] ? syscall_return_slowpath+0x30f/0x5c0 [ 525.687483] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 525.692835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 525.697666] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 525.702833] RIP: 0033:0x455259 [ 525.706006] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/04/10 00:29:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000fffffffffffff0000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 525.713700] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 525.720951] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 525.728201] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 525.735451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 525.742702] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000000 2018/04/10 00:29:56 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000ec0)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x0) fallocate(r0, 0x3, 0x5, 0xb6d1) ioctl$sock_ifreq(r0, 0x8977, &(0x7f0000001200)={'bpq0\x00', @ifru_ivalue}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) getresuid(&(0x7f0000000f40)=0x0, &(0x7f0000000f80), &(0x7f0000000fc0)=0x0) r3 = syz_open_dev$admmidi(&(0x7f0000001100)='/dev/admmidi#\x00', 0x20, 0x2000) stat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_mount(&(0x7f00000010c0)='./file0\x00', 0x2000, r1, r4, 0x2, 0x80000000080) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x4) listen(r0, 0x420) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280), 0x4) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000440)=0x1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000e40)={0x3ff, 0xac9, 0x1e, 0xd, 0x100, 0x3, 0x7, 0x2a000000000, 0x2, 0x1f, 0xfffffffffffffffe, 0x7}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x800) r6 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="87a0407e3aa39ed2b0eee145dc24eb2159d50c6bb853567bb31b99cefc600768542f3d589ed5168941287aabb5ad2ce23c0893667051ba9767f6bfdf87dee04d61099e2d44d752476181411ec18635db82da848258a98a896ebfffe66122833bce42dc7d00f72ed9b4500d367af116a4cbeb60458c6666c4bd7ffdd80e67c1d37c873af04f1e144a202f6202f7e3da3c9abf4f945ed7572b32fe4054b4196366078bdedac3420b11aa140790989279c7fe900b1c36e4a429616a808244452a4812039ec8b670273931ab4f5a30faa9f4647f21b19e7fd28a2110f7e6c203c5757bac7fbb570b0f9dd068d2054c4ff4696d37196000e9722a5d10eda0be941cf2956c32d19eac251c18998afe45127693b0ff5334cb32e1ac1adf71c5e608525064dd63098b32d1978b708ed4babec7dd0fb43d0026ad07427e6a4a535af7e9e8e49fd3fdafe28ab3415db422f71914fc39d4343a2f1ed68a961612c52da0d432d877cc6739ddda9fba77063f43049549362bad34e49fa90688dacd864d6df86330032b1ea708840dc70e8ba9a6dd8b2e9040ab132b2cbe808fffbef1735c093a259edb81680f815f12092449e829591485740f6bb0c21a4d76a1851320afc7895a80318da6e49d5aa9b22f7959bbaebeda621ce1843b8a400b6c6b4bb14cce5e4c8da914d8e67fb13569745fca60cd20e74d4c9ce97ee57349eb72c53a737ef75dc4e608fce54679e8a36be088422239ff2c80a32d28c39ecff90452eaf803794cfb16093e74a4f257e32b5fe78a237d8e936c3b592a9c5208357e54e8ce59b186e863676481ef5941e6cb422e289a86eba9f5de4594295a34da0b1fa59eb99b9d79526edecdf18678785befea18c12e07e4e284bb90588eba534502a04b6cea7874844b09fa29eb2e038682347a50356cc4699c7062a0eb0486ee1288862bec372e6df0ea7e741f01d01d7f77a9388c15a920342bf399ef1f12f0866b6b65275761f10f62df9bcf9d84d8000436539375bbc6bef40ca95adaa68a3ee01b8f2b4615526bff9885aa6f6d6f632f8c89681e9c2107eb3012b2b075bd29792dc7d5acc52810def5909087507c0b57b43a7d8868e11deca10ea8e36825b026b38b343c9ef436135461f4491e53344c94ed68f86dadb58910fec6034fcaed63ad009e290d4ec34669c76cbada3bcba3dc38c6e9a0496350d7ac4d692f8789d64b1a2ff31e7b948a6ab141f4bfd850311c316a9af0ad1da1c07a0b65e93d42f83d69260c6aee6eb78c28e4ff4827ffc167287b9fb674aaf8113ca8557857e17a1d621ad440c2197efa16e249b8a9e62b9c8364c06c699d0ec1080b3514964b204cdb1003e2115a11069254662552338a01b59c530496d5af0ce524aa6b0a266efc9a8497a0da6dc7781a70696550301c6b4a1f6bf2287e98be1815aa2d5ee2c038c6ae06fa1e8a176c9025bcd4bfa553d2424c49bb30d8d2f94207310c649cba1f3e95fdb9f6870189fbb75a13e17f6bd4716697587f78729d956c61b56a05811bf33af5a181869b09c2332f77ae944e31cde7eb76aa38422cdc11582d9f763e22d4958acfa84649975094f0d50f0fccf984195c73c1a8bc4d09803bf911c34935957d65b1f9ec9146b2d1ef914925cd1bbaf7b978a6489953de301a7e9c10ce1a19af64021dd82ce76a7e8e21bb860915a44edec91f07ada8554abd54d74f84e53820dd12db486b0048818391048064e17be3f5e667cceb6a954da7ac28f27ff6eb2e10d74fa0d0d9f7142731ed3fa0be310749003d4bd067641ef75777d8b74758824dd9e213fd0ddd19e5c7add68cf8c4dc58272e4a7db15caf38ac5b2b11b8fa99ae3bcb93b86dc9e08c0a0c68d30db2b351c4776e1db2208a784d20f2d27424c9c8b29dea94aae3d65ee551c29bfb00b77beac47f11f84804dad01899910a8311d617a96db6aebb72a9eca127c2150679ad1386892dd3bc6361d438f62a799f5cfd6bed94e8584033fc158635c3582dc0b750aad5fd1e42539f8f2e5e57379d8dea136683fc8f0cb521b97facd2cdbae405073cedb160bf990a554940ed06e0024fae666eb0d934d4ad16aa91d12345976c5a5eaa725fea4a0995a5096bb650d3108b307d08e50cad6ac1d4fcbdcd08874de4541e58134e9496cface95aa7728ae4848248b10c814d8c7f12675c02f306470b19bb45e64aadd6a03ea3753aab19eeb776f1d40519132e7b13ce226808c7be698140501005c3d48ae0e52cc6544d9d44117aa09d92734b97307a656e9249542c323e63ae1b4d3bae166e2de51a6ca9a3695d3d290df23239b3d8d158b98a0cf5a1c0da46d377476992f4fa04614f35deec598270dbee70c571f316680f9d15f3f3ee1de3109b47de94f20a34bec51937c91c72938aa3080994af794a71932f6c99028cbfc33b2dcf4ecddd9fb5a55aaf3f7f198d7218c6a9cb8862c19b6bd2f8f4af06006d24aabd26778a563da10a2e031bf77be025431b58ee3e0033b5840a77c2c3bab7fb3fb4e6a11878c4c100f42ced713743681232df7a047356d78d025daf301b8b106e48051c7d0050d2d06612c7639b300702aeefc289ad5a882ccaffe1f11c869ca532fc77af9d4bfdae25366daae55dac6ffd7d5fdc18f46525ede4e15397b1b9a538d6d0399775db4a917702a6c7cd12a5b286cdb5866768458cb6666b1a43f3bae00f3fd0953411b13a3f1f7136f60c24a294a4acf49d0f8b0071a4c64c5067f97d2e4401c81c60628dde889901b96e8099a02fed0bec39afdeb6da14ba97657420a226b9fd5c48aad8d950b147316d28cef711e3e31962b9e1386d52d6f1d3ecffa0f502011e99d7bf8ddc0846346a3a30f3e9d0b817f5f2b50300393ace7fb4727aaf25dc8e1ec9eb8d7452cf70d8b5be60b86ed25ccac93ce1de4e31d14ebe5c73cc81e476a685f3700d8864f0382719d9d640c298bd2c2e1185274ee53a9da8b75b78d9806b145c4707c7fdcaf15e792eba94004c44b72599e202448e80f87af37c1be7d8074ea2d9e9a83695eed5e53e39b8a032d22c9dbde7644dbde9f175a4b3e356fb07609f561fbc7d8b6c842e716ecdae32a7d95df37b337a903077f9cb970487c06a01413b549c7a114258c09cfe29f894b3b312708c94cc4137b54ef51c9607ce14077796dd183bf30422adca9e27f8737e7287683d4c99b39785bf78d6bac2f11545334e41a63abbde2dc461995ef2b65e119f348dcbaeabc018e17b49ce22fd1e8e7d302cbcd17693c4ded7884921f4fa976fbd8a62ed1933150a9ea8048c3e582378b67909bcfa6cc04a97f88ae4d58e1d4f489f79a3760ef5899af54d91642e7d63a3eb2f49080007732955f697f65cac8f05758c1e0ac27ef90aa5451b46320979258d0ef0b5c6c4618c265c96eb4b5e2530db475766b179e554863ed41d3323ff6e24fa2cb1581af87752a2a6dfa962e9cb201f9e6ea8f321d4a46b445ecff3d70b19b1a025758e2468c8156463d95f666729387ecea9f31265d5d4fa312c296f5c020497730904c7f4a8a264bc547c70bd22947fa60e481567aaae67c909b38439a37d6c0bea8d91e41b6a5e6fe5b355be4eb34b01072f95bddfc8a3f37f7a7101c16b5348ac7a866214e9fe10090ac82d0fe397e6312b2952f72b6fdbf156df1a9664b29f616582326d9f156f2272863298b2770ed15d9437979880e6d7acb627072c56abbd4360c4cbe937611d45735558ef308243cf86289bd0a5bdd2eaca58f0020170d93356aec806fe8a198ed343626eed3fe7971220e89a2917d0c204aa234c54dfcba1b20c6e601615e0cbe02b9c357f53ff6727666c73e47f4ed3258916f48cb90e5d40201eef82a084b0ed6bb27c39500f5fce6ca38f324b1e7607cd5ecae756c14fc180647ea87ad7fe9e6c1cf3d2907a9f1feb2a3dba843459e00ea267a6ff6c1e0d9d82e35828e8a22bc97127efa95bc9c48d5ac7cb93e7d75c568791ebfe968ead8bfdfb6fa2f91bb7131880a0a5464ad79b09def505000000ee4e79bf1d672f18492420de59ed2f902bb456c1c7d8d36d553c95bf2d958a4fdef877e043f2b6d716c39fbea992eee655f09b76a0122a66c44622a60f72bdc4a05441a855bbde1c3586e4d1feb2554557ae91454d4c1e695900312f0aaacd6fb734200aa424c6c363d5553ca85a00c44493436ecc5be63e7f5a7266aa8bb7015acb482f428a4672e9e4657d8ac4691a57938f1a19c7ff1307e47f7ca9fc1a9c39c9d8ac149766c57fe689e4b88af2933af05d380b50ed00199a5cf5fb1d7dde47ce06bff3af180ec8de4b115eef79b7b0027973bfb10d43822ba64c203d4d060429d88e18e1d9986e816d2da068e108897ff6eeed032d01b68fc5ef18455dd80c8f883dc33ac5f1e5e31e45a075e0b9a8a1d2b2629ad43a02d6b505f9c44b9f76de0915107a23d47484d2539ef5387dcf596a78a2af45fe84914901d39291feef5fb9c88583a91097f070749e3ae198b6f6345c3eb96d7d7d9a09173f9ec8c568c934c3ddffc32d3ab79568c7a32ab34764eb4712d17a7180a6351907919162e18a0699c6bc8c69824fe19b027a3174d34596a11f458bb74c1d3b134691c3f333e566d27d88b43ffa9ef7a0644326326cfbce83cf61ec46912199965319a1087405d089d541cf400057eff215061c9c97719c04e75bd77f7a3bc2cb5f311402cda58e", 0xd05, 0xfffffffffffffffc) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/rfkill\x00', 0x210000, 0x0) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, r6) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x7, 0x7, 0x20ba, 0x5, 0x8, 0xfff, 0x200, 0x20, 0x1, 0x3, 0xfffffffffffffff8, 0x9}) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000000e80)=0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x1, 0xf7, &(0x7f0000000180)="bf24c8d50c0bc09883793d52204b3c0435443d388935fc2cc42084ba99ef51fc75e9c59d9b74e691372b89aefde1f37d3be1d5317e047368f5cd384989448ea813c12c5423fe047b0ec8585207f814605a2c92d52277e30843526104cba8f3877dbb5485b25179793075070dd1057845c6735d03815fd95c8220f7cce7bccf61cbbdfee688469d912bdee2c1761f726f184f794a02c9b9723b6470c6d27a0b4c6bdc90f6063f9ea10aa0ac271c1ea93ba5959cfbed92c9376c24131b83b913b4f442d8f3b48fdbd805b20b5bae4ed128b35313de5ab0cc09faa96b36525123f9437882039cae46b7bd78aad2393be518a3bb2d66560880"}) connect$ipx(r0, &(0x7f0000000140)={0x4, 0x0, 0xff, "851779d0cb52", 0xa37}, 0x10) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000380)={0x221, 0x8000, 0x8, 0x80000000, 0x20, 0x401, 0x7, 0x2, 0x400, 0xc6, 0x9, 0x2}) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000001240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000008005fb33835d698ddc97a5e5b422e5d14f08b1fe4949432f6c28ba57746776e7f90d351d006818030875b4f00db9d8729be82aa20bbb232f8992bbf8e8210f5bd713fc6aeea6a64aeb460c011cf374d9bd23ddb05243aa8abb012b44cc1ac4d66bc56903429d054e0705acfa18e305a94985170f944634c4c1f3246df10e47ca4af3592c0eaad4168ba0b49e5c05049c816df4ed1a1edc912ac98a9e7973c57290ba6d01c398aa096577bf5dbc5a78ea07be9d5be982fee70d1fed6a36d7cc746a6db70cc0969bcdc7b5184ee6e"]) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x14) syz_fuse_mount(&(0x7f0000000e00)='./file0\x00', 0x4000, r2, r4, 0x3c23, 0x200000) [ 525.811468] netlink: 'syz-executor4': attribute type 18 has an invalid length. 2018/04/10 00:29:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000fffffff0000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:56 executing program 6: r0 = socket$inet6_sctp(0xa, 0x80000000005, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001000)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0xffffffffffffffff}, 0x90) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) connect$packet(r1, &(0x7f00000004c0)={0x11, 0xf6, r2, 0x1, 0x3f5900f7, 0x6, @random="43a38792c89e"}, 0x14) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in, @in, 0x4e21, 0x0, 0x4e21, 0x8, 0xa, 0x0, 0x20, 0xc, 0x0, r3}, {0x8, 0x4, 0x1, 0x4, 0x9, 0x2, 0x8, 0x9}, {0x8, 0x1bfa3d52, 0xec5, 0x7f}, 0x9, 0x0, 0x1, 0x1, 0x3, 0x1}, {{@in6=@loopback={0x0, 0x1}, 0x4d5, 0x3f}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x3505, 0x3, 0x3, 0x6000, 0x5, 0x7ff, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001000)={{{@in=@rand_addr, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, {{@in=@multicast2=0xe0000002}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}}}, 0xe8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000400)=0xffffffff, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) ioctl$KDDISABIO(r1, 0x4b37) sched_setattr(r4, &(0x7f00000001c0)={0x30, 0x3, 0x0, 0x1, 0xb68, 0x5, 0x4, 0x59dc987}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000001000)=""/144, &(0x7f0000001ffc)=0x90) ioctl$TIOCSBRK(r1, 0x5427) r5 = syz_open_dev$adsp(&(0x7f0000000440)='/dev/adsp#\x00', 0x400, 0x80000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000480)=0x6a0, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000200)={0xffffffffffff7fff, 0x1, 0xc0, 0xffffffff, 0x1bd8000000000}, 0xc) [ 525.907776] netlink: 'syz-executor4': attribute type 18 has an invalid length. 2018/04/10 00:29:56 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xb00000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:56 executing program 3: syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4a2c, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x83, 0x5}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12e6}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x18, 0xffffffffffffffff}, @map={0x18, 0x7, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000440)=""/251}, 0x48) 2018/04/10 00:29:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000f0ffffff000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000e18000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x401, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000019ff4)) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000010000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000d0cc000000000000002000000000000000000000000000000000000000000400000000000000"], 0x78) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000d70ff0)={0x1a, 0x0, &(0x7f000079a000)}) 2018/04/10 00:29:56 executing program 7 (fault-call:5 fault-nth:1): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:57 executing program 6: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000b8f000/0x1000)=nil, 0x5000) r1 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f000001dffc)=0x1) read(r1, &(0x7f0000000080)=""/50, 0xfffffffffffffd1d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f000001cfb0)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 2018/04/10 00:29:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c40)=""/42, 0x2a}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x5) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:57 executing program 5: r0 = msgget(0x3, 0x2) msgctl$IPC_RMID(r0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', @ifru_addrs=@nfc={0x27}}) 2018/04/10 00:29:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000020000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x81) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)=@pic={0x4, 0xfff, 0x6, 0x4, 0x5, 0x0, 0x5, 0x3, 0x7ff, 0x2, 0xb1, 0x9, 0x6, 0x2, 0x9, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) 2018/04/10 00:29:57 executing program 6: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000017000)={0x0, 0xfffffffffffffffe, 0x400}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000000)={0x0, 0xf08, 0x0, 0x5, 0x3ff}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x3f, 0x3, [0x7, 0x10001, 0xbeb]}, &(0x7f00000000c0)=0xe) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r2, 0x800000000000937e, &(0x7f0000017000)="01") 2018/04/10 00:29:57 executing program 5: stat(&(0x7f0000000300)="2f2f66696c6530fe", &(0x7f0000000500)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000080)="2f2f66696c6530fe00", 0x10) write(r1, &(0x7f0000000680)="127a282ebf13a5", 0x7) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="f5f09addaac6203441a024848e4af000559d51a2b90b1141a6a256cbdac3aeaf365e868d54e4c1520bd54dd533f78809ca60c73bf325f9159906ad933e1b4cb83d5539b2c2cda820326b618b77839569c60bb62d1d672d66d2fbdd535b36364c1d200e2b773be95636ed", 0x6a, 0x0) r3 = add_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)="cc634b6a31ac99703cc47e1399de58322fd0b7c2f47616e6732d887a81fca09633648a73a628a563a156214c32f0749fcf8a1880b2a8bf5c42151f8bec07160ef9ba2dc6dd762c95717985c9c398f4654300fba070cefa761c8266726c766197ef6a0cea3128a65d05b7e7cfba4c1d5150b2a0", 0x73, 0x0) r4 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000440)="4d14d250d14443a999c892ed21fd685cdcb6025417da", 0x16, 0xfffffffffffffffc) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000640)={0x1, 0x10001, 0xfff}) keyctl$dh_compute(0x17, &(0x7f0000000480)={r2, r3, r4}, &(0x7f00000004c0)=""/44, 0x2c, &(0x7f0000000600)={&(0x7f0000000580)={'tgr192\x00'}, &(0x7f00000005c0)="0358a7f8e908bf5937dace2ec0753b7bd8a104dc5501994362ff6214c78e4284479cc4f65e0af8e0dee641710c0eff1188d78da4fef7d50fd0363c24", 0x3c}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 2018/04/10 00:29:57 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x16000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000000000007fffffff0000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 526.300914] autofs4:pid:2455:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967294), cmd(0x0000937e) [ 526.314788] autofs4:pid:2455:validate_dev_ioctl: invalid device control module version supplied for cmd(0x0000937e) [ 526.339995] binder: 2457 RLIMIT_NICE not set [ 526.368301] binder: BINDER_SET_CONTEXT_MGR already set [ 526.403484] binder: 2456:2462 ioctl 40046207 0 returned -16 [ 526.427684] binder: 2456:2457 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 526.434015] FAULT_INJECTION: forcing a failure. [ 526.434015] name failslab, interval 1, probability 0, space 0, times 0 [ 526.445875] CPU: 1 PID: 2459 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 526.452721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 526.457496] binder: 2456:2462 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 526.462070] Call Trace: [ 526.462094] dump_stack+0x1b9/0x294 [ 526.462118] ? dump_stack_print_info.cold.2+0x52/0x52 [ 526.462135] ? perf_trace_lock_acquire+0xe3/0x980 [ 526.462154] ? __save_stack_trace+0x7e/0xd0 [ 526.470666] binder: 2462 RLIMIT_NICE not set [ 526.473223] should_fail.cold.4+0xa/0x1a [ 526.473247] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 526.504705] ? save_stack+0x43/0xd0 [ 526.508332] ? kasan_kmalloc+0xc4/0xe0 [ 526.512226] ? kmem_cache_alloc_trace+0x152/0x780 [ 526.517073] ? snd_pcm_oss_change_params_locked+0x1f9/0x3ce0 [ 526.522875] ? snd_pcm_oss_change_params+0x80/0xe0 [ 526.527801] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 526.532561] ? graph_lock+0x170/0x170 [ 526.536358] ? SyS_ioctl+0x24/0x30 [ 526.539895] ? do_syscall_64+0x29e/0x9d0 [ 526.543963] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 526.549326] ? find_held_lock+0x36/0x1c0 [ 526.553376] ? __lock_is_held+0xb5/0x140 [ 526.557433] ? check_same_owner+0x320/0x320 [ 526.561744] ? rcu_note_context_switch+0x710/0x710 [ 526.566663] __should_failslab+0x124/0x180 [ 526.570886] should_failslab+0x9/0x14 [ 526.574693] kmem_cache_alloc_trace+0x2cb/0x780 [ 526.579376] ? lock_downgrade+0x8e0/0x8e0 [ 526.583513] snd_pcm_oss_change_params_locked+0x231/0x3ce0 [ 526.589121] ? debug_check_no_locks_freed+0x310/0x310 [ 526.594302] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 526.599480] ? print_usage_bug+0xc0/0xc0 [ 526.603540] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 526.609408] ? print_usage_bug+0xc0/0xc0 [ 526.613459] ? debug_check_no_locks_freed+0x310/0x310 [ 526.618634] ? __lock_acquire+0x7f5/0x5130 [ 526.622856] ? perf_trace_lock+0x900/0x900 [ 526.627080] ? __lock_acquire+0x7f5/0x5130 [ 526.631307] ? debug_check_no_locks_freed+0x310/0x310 [ 526.636482] ? perf_trace_lock_acquire+0xe3/0x980 [ 526.641314] ? debug_check_no_locks_freed+0x310/0x310 [ 526.646486] ? perf_trace_lock_acquire+0xe3/0x980 [ 526.651317] snd_pcm_oss_change_params+0x80/0xe0 [ 526.656058] snd_pcm_oss_make_ready+0xbe/0x170 [ 526.660625] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 526.665455] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 526.669845] ? find_held_lock+0x36/0x1c0 [ 526.673894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 526.679415] ? _parse_integer+0x13b/0x190 [ 526.683583] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 526.688794] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 526.693101] ? _parse_integer+0x190/0x190 [ 526.697234] ? graph_lock+0x170/0x170 [ 526.701026] ? snd_pcm_oss_release+0x290/0x290 [ 526.705594] ? find_held_lock+0x36/0x1c0 [ 526.709640] ? graph_lock+0x170/0x170 [ 526.713425] ? find_held_lock+0x36/0x1c0 [ 526.717480] ? lock_downgrade+0x8e0/0x8e0 [ 526.721620] ? kasan_check_read+0x11/0x20 [ 526.725753] ? rcu_is_watching+0x85/0x140 [ 526.729886] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 526.735067] ? __fget+0x40c/0x650 [ 526.738507] ? match_held_lock+0x881/0x8b0 [ 526.742726] ? expand_files.part.8+0x9a0/0x9a0 [ 526.747292] ? kasan_check_write+0x14/0x20 [ 526.751511] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 526.756429] ? wait_for_completion+0x870/0x870 [ 526.760997] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 526.766177] ? snd_pcm_oss_release+0x290/0x290 [ 526.770744] do_vfs_ioctl+0x1cf/0x1650 [ 526.774621] ? ioctl_preallocate+0x2e0/0x2e0 [ 526.779022] ? fget_raw+0x20/0x20 [ 526.782462] ? __sb_end_write+0xac/0xe0 [ 526.786425] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 526.791950] ? fput+0x130/0x1a0 [ 526.795217] ? ksys_write+0x1a6/0x250 [ 526.799010] ? security_file_ioctl+0x94/0xc0 [ 526.803412] ksys_ioctl+0xa9/0xd0 [ 526.806852] SyS_ioctl+0x24/0x30 [ 526.810200] ? ksys_ioctl+0xd0/0xd0 [ 526.813811] do_syscall_64+0x29e/0x9d0 [ 526.817680] ? vmalloc_sync_all+0x30/0x30 [ 526.821812] ? _raw_spin_unlock_irq+0x27/0x70 [ 526.826294] ? finish_task_switch+0x1ca/0x820 [ 526.830775] ? syscall_return_slowpath+0x5c0/0x5c0 [ 526.835690] ? syscall_return_slowpath+0x30f/0x5c0 [ 526.840612] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 526.845970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 526.850815] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 526.855994] RIP: 0033:0x455259 [ 526.859186] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 526.866888] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 526.874139] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 526.881393] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 526.888643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 526.895895] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000001 2018/04/10 00:29:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x4) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') writev(r0, &(0x7f0000001140)=[{&(0x7f0000000140)='|', 0x1}], 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00\x00\x00\x00\nd\x00', 0x1000}) 2018/04/10 00:29:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000ffffff9e000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:57 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getitimer(0x3, &(0x7f0000000100)) r1 = getpid() wait4(r1, &(0x7f0000000000), 0x80000008, &(0x7f0000000140)) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001) pwritev(r0, &(0x7f0000000180), 0x0, 0x0) process_vm_readv(r1, &(0x7f000000b000)=[{&(0x7f0000005f3f)=""/97, 0x61}, {&(0x7f000000a000)=""/51, 0x33}, {&(0x7f000000b000)=""/73, 0x49}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x4, &(0x7f0000007000)=[{&(0x7f0000000fbd)=""/67, 0x7ffff000}, {&(0x7f0000008f73)=""/141, 0x8d}, {&(0x7f000000b000)=""/240, 0xf0}, {&(0x7f0000008f9d)=""/99, 0x63}, {&(0x7f000000b000)=""/4096, 0x1000}, {&(0x7f000000bf62)=""/158, 0x9e}], 0x6, 0x0) 2018/04/10 00:29:57 executing program 5: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(twofish-asm)\x00'}, 0x58) r2 = syz_open_dev$sndpcmc(&(0x7f0000000600)='/dev/snd/pcmC#D#c\x00', 0x9, 0x81) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)={0xc645, 0x0, 0x10001, 0x3ff}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000680)={r3, 0x7}) r4 = dup2(r1, r0) r5 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="873a3d2f8a1a4d5211133f7e9c4eb5be", 0x10) sendmsg$can_raw(r5, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) recvmmsg(r5, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/94, 0x5e}}, {{&(0x7f0000002f40)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000540)=""/188, 0xbc}], 0x3, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) 2018/04/10 00:29:57 executing program 7 (fault-call:5 fault-nth:2): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:29:57 executing program 3: io_setup(0x3, &(0x7f00000005c0)=0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) r1 = syz_open_dev$admmidi(&(0x7f0000000800)='/dev/admmidi#\x00', 0x0, 0x400800) ioctl$KDMKTONE(r1, 0x4b30, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7ff, 0x0) io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xf, 0x3, 0xffffffffffffffff, &(0x7f0000000140)="940c1f2149747e7734510c34c143183667a187dc4f624f6c2de12452792a6fb529e6bf2a661dc23a844b00925c244a9f2967c0ca9868ee50eacf67a2ad7681d82f5a38cbd6d7641f843fa129e0", 0x4d, 0x5, 0x0, 0x1, r2}, &(0x7f0000000280)) io_getevents(r0, 0x2, 0x8f, &(0x7f0000d83f60)=[{}, {}], &(0x7f00005cfff0)={0x4000000000001, 0x7}) io_getevents(r0, 0x4, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f00000006c0)={0x77359400}) io_setup(0x7, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x5, 0x7, [0x6, 0x3, 0xc, 0xdd, 0x2, 0x3, 0x3]}, &(0x7f0000000500)=0x16) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r3}, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f0000000480)=0xc) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000340), &(0x7f00000004c0)=0x30) r5 = syz_open_procfs(r4, &(0x7f0000000540)='net/ip_tables_matches\x00') ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000440)) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) pread64(r5, &(0x7f0000000000)=""/85, 0xfe42, 0x5d) memfd_create(&(0x7f0000000240)=':+lo#\x00', 0x0) io_submit(r0, 0x0, &(0x7f0000001280)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x4, 0x4, 0x0, 0x8000, 0x101, 0x0, 0x1, 0x0, 0x7, 0x0, 0x6, 0x0, 0x3, 0x6, 0x8]}, &(0x7f00000003c0)=0x100) timerfd_create(0x0, 0x80800) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000580)={0x2, 0x60, &(0x7f0000000600)="a7e0943d4f14ecdf73888554e1620421ccf0bb678aa7c35a9aeac98a31f05632a0cfcb91403e504b1c455ec83361a25e9a561aa6c3531f2f7c078bc5c4f64974ddd6f6e13e4b6d9a34dd0560666935b955f0c02d8723c7607e5c0b60c520774d"}) semget$private(0x0, 0x0, 0x2) io_destroy(r0) 2018/04/10 00:29:57 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x1000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) [ 527.059121] FAULT_INJECTION: forcing a failure. [ 527.059121] name failslab, interval 1, probability 0, space 0, times 0 [ 527.070478] CPU: 0 PID: 2496 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 527.077319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.086672] Call Trace: [ 527.089267] dump_stack+0x1b9/0x294 [ 527.092902] ? dump_stack_print_info.cold.2+0x52/0x52 [ 527.098094] ? __save_stack_trace+0x7e/0xd0 [ 527.102428] should_fail.cold.4+0xa/0x1a [ 527.106498] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 527.111614] ? save_stack+0x43/0xd0 [ 527.115251] ? kasan_kmalloc+0xc4/0xe0 [ 527.119149] ? kmem_cache_alloc_trace+0x152/0x780 [ 527.124004] ? snd_pcm_oss_change_params_locked+0x231/0x3ce0 [ 527.129816] ? snd_pcm_oss_change_params+0x80/0xe0 [ 527.134745] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 527.139503] ? graph_lock+0x170/0x170 [ 527.143294] ? SyS_ioctl+0x24/0x30 [ 527.146826] ? do_syscall_64+0x29e/0x9d0 [ 527.150876] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 527.156234] ? find_held_lock+0x36/0x1c0 [ 527.160285] ? __lock_is_held+0xb5/0x140 [ 527.164345] ? check_same_owner+0x320/0x320 [ 527.168659] ? rcu_note_context_switch+0x710/0x710 [ 527.173583] __should_failslab+0x124/0x180 [ 527.177923] should_failslab+0x9/0x14 [ 527.181710] kmem_cache_alloc_trace+0x2cb/0x780 [ 527.186390] snd_pcm_oss_change_params_locked+0x269/0x3ce0 [ 527.191998] ? graph_lock+0x170/0x170 [ 527.195797] ? print_usage_bug+0xc0/0xc0 [ 527.199854] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 527.205732] ? print_usage_bug+0xc0/0xc0 [ 527.209781] ? debug_check_no_locks_freed+0x310/0x310 [ 527.214960] ? __lock_acquire+0x7f5/0x5130 [ 527.219178] ? __lock_is_held+0xb5/0x140 [ 527.223226] ? __account_cfs_rq_runtime+0x600/0x600 [ 527.228235] ? __lock_acquire+0x7f5/0x5130 [ 527.232461] ? debug_check_no_locks_freed+0x310/0x310 [ 527.237636] ? update_load_avg+0x2540/0x2540 [ 527.242042] ? debug_check_no_locks_freed+0x310/0x310 [ 527.247225] snd_pcm_oss_change_params+0x80/0xe0 [ 527.251969] snd_pcm_oss_make_ready+0xbe/0x170 [ 527.256539] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 527.261363] ? __lock_acquire+0x7f5/0x5130 [ 527.265583] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 527.269972] ? find_held_lock+0x36/0x1c0 [ 527.274024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 527.279549] ? _parse_integer+0x13b/0x190 [ 527.283687] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 527.288865] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 527.293179] ? _parse_integer+0x190/0x190 [ 527.297316] ? graph_lock+0x170/0x170 [ 527.301105] ? snd_pcm_oss_release+0x290/0x290 [ 527.305671] ? find_held_lock+0x36/0x1c0 [ 527.309728] ? graph_lock+0x170/0x170 [ 527.313513] ? find_held_lock+0x36/0x1c0 [ 527.317566] ? lock_downgrade+0x8e0/0x8e0 [ 527.321704] ? kasan_check_read+0x11/0x20 [ 527.325845] ? rcu_is_watching+0x85/0x140 [ 527.329977] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 527.335160] ? __fget+0x40c/0x650 [ 527.338601] ? match_held_lock+0x881/0x8b0 [ 527.342826] ? expand_files.part.8+0x9a0/0x9a0 [ 527.347393] ? kasan_check_write+0x14/0x20 [ 527.351616] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 527.356532] ? wait_for_completion+0x870/0x870 [ 527.361101] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 527.366277] ? snd_pcm_oss_release+0x290/0x290 [ 527.370850] do_vfs_ioctl+0x1cf/0x1650 [ 527.374733] ? ioctl_preallocate+0x2e0/0x2e0 [ 527.379129] ? fget_raw+0x20/0x20 [ 527.382569] ? __sb_end_write+0xac/0xe0 [ 527.386531] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 527.392053] ? fput+0x130/0x1a0 [ 527.395317] ? ksys_write+0x1a6/0x250 [ 527.399108] ? security_file_ioctl+0x94/0xc0 [ 527.403505] ksys_ioctl+0xa9/0xd0 [ 527.406949] SyS_ioctl+0x24/0x30 [ 527.410297] ? ksys_ioctl+0xd0/0xd0 [ 527.413913] do_syscall_64+0x29e/0x9d0 [ 527.417784] ? vmalloc_sync_all+0x30/0x30 [ 527.421919] ? _raw_spin_unlock_irq+0x27/0x70 [ 527.426400] ? finish_task_switch+0x1ca/0x820 [ 527.430884] ? syscall_return_slowpath+0x5c0/0x5c0 [ 527.435850] ? syscall_return_slowpath+0x30f/0x5c0 [ 527.440784] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 527.446144] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 527.450983] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 527.456158] RIP: 0033:0x455259 2018/04/10 00:29:58 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000184000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x410341, 0x0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) 2018/04/10 00:29:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000fffff000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:58 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xa00}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) [ 527.459333] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.467036] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 527.474290] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 527.481545] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 527.488799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 527.496053] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000002 2018/04/10 00:29:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:58 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 00:29:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x63) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000003e00)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sco\x00') ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000080)={0x0, 0x4}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9) writev(r0, &(0x7f0000df9000)=[{&(0x7f0000354ff8)='\'', 0x1}], 0x1) 2018/04/10 00:29:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:58 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xd}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:29:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000007f10000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:58 executing program 5: r0 = getpid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) fcntl$setownex(r1, 0xf, &(0x7f00006d1ff8)={0x0, r0}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 2018/04/10 00:29:58 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f0000000080)=@can={0x0, 0x0}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/169, 0xa9}, {&(0x7f00000001c0)=""/52, 0x34}], 0x2, &(0x7f00000002c0)=""/43, 0x2b, 0x7c}, 0xffff}, {{&(0x7f0000000300), 0x80, &(0x7f0000000480)=[{&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000003c0)=""/141, 0x8d}], 0x2, &(0x7f00000004c0)=""/56, 0x38, 0x7}, 0x8}, {{&(0x7f0000000500)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000000700)=""/55, 0x37}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f00000007c0)=""/39, 0x27}], 0x5, &(0x7f0000000880)=""/247, 0xf7, 0x8118}, 0x7fffffff}], 0x3, 0x102, &(0x7f0000000a40)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'yam0\x00', r1}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@generic={0x600}}}, &(0x7f0000000000)) 2018/04/10 00:29:58 executing program 7 (fault-call:5 fault-nth:3): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) [ 527.970847] FAULT_INJECTION: forcing a failure. [ 527.970847] name failslab, interval 1, probability 0, space 0, times 0 [ 527.982129] CPU: 0 PID: 2537 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 527.988970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 527.998320] Call Trace: [ 528.000915] dump_stack+0x1b9/0x294 [ 528.004557] ? dump_stack_print_info.cold.2+0x52/0x52 [ 528.009763] should_fail.cold.4+0xa/0x1a [ 528.013833] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 528.018942] ? debug_check_no_locks_freed+0x310/0x310 [ 528.024135] ? graph_lock+0x170/0x170 [ 528.027946] ? find_held_lock+0x36/0x1c0 [ 528.032011] ? __lock_is_held+0xb5/0x140 [ 528.036090] ? check_same_owner+0x320/0x320 [ 528.040423] ? rcu_note_context_switch+0x710/0x710 [ 528.045357] ? graph_lock+0x170/0x170 [ 528.049172] __should_failslab+0x124/0x180 [ 528.053414] should_failslab+0x9/0x14 [ 528.057211] __kmalloc+0x2c8/0x760 [ 528.060764] ? constrain_params_by_rules+0x141/0x1360 [ 528.065956] ? find_held_lock+0x36/0x1c0 [ 528.070027] constrain_params_by_rules+0x141/0x1360 [ 528.075053] ? lock_downgrade+0x8e0/0x8e0 [ 528.079215] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 528.084417] ? rcu_is_watching+0x85/0x140 [ 528.088574] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 528.093880] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 528.099086] ? is_bpf_text_address+0xd7/0x170 [ 528.103586] ? kernel_text_address+0x79/0xf0 [ 528.108012] ? __unwind_start+0x166/0x330 [ 528.112169] ? graph_lock+0x170/0x170 [ 528.115976] ? unwind_get_return_address+0x61/0xa0 [ 528.120911] ? __save_stack_trace+0x7e/0xd0 [ 528.125244] ? __lock_is_held+0xb5/0x140 [ 528.129313] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 528.134335] ? snd_interval_refine+0x428/0x700 [ 528.138925] snd_pcm_hw_refine+0x8e9/0x1180 [ 528.143261] ? constrain_params_by_rules+0x1360/0x1360 [ 528.148537] ? graph_lock+0x170/0x170 [ 528.152336] ? __lock_is_held+0xb5/0x140 [ 528.156407] ? __lock_is_held+0xb5/0x140 [ 528.160480] ? snd_pcm_oss_change_params_locked+0x269/0x3ce0 [ 528.166281] ? rcu_read_lock_sched_held+0x108/0x120 [ 528.171391] ? _snd_pcm_hw_param_min+0x330/0x570 [ 528.176154] snd_pcm_oss_change_params_locked+0x901/0x3ce0 [ 528.181783] ? debug_check_no_locks_freed+0x310/0x310 [ 528.186973] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 528.192846] ? print_usage_bug+0xc0/0xc0 [ 528.196898] ? debug_check_no_locks_freed+0x310/0x310 [ 528.202076] ? __lock_acquire+0x7f5/0x5130 [ 528.206294] ? debug_check_no_locks_freed+0x310/0x310 [ 528.211466] ? __lock_acquire+0x7f5/0x5130 [ 528.215686] ? debug_check_no_locks_freed+0x310/0x310 [ 528.220856] ? print_usage_bug+0xc0/0xc0 [ 528.224908] snd_pcm_oss_change_params+0x80/0xe0 [ 528.229660] snd_pcm_oss_make_ready+0xbe/0x170 [ 528.234226] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 528.239046] ? __lock_acquire+0x7f5/0x5130 [ 528.243263] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 528.247657] ? find_held_lock+0x36/0x1c0 [ 528.251703] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 528.257223] ? _parse_integer+0x13b/0x190 [ 528.261351] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 528.266523] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 528.270825] ? _parse_integer+0x190/0x190 [ 528.274954] ? graph_lock+0x170/0x170 [ 528.278737] ? snd_pcm_oss_release+0x290/0x290 [ 528.283313] ? find_held_lock+0x36/0x1c0 [ 528.287362] ? graph_lock+0x170/0x170 [ 528.291145] ? find_held_lock+0x36/0x1c0 [ 528.295194] ? lock_downgrade+0x8e0/0x8e0 [ 528.299327] ? kasan_check_read+0x11/0x20 [ 528.303457] ? rcu_is_watching+0x85/0x140 [ 528.307588] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 528.312763] ? __fget+0x40c/0x650 [ 528.316196] ? match_held_lock+0x881/0x8b0 [ 528.320416] ? expand_files.part.8+0x9a0/0x9a0 [ 528.324978] ? kasan_check_write+0x14/0x20 [ 528.329195] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 528.334107] ? wait_for_completion+0x870/0x870 [ 528.338703] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 528.343885] ? snd_pcm_oss_release+0x290/0x290 [ 528.348449] do_vfs_ioctl+0x1cf/0x1650 [ 528.352333] ? ioctl_preallocate+0x2e0/0x2e0 [ 528.356721] ? fget_raw+0x20/0x20 [ 528.360157] ? __sb_end_write+0xac/0xe0 [ 528.364115] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 528.369634] ? fput+0x130/0x1a0 [ 528.372899] ? ksys_write+0x1a6/0x250 [ 528.376770] ? security_file_ioctl+0x94/0xc0 [ 528.381180] ksys_ioctl+0xa9/0xd0 [ 528.384635] SyS_ioctl+0x24/0x30 [ 528.387981] ? ksys_ioctl+0xd0/0xd0 [ 528.391593] do_syscall_64+0x29e/0x9d0 [ 528.395460] ? vmalloc_sync_all+0x30/0x30 [ 528.399589] ? _raw_spin_unlock_irq+0x27/0x70 [ 528.404067] ? finish_task_switch+0x1ca/0x820 [ 528.408544] ? syscall_return_slowpath+0x5c0/0x5c0 [ 528.413454] ? syscall_return_slowpath+0x30f/0x5c0 [ 528.418366] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 528.423711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 528.428536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 528.433705] RIP: 0033:0x455259 [ 528.436873] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.444562] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 528.451812] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 528.459061] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/10 00:29:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:29:59 executing program 4: clock_getres(0x0, &(0x7f0000000000)) 2018/04/10 00:29:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000009effffff000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)='H', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) rt_sigsuspend(&(0x7f0000000040)={0x8000}, 0x8) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x6c, &(0x7f0000000480)={0x0, @in={{0x2}}}, &(0x7f0000000340)=0x100) 2018/04/10 00:29:59 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x3b9ac9ff}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) [ 528.466446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 528.473712] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000003 2018/04/10 00:29:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0x14, 0x80000) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000640)={@empty, @rand_addr=0x93f3, r1}, 0xc) write$rdma_cm(r0, &(0x7f0000000700)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffff}, 0x13f}}, 0x20) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x800) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000200)={0x9, 0x0, [{0xff, 0x2, 0x0, 0x0, @msi={0x2, 0x100000001, 0x80000000}}, {0x6, 0x4, 0x0, 0x0, @adapter={0x3, 0x5, 0x4, 0xfdf, 0x8}}, {0x1, 0x3, 0x0, 0x0, @adapter={0x100000000, 0x401, 0x800, 0x5, 0x80}}, {0x2, 0x3, 0x0, 0x0, @irqchip={0x3619, 0xc38}}, {0x3, 0x3, 0x0, 0x0, @msi={0xc, 0x628}}, {0x591c, 0x3, 0x0, 0x0, @adapter={0x7ff, 0xfffffffffffff800, 0xb67, 0xfcf, 0x9}}, {0x101, 0x3, 0x0, 0x0, @irqchip={0xfff, 0x1ff}}, {0x15c1, 0x3, 0x0, 0x0, @adapter={0x6, 0x5, 0x8, 0x8001, 0x560}}, {0x7, 0x3, 0x0, 0x0, @adapter={0x200, 0x0, 0x7f, 0x7, 0x4}}]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)={@broadcast=0xffffffff, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x4, [@dev={0xac, 0x14, 0x14, 0x12}, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0xfffffffffffffbff]}, 0x20) write$rdma_cm(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03000000400000fa1b0000000000000000000000000000000000000000000001000000000a000000000000000000000000000000000000000000000100000000", @ANYRES32=r2, @ANYBLOB="007f00004097f9945e802d253c876346ce5b1c3f3abc49fc7d6bcdc83efb1cac2a3d7b3e44194b97798d367bd4108c69c183c21000eb92561042b1566f0465d25f3a2110d8bdf8df0270bc3b077f1183c330243a112f5a39a5c9cce1fa1f993727e285a8396733db67533fe1f22a23376eae5af29701cd3e1d"], 0x48) 2018/04/10 00:29:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000f1070000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:29:59 executing program 7 (fault-call:5 fault-nth:4): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) [ 528.773990] FAULT_INJECTION: forcing a failure. [ 528.773990] name failslab, interval 1, probability 0, space 0, times 0 [ 528.785283] CPU: 1 PID: 2591 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 528.792114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.801451] Call Trace: [ 528.804032] dump_stack+0x1b9/0x294 [ 528.807647] ? dump_stack_print_info.cold.2+0x52/0x52 [ 528.812834] ? __save_stack_trace+0x7e/0xd0 [ 528.817142] should_fail.cold.4+0xa/0x1a [ 528.821185] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 528.826271] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 528.831267] ? snd_interval_refine+0x428/0x700 [ 528.835832] ? graph_lock+0x170/0x170 [ 528.839623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 528.845147] ? snd_pcm_hw_refine+0x362/0x1180 [ 528.849624] ? find_held_lock+0x36/0x1c0 [ 528.853669] ? __lock_is_held+0xb5/0x140 [ 528.857731] ? check_same_owner+0x320/0x320 [ 528.862041] ? rcu_note_context_switch+0x710/0x710 [ 528.866958] __should_failslab+0x124/0x180 [ 528.871187] should_failslab+0x9/0x14 [ 528.874981] kmem_cache_alloc_trace+0x2cb/0x780 [ 528.879639] ? _snd_pcm_hw_param_min+0x330/0x570 [ 528.884380] snd_pcm_oss_change_params_locked+0x99b/0x3ce0 [ 528.889994] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 528.895866] ? print_usage_bug+0xc0/0xc0 [ 528.899911] ? debug_check_no_locks_freed+0x310/0x310 [ 528.905087] ? __lock_acquire+0x7f5/0x5130 [ 528.909305] ? debug_check_no_locks_freed+0x310/0x310 [ 528.914476] ? __lock_acquire+0x7f5/0x5130 [ 528.918694] ? debug_check_no_locks_freed+0x310/0x310 [ 528.923863] ? print_usage_bug+0xc0/0xc0 [ 528.927914] snd_pcm_oss_change_params+0x80/0xe0 [ 528.932653] snd_pcm_oss_make_ready+0xbe/0x170 [ 528.937220] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 528.942042] ? __lock_acquire+0x7f5/0x5130 [ 528.946260] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 528.950649] ? find_held_lock+0x36/0x1c0 [ 528.954693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 528.960213] ? _parse_integer+0x13b/0x190 [ 528.964341] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 528.969518] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 528.973822] ? _parse_integer+0x190/0x190 [ 528.977955] ? graph_lock+0x170/0x170 [ 528.981744] ? snd_pcm_oss_release+0x290/0x290 [ 528.986306] ? find_held_lock+0x36/0x1c0 [ 528.990352] ? graph_lock+0x170/0x170 [ 528.994133] ? find_held_lock+0x36/0x1c0 [ 528.998181] ? lock_downgrade+0x8e0/0x8e0 [ 529.002313] ? kasan_check_read+0x11/0x20 [ 529.006440] ? rcu_is_watching+0x85/0x140 [ 529.010569] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 529.015750] ? __fget+0x40c/0x650 [ 529.019183] ? match_held_lock+0x881/0x8b0 [ 529.023403] ? expand_files.part.8+0x9a0/0x9a0 [ 529.027968] ? kasan_check_write+0x14/0x20 [ 529.032185] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 529.037097] ? wait_for_completion+0x870/0x870 [ 529.041661] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 529.046831] ? snd_pcm_oss_release+0x290/0x290 [ 529.051394] do_vfs_ioctl+0x1cf/0x1650 [ 529.055265] ? ioctl_preallocate+0x2e0/0x2e0 [ 529.059657] ? fget_raw+0x20/0x20 [ 529.063093] ? __sb_end_write+0xac/0xe0 [ 529.067049] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 529.072598] ? fput+0x130/0x1a0 [ 529.075862] ? ksys_write+0x1a6/0x250 [ 529.079650] ? security_file_ioctl+0x94/0xc0 [ 529.084041] ksys_ioctl+0xa9/0xd0 [ 529.087481] SyS_ioctl+0x24/0x30 [ 529.090830] ? ksys_ioctl+0xd0/0xd0 [ 529.094439] do_syscall_64+0x29e/0x9d0 [ 529.098307] ? vmalloc_sync_all+0x30/0x30 [ 529.102439] ? _raw_spin_unlock_irq+0x27/0x70 [ 529.106931] ? finish_task_switch+0x1ca/0x820 [ 529.111423] ? syscall_return_slowpath+0x5c0/0x5c0 [ 529.116338] ? syscall_return_slowpath+0x30f/0x5c0 [ 529.121250] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 529.126599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 529.131429] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 529.136600] RIP: 0033:0x455259 [ 529.139769] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.147459] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 529.154710] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 529.161957] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 529.169205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 529.176454] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000004 2018/04/10 00:30:00 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x100000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000fffffff00000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:00 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000006ff6)='/dev/dsp#\x00', 0x201, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0xf0, 0x1e8, 0x1e8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x7, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff0000ff, 0xffffffff, 'syzkaller0\x00', 'lo\x00', {0xff}, {}, 0x88, 0x3, 0x20}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x80, 0x1, 0x6, 0x1, 0x1, 0x98], 0x80000001, 0x5780, 0xfff}, {0x1, [0xffffffffffffffff, 0x193, 0x7ff, 0x1000, 0x8, 0x3], 0xdf81, 0x4e0a, 0x6}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x5, [0x0, 0x30000, 0x100, 0x0, 0x9, 0x3], 0x4c6, 0x7ff, 0x3f}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3e0) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000003ff8)) pipe(&(0x7f0000000000)) 2018/04/10 00:30:00 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)={0x0, 0x2}) 2018/04/10 00:30:00 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cipher_null))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x10001, 0x81, 0x1, 0x7, 0x3, 0x3f29, 0x20, 0x9b93ec9, 0x1, 0x3}, 0xb) sendmmsg$alg(r2, &(0x7f000000bb40)=[{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000006000)="12e7", 0x2}], 0x1, &(0x7f0000006100)}], 0x1, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x401) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0xffffffffffffff0b, &(0x7f0000000000), 0x1, &(0x7f0000da2000)}, 0xfffffffffffffffe) 2018/04/10 00:30:00 executing program 7 (fault-call:5 fault-nth:5): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="83", 0x1}], 0x1) io_setup(0x100000001, &(0x7f00000001c0)=0x0) eventfd2(0x9, 0x1) io_getevents(r2, 0x2, 0x2, &(0x7f0000000200)=[{}, {}], &(0x7f0000000240)={0x77359400}) r3 = fcntl$dupfd(r1, 0x406, r0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000100)={&(0x7f00000000c0)=[0x80000001, 0x4, 0x8000000083], 0x3, 0x1, 0x7c77, 0x8, 0x4, 0x401, {0x100, 0x8, 0x7, 0x5, 0x3abc, 0x7912, 0xa1, 0x80, 0x80000000, 0x400, 0xbf9, 0x4, 0x6, 0x9b, "8a6e6f83edaa43f54fd9461e6864fe6181d28279bacc53da2ecdc01f3398cbd4"}}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000040)={0xd0002014}) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000280)='net/ptype\x00') setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00007ae000)=0x1, 0x28e) write(r1, &(0x7f00000000c0), 0x0) recvmsg(r0, &(0x7f0000019fc8)={0x0, 0x70, &(0x7f000001a000), 0x0, &(0x7f000001b000)}, 0x2) 2018/04/10 00:30:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}], 0x2) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 529.580439] FAULT_INJECTION: forcing a failure. [ 529.580439] name failslab, interval 1, probability 0, space 0, times 0 [ 529.591736] CPU: 0 PID: 2608 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 529.598578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 529.607929] Call Trace: [ 529.610531] dump_stack+0x1b9/0x294 [ 529.614167] ? dump_stack_print_info.cold.2+0x52/0x52 [ 529.619371] should_fail.cold.4+0xa/0x1a [ 529.623435] ? __save_stack_trace+0x7e/0xd0 [ 529.627770] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 529.632883] ? debug_check_no_locks_freed+0x310/0x310 [ 529.638082] ? graph_lock+0x170/0x170 [ 529.641892] ? save_stack+0x43/0xd0 [ 529.645528] ? __kasan_slab_free+0x11a/0x170 [ 529.649940] ? kasan_slab_free+0xe/0x10 [ 529.653924] ? find_held_lock+0x36/0x1c0 [ 529.657995] ? __lock_is_held+0xb5/0x140 [ 529.662076] ? check_same_owner+0x320/0x320 [ 529.666511] ? debug_check_no_obj_freed+0x2ff/0x584 [ 529.671547] ? rcu_note_context_switch+0x710/0x710 [ 529.676484] ? graph_lock+0x170/0x170 [ 529.680303] __should_failslab+0x124/0x180 [ 529.684552] should_failslab+0x9/0x14 [ 529.688359] __kmalloc+0x2c8/0x760 [ 529.691912] ? constrain_params_by_rules+0x141/0x1360 [ 529.697102] ? find_held_lock+0x36/0x1c0 [ 529.701165] constrain_params_by_rules+0x141/0x1360 [ 529.706175] ? lock_downgrade+0x8e0/0x8e0 [ 529.710315] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 529.715492] ? rcu_is_watching+0x85/0x140 [ 529.719628] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 529.724799] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 529.729978] ? is_bpf_text_address+0xd7/0x170 [ 529.734456] ? kernel_text_address+0x79/0xf0 [ 529.738848] ? __unwind_start+0x166/0x330 [ 529.742975] ? __kernel_text_address+0xd/0x40 [ 529.747453] ? unwind_get_return_address+0x61/0xa0 [ 529.752365] ? __save_stack_trace+0x7e/0xd0 [ 529.756675] ? save_stack+0xa9/0xd0 [ 529.760281] ? save_stack+0x43/0xd0 [ 529.763891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 529.769411] ? snd_interval_refine+0x428/0x700 [ 529.773979] snd_pcm_hw_refine+0x8e9/0x1180 [ 529.778288] ? constrain_params_by_rules+0x1360/0x1360 [ 529.783548] ? graph_lock+0x170/0x170 [ 529.787326] ? __lock_is_held+0xb5/0x140 [ 529.791373] ? __lock_is_held+0xb5/0x140 [ 529.795415] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 529.800930] ? snd_interval_refine+0x428/0x700 [ 529.805495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 529.811028] ? _snd_pcm_hw_param_set.constprop.34+0x259/0x610 [ 529.816895] ? rcu_read_lock_sched_held+0x108/0x120 [ 529.821892] ? snd_pcm_hw_param_max+0x730/0x730 [ 529.826541] ? _snd_pcm_hw_param_min+0x330/0x570 [ 529.831280] snd_pcm_oss_change_params_locked+0x2883/0x3ce0 [ 529.836983] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 529.843277] ? print_usage_bug+0xc0/0xc0 [ 529.847321] ? debug_check_no_locks_freed+0x310/0x310 [ 529.852492] ? __lock_acquire+0x7f5/0x5130 [ 529.857059] ? debug_check_no_locks_freed+0x310/0x310 [ 529.862233] ? __lock_acquire+0x7f5/0x5130 [ 529.866452] ? debug_check_no_locks_freed+0x310/0x310 [ 529.871624] ? print_usage_bug+0xc0/0xc0 [ 529.875676] snd_pcm_oss_change_params+0x80/0xe0 [ 529.880413] snd_pcm_oss_make_ready+0xbe/0x170 [ 529.884977] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 529.889801] ? __lock_acquire+0x7f5/0x5130 [ 529.894025] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 529.898414] ? find_held_lock+0x36/0x1c0 [ 529.902455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 529.907977] ? _parse_integer+0x13b/0x190 [ 529.912126] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 529.917298] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 529.921699] ? _parse_integer+0x190/0x190 [ 529.925832] ? graph_lock+0x170/0x170 [ 529.929616] ? snd_pcm_oss_release+0x290/0x290 [ 529.934179] ? find_held_lock+0x36/0x1c0 [ 529.938223] ? graph_lock+0x170/0x170 [ 529.942005] ? find_held_lock+0x36/0x1c0 [ 529.946056] ? lock_downgrade+0x8e0/0x8e0 [ 529.950187] ? kasan_check_read+0x11/0x20 [ 529.954314] ? rcu_is_watching+0x85/0x140 [ 529.958445] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 529.963623] ? __fget+0x40c/0x650 [ 529.967056] ? match_held_lock+0x881/0x8b0 [ 529.971272] ? expand_files.part.8+0x9a0/0x9a0 [ 529.975835] ? kasan_check_write+0x14/0x20 [ 529.980052] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 529.984975] ? wait_for_completion+0x870/0x870 [ 529.989542] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 529.994712] ? snd_pcm_oss_release+0x290/0x290 [ 529.999275] do_vfs_ioctl+0x1cf/0x1650 [ 530.003147] ? ioctl_preallocate+0x2e0/0x2e0 [ 530.007539] ? fget_raw+0x20/0x20 [ 530.010974] ? __sb_end_write+0xac/0xe0 [ 530.014935] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 530.020452] ? fput+0x130/0x1a0 [ 530.023715] ? ksys_write+0x1a6/0x250 [ 530.027505] ? security_file_ioctl+0x94/0xc0 [ 530.031894] ksys_ioctl+0xa9/0xd0 [ 530.035328] SyS_ioctl+0x24/0x30 [ 530.038675] ? ksys_ioctl+0xd0/0xd0 [ 530.042283] do_syscall_64+0x29e/0x9d0 [ 530.046154] ? vmalloc_sync_all+0x30/0x30 [ 530.050282] ? _raw_spin_unlock_irq+0x27/0x70 [ 530.054760] ? finish_task_switch+0x1ca/0x820 [ 530.059247] ? syscall_return_slowpath+0x5c0/0x5c0 [ 530.064171] ? syscall_return_slowpath+0x30f/0x5c0 [ 530.069098] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 530.074456] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/04/10 00:30:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20000000000000) r3 = gettid() getpgrp(r3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000180)="baf80c66b8fe1cbd8366efbafc0cb018ee66b9a909000066b87f00000066ba000000000f30650fc7ae00000f066f0f2042650f01d1f000270f01cb660f157a0f", 0x40}], 0x1, 0x19, &(0x7f00000002c0)=[@cr4={0x1, 0x20000}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00') syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="66baf80cb850c47f80ef66bafc0cb80000c0feefc4a19f51f2440f019fc62c248566f247ac4ede5600c4e3791d7ee004c40151e299992c0000b805000000b9336600000f01c1420f5bddb99f0a0000b88eabb2c9ba000000000f30", 0x5b}], 0x1, 0x0, &(0x7f00000000c0), 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x84) sendmsg$nl_netfilter(r5, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x3e8, 0x8, 0xb, 0x2, 0x70bd2c, 0x25dfdbfe, {0x5}, [@generic="e461957ee89a426694ca6a82b90ae3779c", @typed={0x8, 0xc, @u32=0x9}, @typed={0x8, 0x5a, @str='io\x00'}, @generic="bfb146045654d2650036352d646e49b3", @nested={0x220, 0x13, [@generic="d60fdf9fdd6c7878b9be28785c14eefd024cdeba0c98", @typed={0x3c, 0x82, @binary="0402a0ddea623feb88450114e876e697f60a90e6151993b96cc9975d4f50e366476e114a280df655451f0bd242d49b8e300a010437"}, @generic="4c7b528daac9a379765dd22d2873f83b248c93ff920f43a3b90276cd367ccff4f7d27c1a144ca86f6302a1b877292f88ce65c71678be9fb5f7afef9e686214eac5627ce0c299182b093a53dc8fee7c3266b6b0961c5ba94b35031fde6d1b9da4202f37e01279816126b5", @typed={0x8, 0x6c, @fd=r1}, @generic="965eb9611d0e5ed3d39d66d09be96d5cfba3d585e395e4a17c5d87315418b577669a1c2692ce8a1469368c142594f13facb66ec58d5d91fb59ab3d9d9b75d10269a1d8c83d", @generic="04e7bd8024af105d24568d3c500800ef04140010c298a9b737a7f4094dddeb04505e6bc49da13074c3fc0338e252f2c2f27bcc4d1a37feefade2e1378497308c3635a4bc8ca536084d49281c4047ae34a69153f74acd76a678337f674565cac49a37641210e1e1849c5610e31b260df6ad3e8e259db80518496e6c557be94bc8056c96d7d5a92abf3e658bd826", @generic="1d3e323238bedb45d59b52fa042139222259d2c71123863fbd4ecdd9a1d465e4b0b2d52099aeb7ebec7dff9a038ad1f6016377514ada17fcef523a493f1c675d925d7e369ded7449cadf72c6072bd63970676d", @generic="69e018b2ad5067e853198274d4240e70f51947bd9ad05b0c462b3dbf3f08081e2fdce6e03dc6c7e6d09a087b400f4f947f3e35"]}, @typed={0x68, 0x8f, @binary="0f316059e1c8f7583b0ea432be6a5195a1f202107a28a4e9597eb49181ca9a0ee3242a179ecc195b59f143c0a8e94b23a2bfd983f015e6c87451211f3968136c07e9b6027aa9191069c98550520a9b4c4d89f678d88e2d3c25fdafdf7abf459cde"}, @nested={0xec, 0x21, [@generic="113fd8ac70375aca4069c375d9e054ce6fccdcfbdc3851a2a7c87a6efc5c5eafb65864d754c74042341c045671c95cb72dccea6d421e1aee8e3677c43312a05bc87af00fea8f0eabdef1a3ac53072cc00f3d41cfb6187d841dbb01b5835d3df020fe8a44d17e9ee337901a6c058c7348b955e69e90d11ccea5b84d5600983f3d04c730389c63c53a9f415ad525b9a3386f4cdcf8bdf07be20af2ad15c5dc0137e633b527e7d7c07ce51eea0998b89cf4f665ba35e342bc30976a76b60fafeb2c0838aa59f52c803fa5e298ed30d0c48fa6cb4852cf36a747a222197c5111234d68242f9f926e3a"]}, @generic="5e47b58aa0b07660eaeeb96b3cd491661e77ef72d1f68c93b7167471cc2f67923d2c93", @nested={0xc, 0x21, [@typed={0x8, 0x8c, @u32=0x2}]}]}, 0x3e8}, 0x1}, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2, 0x0) 2018/04/10 00:30:01 executing program 6: r0 = socket$inet(0x2, 0x80006, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7, 0x2) getsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={"62726f7574650500", 0x20, 0x3, 0x398, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000bc0], 0x0, &(0x7f0000000000), &(0x7f0000000bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x0, 0x0, 'nr0\x00', 'gre0\x00', "62fc2ff77400", 'ip6gre0\x00', @empty, [], @link_local={0x1, 0x80, 0xc2}, [], 0xa0, 0xf0, 0x138, [@pkttype={'pkttype\x00', 0x8}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0x19, 0x0, 0x0, 'ip6gretap0\x00', 'ip_vti0\x00', 'eql\x00', 'bcsh0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0xe8, 0x130}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'irlan0\x00', 'bcsh0\x00', 'ip6_vti0\x00', 'irlan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x410) [ 530.079289] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 530.084458] RIP: 0033:0x455259 [ 530.087632] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.095333] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 530.102761] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 530.110014] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 530.117267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 530.124515] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000005 2018/04/10 00:30:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000f0ffff000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:01 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x700000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:01 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(rfc4309(pcrypt(authencesn(crc32c-generic,salsa20-asm))))'}, 0x57) fcntl$getflags(r0, 0x1) 2018/04/10 00:30:01 executing program 6: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80802) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x10000, 0x5, 0x5}, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1f, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x20000000000f) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000e49ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000180005050000000002000000000000080000c5096e4a3a1f9fc3a777ffcbaa00000c0100000000000000000000"], 0x28}, 0x1}, 0x0) 2018/04/10 00:30:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}], 0x2) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:01 executing program 3: socket$inet(0x2, 0x20000000000003, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f000041bff4)={0x10000011}) epoll_wait(r3, &(0x7f00004b4000)=[{}], 0x1, 0xfffffffffffffffe) fcntl$getown(r3, 0x9) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) r4 = gettid() ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000300)={0x7, 0x4f, 0x6, 0x3ff, 0xdf, 0x800}) r5 = getpgid(r4) r6 = getgid() setgid(r6) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x5, r5}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ppoll(&(0x7f00000000c0)=[{r1, 0x1}, {r3, 0x200}, {r2, 0x21}, {r2, 0x42}], 0x4, &(0x7f0000000140)={r7, r8+30000000}, &(0x7f0000000240)={0xa649}, 0x8) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="020000dfeffdcdd1f2a27c0702000000b010b46f8a0c51fb8fe922fb924af50b9deea595630584d2bc1cdcee73b4e54bc1be4f079f1b12260926aec5238eb4f8c2706960e39b33a17bf2fadaddb4f6395069fa9321b7496c9ca627c209a4"], 0x10}, 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000340)="5354a7966ca2dda7bdcb9a59f0af319cd71d1c5d6858b402398d89c84c5d83db0b4c25188d1ce0ae3f36c6fbafd97a439fadaffefc783c76a208141ddc964f152ff9239cca0bdfd5db0a319db9d1a5d4205f75aa9c37116eff774bd50a0e251ffbd380d39a7584bf93211b0453ad868a0db3a8185845e48227740531a5eeb596f4ae36978900c846e8b7fb56a4103efa77019e35b66b86c2f684673a", 0x9c, 0x4000, &(0x7f0000000400)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x10}, 0x7}, 0x1c) read(r0, &(0x7f00003fefff)=""/1, 0x1) r9 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r10, 0x5452, &(0x7f0000b38000)=0x3c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000541000)=0x200000000003) fcntl$setsig(r10, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r11}], 0x1, 0xfffffffffffffff8) dup2(r10, r11) fcntl$setown(r11, 0x8, r9) 2018/04/10 00:30:01 executing program 7 (fault-call:5 fault-nth:6): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000007fffffff000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:01 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x108) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xf, "fc180cf1a04f993aa9ce7437b71719"}, &(0x7f0000000080)=0x17) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1}, &(0x7f0000000100)=0x8) r2 = socket(0x1e, 0x5, 0x0) bind(r2, &(0x7f0000388000)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc0790405c7bad62e0a53a632ed4938000001018f8401a3ff59829a2b0a707ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f2000158d19bcb315a314a8ef1f1622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb1857"}, 0x80) sendmsg(r2, &(0x7f00000d1000)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02010000000020df0000000000000000805bf86c57020002000000f1fffff400000000000000000000010300000000e4ff064b3fdf3a000000080000000000000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ece000206000000090000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f00001fd000), 0x0, &(0x7f0000d19000)}, 0x0) 2018/04/10 00:30:01 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x8000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:01 executing program 6: rt_sigaction(0x400000000000007, &(0x7f0000000000)={0xfffffffffffff001, {0xffffffbfffbff270}, 0x0, 0xffffffffffffffff}, &(0x7f0000000180), 0x258, &(0x7f0000000140)) r0 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) syz_open_dev$dspn(&(0x7f0000000640)='/dev/dsp#\x00', 0x0, 0x0) 2018/04/10 00:30:01 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) sendto$inet(r0, &(0x7f00004b3fff), 0xfe31, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/04/10 00:30:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}], 0x2) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 530.695924] FAULT_INJECTION: forcing a failure. [ 530.695924] name failslab, interval 1, probability 0, space 0, times 0 [ 530.707344] CPU: 0 PID: 2669 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 530.714185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.723535] Call Trace: [ 530.726133] dump_stack+0x1b9/0x294 [ 530.729770] ? dump_stack_print_info.cold.2+0x52/0x52 [ 530.734963] ? lock_downgrade+0x8e0/0x8e0 [ 530.739132] should_fail.cold.4+0xa/0x1a 2018/04/10 00:30:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b4ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x7f, {0x2, 0x4e21}, {0x2, 0x4e22, @loopback=0x7f000001}, {0x2, 0x4e21}, 0xa0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x8001, 0x0, 0x2}) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000cdf000)) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x4002) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000640)=0x47e1) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000080)=""/239) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3f) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x2000000000002f28) r3 = request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000780)='/dev/dsp#\x00', 0xfffffffffffffffa) capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) socket(0x1a, 0x0, 0x0) keyctl$assume_authority(0x10, r3) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet(0xa, 0x803, 0x8) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @rand_addr}, 0x0, 0x0, 0x0, 0x200000cbe, 0x80}) r6 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x400080) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000580)=0xfffffffffffffe7a) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0xff, 0xffffffffffffff81, 0x2, 0x9, 0x0, 0x6, 0x592, 0xe, 0x401, 0x3, 0x100000000, 0x0, 0x5, 0x0, 0x3, 0x4, 0x3, 0xd43, 0x7c990f7d, 0x401, 0xffffffffffffffe0, 0x4, 0x9, 0xd0b, 0x9, 0x6, 0x2, 0x2, 0x3ff, 0xf1, 0x4, 0x0, 0x8, 0x35, 0x9, 0x0, 0x0, 0x52c, 0x1, @perf_config_ext={0xb4, 0x5}, 0x8000, 0x20, 0x6, 0x5, 0x20, 0x6, 0x8}, r7, 0x9, r2, 0x8) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000001c0)) sendmsg$nl_generic(r2, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0xc0, 0x23, 0x0, 0x70bd28, 0x25dfdbff, {0xf}, [@nested={0xac, 0x66, [@generic="3ad6245b4fb9000b34adf7394fb5aa5a492520a40ba6690893ee97f8c90d3771f06a7740ee41ec3e5299e2cdb2e26c63c35ae1dbae9a9b25ece1bf6c0bd83db103d9793f2ed2d06edc2243f916ae6f2cc5387d9cb7a389093a9c1e5a9afe1510b98d5e50d8e293245b6a4d385014a3cf99365e2a9453aa3e847f104f7ee8c6fce0a9190dbc59c341", @generic="a7b19a6296c5c3ef5a6abffa284d0dbbc31083f6b2df351f7d364c8ca03519"]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000400)=0x5) connect$pppoe(r6, &(0x7f00000005c0)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'syz_tun\x00'}}, 0x1e) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000240)) symlinkat(&(0x7f0000000340)='./file0\x00', r6, &(0x7f0000000540)='./file0\x00') ioctl$TCSETA(r0, 0x5402, &(0x7f00004cd000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}) 2018/04/10 00:30:01 executing program 4: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x80) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5451, &(0x7f0000000200)=0x10000000000002) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f0000000040)={&(0x7f0000893ff8)=ANY=[], 0x0, &(0x7f0000000080), 0x0, &(0x7f0000b30000)}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x10000}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x7f, 0x1b89162d, 0x0, 0x10001, 0x4, 0xc5b2, 0x100000001, 0x5, r6}, 0x20) r7 = dup2(r4, r5) gettid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) tkill(r8, 0x16) r9 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000000080)={0x0, 0x0, 'client0\x00', 0x0, "f0b353a8e8bea81b", "db632e503b605650e012187aeac3f1f5f5d3ad22097a62dcaa0affbaee6b8b47"}) ioctl$GIO_FONT(r7, 0x4b60, &(0x7f0000000240)=""/124) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000001c0)=[0x7fff, 0x1]) [ 530.743198] ? rcu_is_watching+0x85/0x140 [ 530.747351] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 530.752472] ? graph_lock+0x170/0x170 [ 530.756280] ? is_bpf_text_address+0xd7/0x170 [ 530.760788] ? kernel_text_address+0x79/0xf0 [ 530.765207] ? __unwind_start+0x166/0x330 [ 530.769356] ? find_held_lock+0x36/0x1c0 [ 530.773430] ? __lock_is_held+0xb5/0x140 [ 530.777507] ? check_same_owner+0x320/0x320 [ 530.781826] ? snd_pcm_oss_change_params+0x80/0xe0 [ 530.786757] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 530.791519] ? snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 530.796543] ? rcu_note_context_switch+0x710/0x710 [ 530.801474] ? SyS_ioctl+0x24/0x30 [ 530.805018] ? do_syscall_64+0x29e/0x9d0 [ 530.809085] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 530.814464] __should_failslab+0x124/0x180 [ 530.818704] should_failslab+0x9/0x14 [ 530.822507] kmem_cache_alloc_trace+0x2cb/0x780 [ 530.827183] ? do_raw_spin_lock+0xc1/0x200 [ 530.831429] ? trace_hardirqs_off+0xd/0x10 [ 530.835670] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 530.842183] ? _snd_pcm_hw_param_min+0x570/0x570 [ 530.846938] ? mark_held_locks+0xc9/0x160 [ 530.851095] ? kfree+0x111/0x260 [ 530.856398] ? snd_pcm_oss_change_params_locked+0x2c1e/0x3ce0 [ 530.862296] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 530.867489] ? trace_hardirqs_on+0xd/0x10 [ 530.872217] snd_pcm_oss_change_params_locked+0xc4d/0x3ce0 [ 530.877865] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 530.883750] ? print_usage_bug+0xc0/0xc0 [ 530.889163] ? debug_check_no_locks_freed+0x310/0x310 [ 530.894360] ? __lock_acquire+0x7f5/0x5130 [ 530.898599] ? debug_check_no_locks_freed+0x310/0x310 [ 530.903793] ? __lock_acquire+0x7f5/0x5130 [ 530.908613] ? debug_check_no_locks_freed+0x310/0x310 [ 530.913794] ? print_usage_bug+0xc0/0xc0 [ 530.917864] snd_pcm_oss_change_params+0x80/0xe0 [ 530.923067] snd_pcm_oss_make_ready+0xbe/0x170 [ 530.927645] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 530.932475] ? __lock_acquire+0x7f5/0x5130 [ 530.936697] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 530.941087] ? find_held_lock+0x36/0x1c0 [ 530.945134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 530.950655] ? _parse_integer+0x13b/0x190 [ 530.954788] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 530.959967] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 530.964274] ? _parse_integer+0x190/0x190 [ 530.968410] ? graph_lock+0x170/0x170 [ 530.972498] ? snd_pcm_oss_release+0x290/0x290 [ 530.977069] ? find_held_lock+0x36/0x1c0 [ 530.981121] ? graph_lock+0x170/0x170 [ 530.984917] ? find_held_lock+0x36/0x1c0 [ 530.988998] ? lock_downgrade+0x8e0/0x8e0 [ 530.993141] ? kasan_check_read+0x11/0x20 [ 530.997272] ? rcu_is_watching+0x85/0x140 [ 531.001412] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 531.006634] ? __fget+0x40c/0x650 [ 531.010078] ? match_held_lock+0x881/0x8b0 [ 531.014298] ? expand_files.part.8+0x9a0/0x9a0 [ 531.018868] ? kasan_check_write+0x14/0x20 [ 531.023090] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 531.028007] ? wait_for_completion+0x870/0x870 [ 531.032580] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 531.037754] ? snd_pcm_oss_release+0x290/0x290 [ 531.042325] do_vfs_ioctl+0x1cf/0x1650 [ 531.046202] ? ioctl_preallocate+0x2e0/0x2e0 [ 531.050730] ? fget_raw+0x20/0x20 [ 531.054182] ? __sb_end_write+0xac/0xe0 [ 531.058145] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 531.063665] ? fput+0x130/0x1a0 [ 531.066933] ? ksys_write+0x1a6/0x250 [ 531.070725] ? security_file_ioctl+0x94/0xc0 [ 531.075120] ksys_ioctl+0xa9/0xd0 [ 531.078566] SyS_ioctl+0x24/0x30 [ 531.081919] ? ksys_ioctl+0xd0/0xd0 [ 531.085532] do_syscall_64+0x29e/0x9d0 [ 531.089406] ? vmalloc_sync_all+0x30/0x30 [ 531.093538] ? _raw_spin_unlock_irq+0x27/0x70 [ 531.098022] ? finish_task_switch+0x1ca/0x820 [ 531.102507] ? syscall_return_slowpath+0x5c0/0x5c0 [ 531.107430] ? syscall_return_slowpath+0x30f/0x5c0 [ 531.112352] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 531.117705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 531.122537] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 531.127710] RIP: 0033:0x455259 [ 531.130886] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.138583] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 531.145837] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 531.153088] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 531.160340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 531.167589] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000006 2018/04/10 00:30:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:02 executing program 6: r0 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0x2}, &(0x7f0000000480)=0x8) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x1, @rand_addr}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x1, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) fallocate(r0, 0x12, 0x0, 0x1) r5 = request_key(&(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000003c0)='id_legacy\x00', 0xfffffffffffffffc) r6 = add_key(&(0x7f0000000400)='trusted\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="764d462bfcfc6915148630564211e6bb96677bbe41804b693f3b93504002e70ed26ff17f0876cf5c448e5ca377420ca9d41eb713c3a5757059ee4e2860a02bc73338a8e97b576567486d7938f499c03ec08b6f8fb82476ff775ba9c0c375f86cf4b36445fcca8a0729167aa9ad8dd6a1f80c9fa98e618c1294c245243f64ef6338cd35b4f7ec94250eb718f66e208189847a37fc510e91c21870a8b1ab741c761ae936cfcb8a813125251deec1a5f19c083d5f7c404efd7a5b7ecf2af0b116d539db8824de136d0ab77e5cfacf6bf902ef42ab43014fe463f86638c8161e", 0xde, r5) keyctl$setperm(0x5, r6, 0x2000) 2018/04/10 00:30:02 executing program 5: mmap(&(0x7f0000456000/0x2000)=nil, 0x2000, 0xa, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84008) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, {0x3, 0x0, 0x6e0, 0x0, 0x152}}) r2 = socket$inet6_sctp(0xa, 0x400000001, 0x84) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080), &(0x7f00000000c0)=0x8) syz_open_pts(r1, 0x400) 2018/04/10 00:30:02 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x10}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000f0ffffffffffff0000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x200c0010140}]}) 2018/04/10 00:30:02 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x500000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:02 executing program 7 (fault-call:5 fault-nth:7): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x0, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000caf000), 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x4e21, 0x8, 0x4e23, 0x10000, 0xa, 0x80, 0x20, 0x84, r2, r3}, {0x0, 0xf09, 0x10000, 0x6, 0x1, 0x7ff, 0x3, 0x400}, {0x76b, 0x6, 0x1, 0xffffffffffff8001}, 0x0, 0x6e6bba, 0x2, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x2, 0x4d3, 0x6c}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3501, 0x3, 0x1, 0x7, 0x81, 0x2, 0x3}}, 0xe8) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TCXONC(r0, 0x540a, 0x1) 2018/04/10 00:30:02 executing program 6: r0 = eventfd2(0x0, 0x0) write$eventfd(r0, &(0x7f0000083ff8)=0xffffffffffffffff, 0x8) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0xffffffffffffffff, 0x5, 0x5}) 2018/04/10 00:30:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x63625f2a, 0x100) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x0, 0x0, 0x20, 0x0, 0x800}, 0x3, 0x40}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000140)=0xff) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x1, 0x2, 0x1f}, 0x77, 0x5}) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)=ANY=[@ANYBLOB="1c0000002c00ff0a0000000000000000030000000d00002991000c00"], 0x1c}, 0x1}, 0x0) 2018/04/10 00:30:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000002000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 532.008906] FAULT_INJECTION: forcing a failure. [ 532.008906] name failslab, interval 1, probability 0, space 0, times 0 [ 532.020319] CPU: 1 PID: 2749 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 532.020330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.020335] Call Trace: [ 532.020357] dump_stack+0x1b9/0x294 [ 532.020378] ? dump_stack_print_info.cold.2+0x52/0x52 [ 532.020402] should_fail.cold.4+0xa/0x1a 2018/04/10 00:30:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000010000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 532.041967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 532.042783] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 532.042804] ? __lock_acquire+0x7f5/0x5130 [ 532.042831] ? graph_lock+0x170/0x170 [ 532.073531] ? find_held_lock+0x36/0x1c0 [ 532.077613] ? __lock_is_held+0xb5/0x140 [ 532.077640] ? check_same_owner+0x320/0x320 2018/04/10 00:30:03 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000300)="1f00000001dbd7530c0700000000002000050180d88e0100020423ca0000cf", 0x1f) getrandom(&(0x7f0000000540)=""/4096, 0x1146, 0x7) dup3(r1, r0, 0x0) fcntl$notify(r1, 0x402, 0x4) [ 532.077658] ? rcu_note_context_switch+0x710/0x710 2018/04/10 00:30:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000007f10000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 532.077678] __should_failslab+0x124/0x180 2018/04/10 00:30:03 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_crypto(r0, &(0x7f000037ffc8)={&(0x7f00009dd000)={0x10}, 0xc, &(0x7f00002ceff0)={&(0x7f000097b000)=@delrng={0x10, 0x14}, 0xfff1}, 0x1}, 0x0) 2018/04/10 00:30:03 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xc4f7e75900000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) [ 532.077693] should_failslab+0x9/0x14 [ 532.077703] __kmalloc+0x2c8/0x760 [ 532.077715] ? __lock_acquire+0x7f5/0x5130 2018/04/10 00:30:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000000007f1000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 532.077732] ? constrain_params_by_rules+0x141/0x1360 2018/04/10 00:30:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[], &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:03 executing program 6: r0 = socket(0xa, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000fedf98)={&(0x7f000000d000)=[0x8, 0x6], 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cfbc89fefc282b0e9b6d1b29d5500b5ff74b06ccbd9dee8c886586975b5446e"}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) getsockopt(r0, 0x0, 0x53, &(0x7f000000d000)=""/8, &(0x7f0000fe3000)=0x6b) [ 532.077750] constrain_params_by_rules+0x141/0x1360 [ 532.077775] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 532.077792] ? lock_downgrade+0x8e0/0x8e0 2018/04/10 00:30:03 executing program 5: mmap(&(0x7f0000080000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") write$sndseq(r0, &(0x7f0000000100)=[{0xb01b, 0x4, 0x3, 0xb291, @tick=0x9, {0x2, 0x81}, {0x5, 0x101}, @note={0x8, 0xa2a1, 0x4, 0x1000, 0x66cc}}, {0xffffffffffffb6bd, 0x1, 0x100000000, 0x8001, @tick=0x4, {0x0, 0xfffffffffffffffa}, {0xfff, 0xc0000}, @note={0x7fff, 0x1, 0x8, 0x7ff, 0x80}}, {0x3, 0xa2fb, 0x4, 0x4, @tick=0x8, {0x4, 0x7fff}, {0x6, 0xffffffffffffff01}, @queue={0x100, {0x6, 0x1f}}}], 0x90) accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x800) fcntl$setstatus(r0, 0x4, 0x10006000) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000001c0)={0x3, 0x0, [{0xb, 0x100000001, 0x2, 0x7, 0x1, 0x7f, 0x618}, {0x80000007, 0x9, 0x1, 0x0, 0x3, 0x600000, 0x291}, {0xb, 0x1ff, 0x3, 0x8000, 0x8000, 0x0, 0x9}]}) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x6, 0x81, 0x7, 0xffff}, 0x10) [ 532.077807] ? kasan_check_read+0x11/0x20 2018/04/10 00:30:03 executing program 7 (fault-call:5 fault-nth:8): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000002000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 532.077822] ? rcu_is_watching+0x85/0x140 [ 532.077834] ? rcu_bh_force_quiescent_state+0x20/0x20 2018/04/10 00:30:03 executing program 4: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$alg(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x0, 0x8, 0x16a9, 0x100}, {0x8, 0x3, 0x100000001, 0x6}]}, 0x10) [ 532.077847] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 532.077866] ? is_bpf_text_address+0xd7/0x170 [ 532.077880] ? kernel_text_address+0x79/0xf0 [ 532.077893] ? __unwind_start+0x166/0x330 [ 532.077904] ? __kernel_text_address+0xd/0x40 [ 532.077917] ? unwind_get_return_address+0x61/0xa0 [ 532.077930] ? __save_stack_trace+0x7e/0xd0 [ 532.077943] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 532.077954] ? snd_interval_refine+0x428/0x700 [ 532.077970] snd_pcm_hw_refine+0x8e9/0x1180 [ 532.077992] ? constrain_params_by_rules+0x1360/0x1360 [ 532.078003] ? snd_pcm_oss_change_params+0x80/0xe0 [ 532.078017] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 532.078031] ? snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 532.078040] ? snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 532.078052] ? do_vfs_ioctl+0x1cf/0x1650 [ 532.078061] ? ksys_ioctl+0xa9/0xd0 [ 532.078071] ? SyS_ioctl+0x24/0x30 [ 532.078084] ? do_syscall_64+0x29e/0x9d0 [ 532.078097] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 532.078108] ? kasan_check_read+0x11/0x20 [ 532.078120] ? do_raw_spin_unlock+0x9e/0x2e0 [ 532.078132] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 532.078143] ? print_usage_bug+0xc0/0xc0 [ 532.078153] ? kasan_check_write+0x14/0x20 [ 532.078164] ? do_raw_spin_lock+0xc1/0x200 [ 532.078179] ? trace_hardirqs_off+0xd/0x10 [ 532.078191] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 532.078206] ? debug_check_no_obj_freed+0x2ff/0x584 [ 532.078225] ? mark_held_locks+0xc9/0x160 [ 532.078236] ? quarantine_put+0xeb/0x190 [ 532.078252] snd_pcm_hw_param_first+0x30e/0x680 [ 532.078269] snd_pcm_hw_param_near.constprop.35+0x6e2/0xb10 [ 532.078286] ? _snd_pcm_hw_param_min+0x570/0x570 [ 532.078295] ? mark_held_locks+0xc9/0x160 [ 532.078308] ? kfree+0x111/0x260 [ 532.078320] ? snd_pcm_oss_change_params_locked+0x2c1e/0x3ce0 [ 532.078331] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 532.078342] ? trace_hardirqs_on+0xd/0x10 [ 532.078357] snd_pcm_oss_change_params_locked+0xc4d/0x3ce0 [ 532.078383] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 532.078394] ? print_usage_bug+0xc0/0xc0 [ 532.078409] ? debug_check_no_locks_freed+0x310/0x310 [ 532.078424] ? __lock_acquire+0x7f5/0x5130 [ 532.078436] ? debug_check_no_locks_freed+0x310/0x310 [ 532.078451] ? __lock_acquire+0x7f5/0x5130 [ 532.078466] ? debug_check_no_locks_freed+0x310/0x310 [ 532.078475] ? print_usage_bug+0xc0/0xc0 [ 532.078502] snd_pcm_oss_change_params+0x80/0xe0 [ 532.078514] snd_pcm_oss_make_ready+0xbe/0x170 [ 532.078528] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 532.078538] ? __lock_acquire+0x7f5/0x5130 [ 532.078551] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 532.078559] ? find_held_lock+0x36/0x1c0 [ 532.078571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.078582] ? _parse_integer+0x13b/0x190 [ 532.078596] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 532.078609] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 532.078621] ? _parse_integer+0x190/0x190 [ 532.078633] ? graph_lock+0x170/0x170 [ 532.078645] ? snd_pcm_oss_release+0x290/0x290 [ 532.078658] ? find_held_lock+0x36/0x1c0 [ 532.078672] ? graph_lock+0x170/0x170 [ 532.078685] ? find_held_lock+0x36/0x1c0 [ 532.078705] ? lock_downgrade+0x8e0/0x8e0 [ 532.078721] ? kasan_check_read+0x11/0x20 [ 532.078731] ? rcu_is_watching+0x85/0x140 [ 532.078743] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 532.078763] ? __fget+0x40c/0x650 [ 532.078776] ? match_held_lock+0x881/0x8b0 [ 532.078789] ? expand_files.part.8+0x9a0/0x9a0 [ 532.078800] ? kasan_check_write+0x14/0x20 [ 532.078812] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 532.078830] ? wait_for_completion+0x870/0x870 [ 532.078842] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 532.078853] ? snd_pcm_oss_release+0x290/0x290 [ 532.078865] do_vfs_ioctl+0x1cf/0x1650 [ 532.078881] ? ioctl_preallocate+0x2e0/0x2e0 [ 532.078893] ? fget_raw+0x20/0x20 [ 532.078906] ? __sb_end_write+0xac/0xe0 [ 532.078922] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 532.078931] ? fput+0x130/0x1a0 [ 532.078944] ? ksys_write+0x1a6/0x250 [ 532.078959] ? security_file_ioctl+0x94/0xc0 [ 532.078974] ksys_ioctl+0xa9/0xd0 [ 532.078988] SyS_ioctl+0x24/0x30 [ 532.078998] ? ksys_ioctl+0xd0/0xd0 [ 532.079014] do_syscall_64+0x29e/0x9d0 [ 532.079028] ? vmalloc_sync_all+0x30/0x30 [ 532.079040] ? _raw_spin_unlock_irq+0x27/0x70 [ 532.079051] ? finish_task_switch+0x1ca/0x820 [ 532.079064] ? syscall_return_slowpath+0x5c0/0x5c0 [ 532.079077] ? syscall_return_slowpath+0x30f/0x5c0 [ 532.079094] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 532.079110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.079128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 532.079138] RIP: 0033:0x455259 [ 532.079144] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.079157] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 532.079164] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 532.079171] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 532.079178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 532.079185] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000007 [ 532.389190] IPv4: Oversized IP packet from 127.0.0.1 [ 532.407199] sctp: [Deprecated]: syz-executor6 (pid 2789) Use of int in max_burst socket option. [ 532.407199] Use struct sctp_assoc_value instead [ 532.423394] sctp: [Deprecated]: syz-executor6 (pid 2792) Use of int in max_burst socket option. [ 532.423394] Use struct sctp_assoc_value instead [ 532.489846] FAULT_INJECTION: forcing a failure. [ 532.489846] name failslab, interval 1, probability 0, space 0, times 0 [ 532.489864] CPU: 0 PID: 2798 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 532.489872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.489878] Call Trace: [ 532.489900] dump_stack+0x1b9/0x294 [ 532.489920] ? dump_stack_print_info.cold.2+0x52/0x52 [ 532.489940] ? perf_trace_lock_acquire+0xe3/0x980 [ 532.489954] ? do_vfs_ioctl+0x1cf/0x1650 [ 532.489967] ? ksys_ioctl+0xa9/0xd0 [ 532.489978] ? SyS_ioctl+0x24/0x30 [ 532.489993] ? do_syscall_64+0x29e/0x9d0 [ 532.490017] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 532.490042] should_fail.cold.4+0xa/0x1a [ 532.490064] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 532.490088] ? graph_lock+0x170/0x170 [ 532.490109] ? find_held_lock+0x36/0x1c0 [ 532.490126] ? __lock_is_held+0xb5/0x140 [ 532.490152] ? check_same_owner+0x320/0x320 [ 532.490172] ? rcu_note_context_switch+0x710/0x710 [ 532.490192] __should_failslab+0x124/0x180 [ 532.490208] should_failslab+0x9/0x14 [ 532.490220] __kmalloc+0x2c8/0x760 [ 532.490233] ? linear_transfer+0xa20/0xa20 [ 532.490249] ? snd_pcm_plugin_build+0x64/0x670 [ 532.490266] snd_pcm_plugin_build+0x64/0x670 [ 532.490293] snd_pcm_plugin_build_io+0x28c/0x720 [ 532.490310] ? io_playback_transfer+0x310/0x310 [ 532.490333] ? snd_pcm_hw_param_max+0x730/0x730 [ 532.490350] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 532.490370] snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 532.490400] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 532.490414] ? print_usage_bug+0xc0/0xc0 [ 532.490431] ? debug_check_no_locks_freed+0x310/0x310 [ 532.490449] ? __lock_acquire+0x7f5/0x5130 [ 532.490463] ? perf_trace_lock+0x900/0x900 [ 532.490481] ? __lock_acquire+0x7f5/0x5130 [ 532.490500] ? debug_check_no_locks_freed+0x310/0x310 [ 532.490514] ? perf_trace_lock_acquire+0xe3/0x980 [ 532.490544] snd_pcm_oss_change_params+0x80/0xe0 [ 532.490559] snd_pcm_oss_make_ready+0xbe/0x170 [ 532.490576] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 532.490592] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 532.490602] ? find_held_lock+0x36/0x1c0 [ 532.490618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.490632] ? _parse_integer+0x13b/0x190 [ 532.490648] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 532.490663] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 532.490677] ? _parse_integer+0x190/0x190 [ 532.490693] ? graph_lock+0x170/0x170 [ 532.490707] ? snd_pcm_oss_release+0x290/0x290 [ 532.490722] ? find_held_lock+0x36/0x1c0 [ 532.490739] ? graph_lock+0x170/0x170 [ 532.490755] ? find_held_lock+0x36/0x1c0 [ 532.490778] ? lock_downgrade+0x8e0/0x8e0 [ 532.490797] ? kasan_check_read+0x11/0x20 [ 532.490809] ? rcu_is_watching+0x85/0x140 [ 532.490825] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 532.490849] ? __fget+0x40c/0x650 [ 532.490865] ? match_held_lock+0x881/0x8b0 [ 532.490881] ? expand_files.part.8+0x9a0/0x9a0 [ 532.490895] ? kasan_check_write+0x14/0x20 [ 532.490910] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 532.490928] ? wait_for_completion+0x870/0x870 [ 532.490943] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 532.490956] ? snd_pcm_oss_release+0x290/0x290 [ 532.490972] do_vfs_ioctl+0x1cf/0x1650 [ 532.490994] ? ioctl_preallocate+0x2e0/0x2e0 [ 532.491009] ? fget_raw+0x20/0x20 [ 532.491026] ? __sb_end_write+0xac/0xe0 [ 532.491046] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 532.491058] ? fput+0x130/0x1a0 [ 532.491074] ? ksys_write+0x1a6/0x250 [ 532.491092] ? security_file_ioctl+0x94/0xc0 [ 532.491108] ksys_ioctl+0xa9/0xd0 [ 532.491125] SyS_ioctl+0x24/0x30 [ 532.491137] ? ksys_ioctl+0xd0/0xd0 [ 532.491153] do_syscall_64+0x29e/0x9d0 [ 532.491166] ? vmalloc_sync_all+0x30/0x30 [ 532.491180] ? _raw_spin_unlock_irq+0x27/0x70 [ 532.491194] ? finish_task_switch+0x1ca/0x820 [ 532.491211] ? syscall_return_slowpath+0x5c0/0x5c0 [ 532.491227] ? syscall_return_slowpath+0x30f/0x5c0 [ 532.491247] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 532.491267] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.491297] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 532.491309] RIP: 0033:0x455259 [ 532.491317] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.491332] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 2018/04/10 00:30:04 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x11000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000f0ffff0000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:04 executing program 7 (fault-call:5 fault-nth:9): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:04 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r0, 0x20}, {r1, 0x25}], 0x2, 0x8) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x20000000004, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000200)=0x200) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)={@rand_addr=0x2, @rand_addr=0x4, 0x1, 0x3, [@broadcast=0xffffffff, @broadcast=0xffffffff, @empty]}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00000002c0), 0x4) bind(r3, &(0x7f0000d01ff0)=ANY=[], 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r3, &(0x7f0000000080), 0x153, 0x800000000000080) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="8a", 0x1}], 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x7) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f00000003c0)=0xfffffffffffffeff) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)) uname(&(0x7f0000000300)=""/103) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0x80000007, 0x4, 0x80000000, 0x7, 0x7}, {0x7, 0x8001, 0x4, 0x6, 0x3}]}) close(r2) 2018/04/10 00:30:04 executing program 4: setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d", 0x2}) r2 = shmget(0x1, 0x1000, 0x28, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/27) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}], 0x2cf) 2018/04/10 00:30:04 executing program 3: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000080)={'lo\x00', 0x6}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x10b040, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) 2018/04/10 00:30:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[], &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000acafed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000280)=""/141) [ 532.491342] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 532.491351] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 532.491359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 532.491367] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000008 [ 533.621552] FAULT_INJECTION: forcing a failure. [ 533.621552] name failslab, interval 1, probability 0, space 0, times 0 [ 533.632856] CPU: 0 PID: 2827 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 533.639694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 533.649043] Call Trace: [ 533.651634] dump_stack+0x1b9/0x294 [ 533.655265] ? dump_stack_print_info.cold.2+0x52/0x52 [ 533.660461] ? __save_stack_trace+0x7e/0xd0 [ 533.664798] should_fail.cold.4+0xa/0x1a [ 533.668868] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 533.673973] ? save_stack+0x43/0xd0 [ 533.677599] ? kasan_kmalloc+0xc4/0xe0 [ 533.681487] ? __kmalloc+0x14e/0x760 [ 533.685203] ? snd_pcm_plugin_build+0x64/0x670 [ 533.689787] ? snd_pcm_plugin_build_io+0x28c/0x720 [ 533.694714] ? snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 533.700602] ? graph_lock+0x170/0x170 [ 533.704402] ? do_vfs_ioctl+0x1cf/0x1650 [ 533.708464] ? ksys_ioctl+0xa9/0xd0 [ 533.712104] ? SyS_ioctl+0x24/0x30 [ 533.715657] ? do_syscall_64+0x29e/0x9d0 2018/04/10 00:30:04 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000652ff8)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r4, 0x8, 0x0) r5 = dup2(r3, r4) ioctl$int_in(r5, 0x5452, &(0x7f0000e35ff8)=0x45) readv(r0, &(0x7f0000001f00)=[{&(0x7f0000001e80)=""/120, 0x78}], 0x1) gettid() getpid() fcntl$setstatus(r0, 0x4, 0x4800) getpid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f00000001c0)={{0xff, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e23, 0x3, 'nq\x00', 0x8, 0x0, 0x59}, {@empty, 0x4e20, 0x12000, 0x7, 0x1, 0x100000001}}, 0x44) getpgid(0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) getpid() gettid() ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)=0x0) r7 = getpgrp(r6) fcntl$setown(r3, 0x8, r7) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001940)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}}}, &(0x7f0000001a40)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001a80)={r8, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}}, 0x10) fcntl$setsig(r4, 0xa, 0x12) tkill(r7, 0x100000000000016) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) 2018/04/10 00:30:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getroute={0x14, 0x1a, 0x0, 0x0, 0x25dfdbfe, {0x2}}, 0x14}, 0x1}, 0x4008004) write(r0, &(0x7f0000000140), 0x1c4) [ 533.719719] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 533.725086] ? find_held_lock+0x36/0x1c0 [ 533.729158] ? __lock_is_held+0xb5/0x140 [ 533.733250] ? check_same_owner+0x320/0x320 [ 533.737577] ? rcu_note_context_switch+0x710/0x710 [ 533.742515] __should_failslab+0x124/0x180 [ 533.746850] should_failslab+0x9/0x14 [ 533.750652] __kmalloc+0x2c8/0x760 [ 533.754199] ? linear_transfer+0xa20/0xa20 [ 533.758442] ? snd_pcm_plugin_build+0x448/0x670 [ 533.763118] snd_pcm_plugin_build+0x448/0x670 [ 533.767620] snd_pcm_plugin_build_io+0x28c/0x720 [ 533.772378] ? io_playback_transfer+0x310/0x310 [ 533.777058] ? snd_pcm_hw_param_max+0x730/0x730 [ 533.781735] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 533.786932] snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 533.792663] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 533.798551] ? print_usage_bug+0xc0/0xc0 [ 533.802618] ? debug_check_no_locks_freed+0x310/0x310 [ 533.807810] ? __lock_acquire+0x7f5/0x5130 [ 533.812050] ? debug_check_no_locks_freed+0x310/0x310 [ 533.817241] ? __lock_acquire+0x7f5/0x5130 [ 533.821478] ? debug_check_no_locks_freed+0x310/0x310 [ 533.826664] ? print_usage_bug+0xc0/0xc0 [ 533.830739] snd_pcm_oss_change_params+0x80/0xe0 [ 533.835499] snd_pcm_oss_make_ready+0xbe/0x170 [ 533.841556] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 533.846400] ? __lock_acquire+0x7f5/0x5130 [ 533.850635] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 533.855043] ? find_held_lock+0x36/0x1c0 [ 533.861720] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 533.867299] ? _parse_integer+0x13b/0x190 [ 533.871463] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 533.876659] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 533.880987] ? _parse_integer+0x190/0x190 [ 533.885140] ? graph_lock+0x170/0x170 [ 533.888949] ? snd_pcm_oss_release+0x290/0x290 [ 533.893536] ? find_held_lock+0x36/0x1c0 [ 533.897596] ? graph_lock+0x170/0x170 [ 533.901387] ? find_held_lock+0x36/0x1c0 [ 533.905444] ? lock_downgrade+0x8e0/0x8e0 [ 533.909584] ? kasan_check_read+0x11/0x20 [ 533.913720] ? rcu_is_watching+0x85/0x140 [ 533.917857] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 533.923048] ? __fget+0x40c/0x650 [ 533.926487] ? match_held_lock+0x881/0x8b0 [ 533.930706] ? expand_files.part.8+0x9a0/0x9a0 [ 533.935348] ? kasan_check_write+0x14/0x20 [ 533.939592] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 533.944517] ? wait_for_completion+0x870/0x870 [ 533.949087] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 533.954260] ? snd_pcm_oss_release+0x290/0x290 [ 533.958826] do_vfs_ioctl+0x1cf/0x1650 [ 533.962704] ? ioctl_preallocate+0x2e0/0x2e0 [ 533.967096] ? fget_raw+0x20/0x20 [ 533.970537] ? __sb_end_write+0xac/0xe0 [ 533.974501] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 533.980022] ? fput+0x130/0x1a0 [ 533.983295] ? ksys_write+0x1a6/0x250 [ 533.987086] ? security_file_ioctl+0x94/0xc0 [ 533.991495] ksys_ioctl+0xa9/0xd0 [ 533.994937] SyS_ioctl+0x24/0x30 [ 533.998288] ? ksys_ioctl+0xd0/0xd0 [ 534.001900] do_syscall_64+0x29e/0x9d0 [ 534.005772] ? vmalloc_sync_all+0x30/0x30 [ 534.009906] ? _raw_spin_unlock_irq+0x27/0x70 [ 534.014384] ? finish_task_switch+0x1ca/0x820 [ 534.018864] ? syscall_return_slowpath+0x5c0/0x5c0 [ 534.023779] ? syscall_return_slowpath+0x30f/0x5c0 [ 534.028699] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 534.034052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 534.038885] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 534.044058] RIP: 0033:0x455259 [ 534.047229] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.054923] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 534.062174] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 2018/04/10 00:30:05 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xe00}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 534.069424] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 534.076675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 534.083925] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000009 2018/04/10 00:30:05 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x8, 0x757d, 0x7, 0x34, 0x0, 0x70bd2b, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d4, 0x4, 0xd58, 0xec, 0x3, 0xa0000000}, @sadb_key={0x8, 0x9, 0x198, 0x0, "ba35309210b79f306f9f0a56e676517e210ecf5070a26a802af19c43a80e536b48bd2b538fdbe62b4d7358561611c158721889"}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2d}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0xb, 0x10, 0x14}, @sadb_key={0x1a, 0x9, 0x638, 0x0, "c0a6ce1a532fae731d42c04c1c249c01b2174c7d85624b4a09c6c952b82b0ba56a73209e29e8ab33ec010c85486d796bde3cb479a545b3cf2c1f0e502d10341978b17617102e52ef370d04db062f1d3a64e6b47791f8c278eeb1d817db52e793142811a1d9eca21506e91f1585f980ec07b0df74ddd9ac0d17fdd2ac8041f8bbb16e9b30f6cde995df9fb2651557056b61bd9bcc7dcd4db6ecd43738e1b462b07f2e5ff360971074ea8ddfc1d127beffea68494fd5d3dca86012a79fc4a29f8bd4b0a6923fdbcb"}, @sadb_address={0x5, 0x17, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e23, 0x8cb, @remote={0xfe, 0x80, [], 0xbb}, 0x1ff}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}]}, 0x1a0}, 0x1}, 0x40) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000002c0)=""/228) 2018/04/10 00:30:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000020000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[], &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r3 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:05 executing program 7 (fault-call:5 fault-nth:10): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000f10700000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:05 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x2000000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) [ 534.404764] FAULT_INJECTION: forcing a failure. [ 534.404764] name failslab, interval 1, probability 0, space 0, times 0 [ 534.416112] CPU: 0 PID: 2877 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 534.422971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.422980] Call Trace: [ 534.434919] dump_stack+0x1b9/0x294 [ 534.438560] ? dump_stack_print_info.cold.2+0x52/0x52 [ 534.443761] ? perf_trace_lock_acquire+0xe3/0x980 [ 534.448613] ? do_vfs_ioctl+0x1cf/0x1650 [ 534.452681] ? ksys_ioctl+0xa9/0xd0 [ 534.456313] ? SyS_ioctl+0x24/0x30 [ 534.459859] ? do_syscall_64+0x29e/0x9d0 [ 534.463930] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 534.469303] should_fail.cold.4+0xa/0x1a [ 534.473380] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 534.478482] ? graph_lock+0x170/0x170 [ 534.482277] ? find_held_lock+0x36/0x1c0 [ 534.486338] ? __lock_is_held+0xb5/0x140 [ 534.490400] ? check_same_owner+0x320/0x320 [ 534.494712] ? rcu_note_context_switch+0x710/0x710 [ 534.499754] __should_failslab+0x124/0x180 [ 534.503976] should_failslab+0x9/0x14 [ 534.507762] __kmalloc+0x2c8/0x760 [ 534.511283] ? linear_transfer+0xa20/0xa20 [ 534.515504] ? snd_pcm_plugin_build+0x64/0x670 [ 534.520073] snd_pcm_plugin_build+0x64/0x670 [ 534.524472] snd_pcm_plugin_build_io+0x28c/0x720 [ 534.529212] ? io_playback_transfer+0x310/0x310 [ 534.533868] ? snd_pcm_hw_param_max+0x730/0x730 [ 534.538525] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 534.543704] snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 534.549909] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 534.555779] ? print_usage_bug+0xc0/0xc0 [ 534.559829] ? debug_check_no_locks_freed+0x310/0x310 [ 534.565005] ? __lock_acquire+0x7f5/0x5130 [ 534.569230] ? perf_trace_lock+0x900/0x900 [ 534.573457] ? __lock_acquire+0x7f5/0x5130 [ 534.577678] ? debug_check_no_locks_freed+0x310/0x310 [ 534.582852] ? perf_trace_lock_acquire+0xe3/0x980 [ 534.587695] snd_pcm_oss_change_params+0x80/0xe0 [ 534.592436] snd_pcm_oss_make_ready+0xbe/0x170 [ 534.597008] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 534.601843] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 534.606234] ? find_held_lock+0x36/0x1c0 [ 534.610280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.615802] ? _parse_integer+0x13b/0x190 [ 534.619936] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 534.625115] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 534.629421] ? _parse_integer+0x190/0x190 [ 534.633556] ? graph_lock+0x170/0x170 [ 534.637350] ? snd_pcm_oss_release+0x290/0x290 [ 534.641917] ? find_held_lock+0x36/0x1c0 [ 534.645963] ? graph_lock+0x170/0x170 [ 534.649749] ? find_held_lock+0x36/0x1c0 [ 534.653802] ? lock_downgrade+0x8e0/0x8e0 [ 534.657937] ? kasan_check_read+0x11/0x20 [ 534.662068] ? rcu_is_watching+0x85/0x140 [ 534.666203] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 534.671389] ? __fget+0x40c/0x650 [ 534.674828] ? match_held_lock+0x881/0x8b0 [ 534.679050] ? expand_files.part.8+0x9a0/0x9a0 [ 534.683617] ? kasan_check_write+0x14/0x20 [ 534.687838] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 534.692768] ? wait_for_completion+0x870/0x870 [ 534.697335] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 534.702510] ? snd_pcm_oss_release+0x290/0x290 [ 534.707075] do_vfs_ioctl+0x1cf/0x1650 [ 534.710954] ? ioctl_preallocate+0x2e0/0x2e0 [ 534.715348] ? fget_raw+0x20/0x20 [ 534.718789] ? __sb_end_write+0xac/0xe0 [ 534.722749] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 534.728267] ? fput+0x130/0x1a0 [ 534.731534] ? ksys_write+0x1a6/0x250 [ 534.735323] ? security_file_ioctl+0x94/0xc0 [ 534.739720] ksys_ioctl+0xa9/0xd0 [ 534.743163] SyS_ioctl+0x24/0x30 [ 534.746513] ? ksys_ioctl+0xd0/0xd0 [ 534.750139] do_syscall_64+0x29e/0x9d0 [ 534.754012] ? vmalloc_sync_all+0x30/0x30 [ 534.758152] ? _raw_spin_unlock_irq+0x27/0x70 [ 534.762630] ? finish_task_switch+0x1ca/0x820 [ 534.767117] ? syscall_return_slowpath+0x5c0/0x5c0 [ 534.772037] ? syscall_return_slowpath+0x30f/0x5c0 [ 534.776958] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 534.782312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 534.787148] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 534.792320] RIP: 0033:0x455259 [ 534.795493] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/04/10 00:30:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 534.803187] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 534.810439] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 534.817691] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 534.824946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 534.832201] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000a 2018/04/10 00:30:05 executing program 5: syz_emit_ethernet(0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa000000000000c3127d227eb2f0"], &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e18427899afce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a40935bee8a24cb2123e4a0090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07") setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000380)={0x4}, 0x4) sendmsg$key(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0215a00009000000000000000104000000000000060000000000000002000b00ffff0000040000000000000002001000000004d2000004d500000000be5fadff6035d8dc97393981"], 0x48}, 0x1}, 0x20000000) io_setup(0x2836, &(0x7f0000000200)=0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000680)={{0xa, 0x4e23, 0xffffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x3f}, {0xa, 0x4e23, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0xe87d}, 0x1, [0x1, 0x9, 0x7fff, 0xfffffffffffffffe, 0x81, 0xc8d1, 0x9, 0x1ff]}, 0x5c) accept$inet(r0, &(0x7f0000000600)={0x0, 0x0, @dev}, &(0x7f0000000640)=0x10) io_getevents(r1, 0x13, 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)={0x77359400}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) setfsuid(r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) fchdir(r0) 2018/04/10 00:30:05 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xb000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:05 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x8000000000002, &(0x7f0000ed4000)=0x79, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r1 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x80800) sendto$llc(r1, &(0x7f0000000080), 0x0, 0x488d1, &(0x7f00000000c0)={0x1a, 0x321, 0x770, 0x7, 0xbac, 0x400, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000680)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0xfc}]}, 0x10) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) sendto$inet(r0, &(0x7f0000000100), 0x3c058533fd59b3f3, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f000009cfe4)={&(0x7f000009ffa8)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(rfc4106(gcm(aes))))\x00'}, 0x80, &(0x7f0000398000)=[{&(0x7f0000697000)="80", 0x1}], 0x1}, 0x0) 2018/04/10 00:30:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f000023e000), &(0x7f00004eb000)=0x4) 2018/04/10 00:30:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:05 executing program 7 (fault-call:5 fault-nth:11): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:05 executing program 4: unshare(0x400) r0 = socket(0xb, 0x80000, 0x20) setsockopt$llc_int(r0, 0x10c, 0xf, &(0x7f0000000040)=0xce, 0x4) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000a9bff8)={0x1}, 0x8, 0x0) flock(r1, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x800, 0x0) mq_getsetattr(r2, &(0x7f0000000080)={0x9, 0xfffffffffffffffe, 0xfae, 0xc2a, 0x7, 0x8, 0x3, 0xffffffffffffff77}, &(0x7f00000000c0)) 2018/04/10 00:30:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000020000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 535.059102] FAULT_INJECTION: forcing a failure. [ 535.059102] name failslab, interval 1, probability 0, space 0, times 0 [ 535.070430] CPU: 0 PID: 2907 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 535.080132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 535.089478] Call Trace: [ 535.092078] dump_stack+0x1b9/0x294 [ 535.095718] ? dump_stack_print_info.cold.2+0x52/0x52 [ 535.100922] should_fail.cold.4+0xa/0x1a [ 535.104995] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 535.110105] ? debug_check_no_locks_freed+0x310/0x310 [ 535.115303] ? graph_lock+0x170/0x170 [ 535.119114] ? find_held_lock+0x36/0x1c0 [ 535.123184] ? __lock_is_held+0xb5/0x140 [ 535.127261] ? check_same_owner+0x320/0x320 [ 535.131590] ? rcu_note_context_switch+0x710/0x710 [ 535.136521] ? graph_lock+0x170/0x170 [ 535.140328] __should_failslab+0x124/0x180 [ 535.144571] should_failslab+0x9/0x14 [ 535.148378] __kmalloc+0x2c8/0x760 [ 535.151933] ? constrain_params_by_rules+0x141/0x1360 [ 535.157124] ? find_held_lock+0x36/0x1c0 [ 535.161201] constrain_params_by_rules+0x141/0x1360 [ 535.166231] ? lock_downgrade+0x8e0/0x8e0 [ 535.170398] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 535.175592] ? rcu_is_watching+0x85/0x140 [ 535.179747] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 535.184960] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 535.190159] ? is_bpf_text_address+0xd7/0x170 [ 535.194659] ? kernel_text_address+0x79/0xf0 [ 535.199074] ? __unwind_start+0x166/0x330 [ 535.203236] ? __kernel_text_address+0xd/0x40 2018/04/10 00:30:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000128000)={&(0x7f0000440000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x14}, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="bbbe1699c03584143847f699dee30d58b257018df214dbcca58222b8fba47fb81382a705cec6ec57e071b9096d44b3531a3456608b4317aa0abd631c9a8f7052c0e003e872c75829864252690d3b8b1c7268d41f9c3674c7342104eecb2ab011877b5399e53b40db73f04bafebe7d358bc7c726d2c33204e7e889b74f6a45dbb06d6f8014dd7036d583de223bb8406fc358193d076137f07873936064c5c76a00b16aaf6b5861c78140ca8ca5e674310b789b1c47ada3725d92311daa430b14e416ec0b44469366bd692ce4c916f6a4975f3e7ddee2e749f83209f83d5b41253a5f956df08bc4777067a0c37b30682f4d8ef5df71574d4d341a0bc39331f629a994b15af4c8bbee7cbecee72aa5993c88bf38068374ac85a5292d71a6263ff52e22d6a3ed094aaae3712c85bc42c4623ac79e8cbb71c7931b59f78a392fa89aa155f5636fc414831a69fc373e1021a5a2be57469b8db74cf3a4847fdffbc58bee9fde39d08ba61e45ad9bc844178abc6cdecf2b1d145bdc3608eb41d583bb4b6b1206102a5e74110cea881ae2432ad30a3079b75e924ae350b52c0115cdc6784ae598b804f31aab266e1a15a328b27d616b588315245394e75bc58748b901a99d45f925630d0965057ee361a04bebc954b68dee3c178720a54662b9c09220846b5845f567f53c07e1fe4ae75521c46e1d6cda90102e161488f581bf0be53c5dc1185225d2788cb1c2a40378820963204587e40132107fe9f245a7d3ef19e2831051d9cfb6371c878cb1996ea22ab327a4d214c04b542d05b5f3613adbb8f720d19f7805191383df259fcae08d970748f711b4f227faf73a6388042d00e0dfcd618427e349e3df0ac1731e226e00c150b16ea8bd6b1e48706677d92b728c130be4975f1c177bd9d9d341a9722620c8ecfeb0781ed46bc924ccd32c41b3d94846e10a7f00d3d424d35775dbccd4de8f8d9ed827827b7c3f9ded36acf6c85e39caf526a4f6e6d9220ad3fc16c435b5fe9d71547cdbf8a511e14d8f3622dbf617ac36c43692bbbc4e6ca47368ae6200f1e3dc74854d669ff5b48b755eafbd2c9bc51f881c45f881e59765537237a5801637d65c24a9d385eada4403c1bdbb9d2e474721832857d5773d532f3a60fad5ce89d24edfa8b2ad8114b996b9c6c9e34fed774a30154c1fcb9d7d66c6ec7b33e844afd76ef95c5660b7f931535e2273c0b0dda87cb9cae3e963f9327f2ec29a2d688ca98aab67f6797423eee4b4589e05ef73981295b6a5c93be192fd856e36fe4dc373140a9def1ee523dadbd2a1cecb7a42e413d7d2f8eee39eb91a5a61e58efaf538510a8e9b111887dbf5bbb89a6a6e1d7d02081e218a754b88fef10e430a9699b441b20b32b56813bf4dfc47e10159af7774972a7cb62ecbd59a1875f6d921dcb07b9534f69f9f11d0747e6c28894cd9653c8a40714b1c12958b01d86faa0d30780b216a4c16dcf32adacaf0a729a38ddf8197b6dceae059276561f9a766830dd50fcf3fdef62c73b5d8faf31b6a29d22844379deeb57303048e1ef88e516d4a51da504352245482ff15c2c1a791a96d020d4161e908336c0ca9e56785a40638c1b9beca4acdebb9a1065e48a51d3dca566940e2848e0635cd5d86ef0bc5aac198585de9d3bb8f2f42ddc94e6567cfed4b883d2e11be4474eecb5979a917b29bf7e64bd2ca33526b92d61b4b41b2e07f1d2baafe6da5d28b960e53cc89fb1bdcc62a7d266691f0fd14a4718d115eef2de8d0593dd50c98b9bd31641d10ddf00a278648f2f3a172f1f8175df1ce3dba2c5bb15f6959d9e704fdad594cfbb6281500f7b7f6801f3852cf9c5350122a9f23d57ee20a9c46ead909ef1070ef34ab07fabb7a3cc8ce387f8f5a416811439d474467cb7b7e4baa9fec543afbe4ff46ae6765aad7839330f851b43b3b945370e566a7d2d238f989a80536bb52e7ef780581abd0c75cb35c372dba658285dcfb37cbea01844188110ae4020134072eff7c99ff1bfe739947acef94177a3ef93cf4f1bd947db56128e5e63f490d26aa17a75c34e4839ed9a775d84ceddd3a69e55b08b1b12fbc3e2c84eac1a8b568aa3f8a09c883a167d1c9b1705a56e1c2697ea3ef5be122ef928383eaaa12b87b6f226241f36e485cca2063958fd322d88b10e41e0f5931e1d7303c1c52894370b932f28d664ffa7a7251c30aa955e3a769d395270915d981055ab151c0aa965ab8c45365877a24b0046aaa16f636f18238e4127c91d5f6e2f79a0e19a7c0383133205dc2d99cc21b1d5d7b146ac0638531d8bbdae1b61c22afb5d673538c9ad59183f8f088021ee905ecb482c027628c8b6d47871952bdb24d1c73ac9fa40ce908eac0378b29e07a6dfbd6d3df051cae210117b0c19d0aa3e69c4c2afe8c95cb9c339edf5200f6a209f4280bb8f0f09ed01719a49da6cd9bc245a42fbda473814092b704b78bfbed97e7cd9b390a4dd2a66495e34abb082f7e17970ef73952a77d2b170c4d45c4de6eb1d661a3e888204b5c6dfa7f218ff6914f1f3eef098c3a9b1708ca69d213653442d312379dcb066128501e3854bd904d0df7c15e75dfeec336a9cf942f7c6b71f27f65c34dbbe549e6bd33cec55f2158be17db7b0347cf82331ba8c594c99865e9822577998e75fb6f7c1f2232f69c02225b186da7cc29ad46d9a382e8463b5af28562d6b3aec564b55967e292ae65d3def693934106a7279367f301562b7beaccabddedf7c55086502f37f306a82c150de83b1ecaea1be4cf688d5ba910ade4defdf0562a20e94c819a36a22439f02bb1f95eb70bd8d006d5a8b58564f380e809635e95403a507c785e91164bcd740e92cbdf9c6d117cd2130e850f392ea1671af72b2661684be4622cc490bafb360744a805aab10f3237e2a8a2df02b059ae07175c2cbc33e62ff62fca7b899e5191c92d94bafd067535eb3218a1d9cc9f6a0e7e52184038495d7715f5b0c70f1eef05dd19888bb92b07bc28a09207122951bc4397be9debd2e066511af1f776a0c89205d4becb1a47b8edfcd25f1cad68fdc52d047e515f25fd427dd2c96c694b960c44460d6d1e5789c82ae0e20752a2c07de5ecda94c34f8b3a1ff9d8f8391315f8d6439e26390870d42308c4b511b5899022430b72502be490aa5a4377cbb053bb52518cf10fb27d35822248c11d4fdce034b9862988644d5e6cb2183317409d6ba60302a229333b4cbfd9baf6b63b7fd5669ad4a90b328de9c3d01209ed054da345f5a7bc3d048f83317ec5975d052a2f4050f69b4fdf49418746599c9e829f4236d4f0904d7488d6fad746677726396f5456af08cface9dbde7cc3a9f93aa6f11d759b7ae7a5746473534b75957dd0b56780f200ac048775a6a7d2120da36860fb32914ad876f9e920bafd156cbae3aba44d7279c17b60090c25371cbcfa76f5967b7a5e30226c971201f235c7eb4e05721793c952583e36fbf9b63138ab60d85950f012644582a6d2d58ea290af0c982e5ded2cac2467fce3453bcb5113d7d4b88ffac79bfd72be442d3289a316b2e92e29052bb67477d69d64c4f726f11ed383c7fa9cc0aff7a5416e1833bf020d3939940ad7f2bf936a74b2e05312db4958107565ceb4f001e6772f7932a7c1d43b939c1fc8a5799629b9e3a30f8788b7138e076cdf7b56b4e2071cab5d2d868c02a0cc152af0b9fcd778111303eb75c8f53ee0c3b07591cfe850edb5f25b5055ae1c33e703c6dc179139141e36bb9cc278bb1231f132d3e7202875ba827babba7fbd17fed521086d19a39c448b670e7401306f3a78fef7669211adfef3ac16f8f547bebba2979d99829cc2c90154b6e12b1efa935cf46a1466e79df0c86a8a67b47017fedbf544abd3b1d4dd05435931027cdd190764551264cf4261e9245ee8f4e926d149fd994fe0810d89abd53922f73f3b861383303c92b77f7c2799f76f04b05e5ccddc5bda07af2a664146c50ad38cd7ca33d07383c6634977f218ac7b6b9b1bf7b5ea9990ac30baa744f30b7d369d209d1f8b12af185c02a4c04f6468fbdd0420e533b8a511a41f4fc29dbae23205b36e3e6e3c06acb13307d94f5b5b2f901399dee3038b93c872f7a2f799039b93c3f01408565f59100eab6b3bd5cc02d9b1bd81d07c157e66821249150afde144bda83c59a9ef67f0fa03bbb1a06dd857df680a25d8d3451ee547e83e4318066ad339a3580c021ce5d8486e7f256c58bc00fb3f517befbb1ec9bffe6bc2fb52f71152d752ef2dcc8ebeea39c02704e55fef56da82d45e1e89f65f2ee3ab448f705385116c5a3051f283435187133e950ec2f4e87bb177388c6db0b4c30adfc865b070b1035ef2bced2dccf6e0536d293179f466684860770baf04c915e08123eb85e393b35d57d4d973444a5ba5f4ab5fa24c4393f2f94c8d20f9dbb15e37fcb3d7a0f1853b5df68fbc530ec4aaf42bc6008b50fe01967b5f91862ab488b36ba4f5d25ecef4ea02b331b59f64dbd4a737b39ca58d9e80193cc30e32e3f2f94a1a368128d8956e1c8b11df4fdf910d9ead59d8a8f646816789140def317aa5acb91b9fddabe5c12422d4e7a34893e1244a41e6f07f7fad4b20f41ef40b319e276aee023e0338ac1830c94c2baa2632b86ae5f683efc008d168c34a5138442835448a6845d1e9767fbc78f9fb45dc909c3e3c061cbf05dccd14cb849808684e5d9fa21ff95290286ec68d361b3f3acf5fd0649c65f5bf32b481ba3300502165d9f64a7168cb7aad3fc97d9839280ee56a5accdfd12cf34dd8e2631f19838ead23d6e5b5cf83c085a0bbf94893d32062f84b10958d5d6f430d10e60da9d3cf8e80f380446bc471c809c4d793aed72ff44e87acbbcce85f912acd5a86a8aae21261c7c4d317c83cb6ec1be1834d975ceed65e4b1bc4e17da7023bdad47cfac1c313521b9846d4fcf3429a80fd4d4a8caa35b052fa72e1278989a71a77ef3c4c2f84e83a65ef56ded8cd49dc5f5ac9c74477d9287fe2ba28b7129a53126126981777661322402ddf37f9cb7c8efc01a61c8014ac849e2ea52e95650461384e5de2fb7f67df6e28b122b2a55d2a03bd74c0fa5e8ad16175324b3728768ba1ee3a8db671333bff55238bc1737bf3f3275506b5c94d14f44d19892736189c7bd47c8e65bddfee4c3b5d45306c35b4963cc213abe6dbce31810af9121e7cae1baea2e8c8a8cbd1a8ec402c202aedecedfd40f8bffaf7f6aca434f8d3b8c990a98f5843dfd46b306f2a30347aae01a4d24e9f8d62041418670ab179340d05cd34abdf4992adff4ca0f04f7436be8ed9a917feed9923ed7c86487b7852e420bba1d5fde84f3b92a1b977db3a3ccb5cb9ecbb00e3673874dff38dd6e80580580f434dc3116eae6a414878184542247992e1f23436b4d14ecc1896bf36b11dd96bb066a742d59ba48a2083efd9417a4ca7a9cc3f822d4d56685eddd60c43a6b45135455b9c3be850c8e4aa215a8c00749225c810e2f8ac67b72bbf5e04e484bddd2c375f9a5b302192e6ddb39935a02013d2586508bc91b3fc9d42082a69fbf0cdcd0e7b1fa35e06c510c1b969bf9f5497ed466e02c92d4531d7581f04bdea6dee3d1f531afefa6c60b2175164b24140f2c8b874b2aeaca43c6d62681916ddbd2b3860ebb35447c9e39c279062353d55a990550ec794b3337c9a10334c952cbc28bd68967fe1196849310800853d2a87cf82c1ca4c6ffbf75f9a1908f5f79741f554cecd62bb3c0b9c982034b2f3f71395a6902c996fa9ca2f22c62f2a711", 0x1000, 0xfffffffffffffffc) socketpair$ax25(0x3, 0x7, 0x0, &(0x7f0000001240)={0xffffffffffffffff}) accept$ax25(r2, &(0x7f0000001280), &(0x7f00000012c0)=0x10) r3 = request_key(&(0x7f0000001180)='.dead\x00', &(0x7f00000011c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001200)='userself{\x00', 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0x1ff, 0x1, r3) [ 535.207755] ? unwind_get_return_address+0x61/0xa0 [ 535.212690] ? __save_stack_trace+0x7e/0xd0 [ 535.217019] ? save_stack+0xa9/0xd0 [ 535.220649] ? save_stack+0x43/0xd0 [ 535.224278] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 535.229298] ? snd_interval_refine+0x428/0x700 [ 535.233891] snd_pcm_hw_refine+0x8e9/0x1180 [ 535.238223] ? constrain_params_by_rules+0x1360/0x1360 [ 535.243506] ? graph_lock+0x170/0x170 [ 535.247307] ? __lock_is_held+0xb5/0x140 [ 535.251381] ? __lock_is_held+0xb5/0x140 2018/04/10 00:30:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000052f000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bcsf0\x00', 0x2000}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) capget(&(0x7f0000000100)={0x399f1336, r1}, &(0x7f0000000140)={0x1f, 0x4b, 0xfa, 0x9, 0x7, 0x6e}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x2, r0}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'ip6_vti0\x00', 0x6}) [ 535.255445] ? snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 535.261332] ? rcu_read_lock_sched_held+0x108/0x120 [ 535.266349] ? kmem_cache_alloc_trace+0x616/0x780 [ 535.271198] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 535.276219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.281758] ? _snd_pcm_hw_param_min+0x330/0x570 [ 535.286521] snd_pcm_hw_param_near.constprop.35+0x2cf/0xb10 [ 535.292240] ? _snd_pcm_hw_param_min+0x570/0x570 [ 535.296999] ? snd_pcm_hw_param_max+0x730/0x730 [ 535.301670] ? __sanitizer_cov_trace_switch+0x53/0x90 2018/04/10 00:30:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/168) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@in={0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', './file0', [{0x20, '/dev/mixer\x00'}, {0x20, 'net/dev\x00'}, {0x20, 'net/dev\x00'}, {0x20, '&(vmnet1trustedwlan0*md5sumem0'}, {0x20, 'cgroupmd5sum:nodev\'em0selinux!wlan1nodev'}, {0x20}, {0x20, '-'}], 0xa, "803dc90fe9e2f63e89f93987feb4cf02978dfd5dcfc44cb790dc570824aaa53203a2350e0509cb61"}, 0x9c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000003c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x30, 0x0, &(0x7f0000000400)=[@release={0x40046306, 0x2}, @increfs={0x40046304, 0x1}, @acquire={0x40046305}, @exit_looper={0x630d}, @increfs_done={0x40106308, r3, 0x3}], 0x36, 0x0, &(0x7f0000000440)="451512484853fb7b08730b2e09a37abdea615a354ad404d7e727adb709b52bedf729528a41aa50c8277d3bf8df7de91cb176db1807ec"}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x808, 0x70bd2c, 0x25dfdbfc, {0x5}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x667c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffa}]}, 0x7c}, 0x1, 0x0, 0x0, 0xf2aba7371a2f3bf7}, 0x0) syz_open_procfs(r4, &(0x7f0000000100)='net/dev\x00') r6 = dup3(r0, r0, 0x80000) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x9388) [ 535.306860] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 535.312394] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 535.317326] snd_pcm_oss_change_params_locked+0x1b46/0x3ce0 [ 535.323059] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 535.328945] ? print_usage_bug+0xc0/0xc0 [ 535.333013] ? debug_check_no_locks_freed+0x310/0x310 [ 535.338211] ? __lock_acquire+0x7f5/0x5130 [ 535.342448] ? debug_check_no_locks_freed+0x310/0x310 [ 535.347742] ? __lock_acquire+0x7f5/0x5130 [ 535.351979] ? debug_check_no_locks_freed+0x310/0x310 [ 535.357166] ? print_usage_bug+0xc0/0xc0 [ 535.361246] snd_pcm_oss_change_params+0x80/0xe0 [ 535.366007] snd_pcm_oss_make_ready+0xbe/0x170 [ 535.370592] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 535.375447] ? __lock_acquire+0x7f5/0x5130 [ 535.379686] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 535.384218] ? find_held_lock+0x36/0x1c0 [ 535.388280] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.393814] ? _parse_integer+0x13b/0x190 [ 535.397965] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 535.403155] snd_pcm_oss_ioctl+0x7b6/0x3f00 2018/04/10 00:30:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 535.407482] ? _parse_integer+0x190/0x190 [ 535.411629] ? graph_lock+0x170/0x170 [ 535.415425] ? snd_pcm_oss_release+0x290/0x290 [ 535.420011] ? find_held_lock+0x36/0x1c0 [ 535.424101] ? graph_lock+0x170/0x170 [ 535.427903] ? find_held_lock+0x36/0x1c0 [ 535.431967] ? lock_downgrade+0x8e0/0x8e0 [ 535.436121] ? kasan_check_read+0x11/0x20 [ 535.440271] ? rcu_is_watching+0x85/0x140 [ 535.444422] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 535.449622] ? __fget+0x40c/0x650 [ 535.453075] ? match_held_lock+0x881/0x8b0 2018/04/10 00:30:06 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x503000, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') r2 = syz_open_dev$sndseq(&(0x7f000082a000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000040)={{0x80}, "0a030000009a000000f9010000ef9b3fd4cec307e8033d13eb790ec9c65abaf90d229db692542e5b78f8549e0a27800f00000000000000090042f376589701a4", 0xa9824b69d1376637, 0x10000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002b6000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000240)={0x81, 0x327b, 0x2}) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000100)=""/11, &(0x7f0000000140)=0xb) [ 535.457316] ? expand_files.part.8+0x9a0/0x9a0 [ 535.461899] ? kasan_check_write+0x14/0x20 [ 535.466138] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 535.471070] ? wait_for_completion+0x870/0x870 [ 535.475657] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 535.480846] ? snd_pcm_oss_release+0x290/0x290 [ 535.485427] do_vfs_ioctl+0x1cf/0x1650 [ 535.489318] ? ioctl_preallocate+0x2e0/0x2e0 [ 535.493735] ? fget_raw+0x20/0x20 [ 535.497194] ? __sb_end_write+0xac/0xe0 [ 535.501178] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 535.506717] ? fput+0x130/0x1a0 [ 535.509996] ? ksys_write+0x1a6/0x250 [ 535.513802] ? security_file_ioctl+0x94/0xc0 [ 535.518208] ksys_ioctl+0xa9/0xd0 [ 535.521655] SyS_ioctl+0x24/0x30 [ 535.525007] ? ksys_ioctl+0xd0/0xd0 [ 535.528625] do_syscall_64+0x29e/0x9d0 [ 535.532493] ? vmalloc_sync_all+0x30/0x30 [ 535.536623] ? _raw_spin_unlock_irq+0x27/0x70 [ 535.541102] ? finish_task_switch+0x1ca/0x820 [ 535.545579] ? syscall_return_slowpath+0x5c0/0x5c0 [ 535.550489] ? syscall_return_slowpath+0x30f/0x5c0 [ 535.555405] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 535.560751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 535.565580] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 535.570749] RIP: 0033:0x455259 [ 535.573920] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.581609] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 535.588856] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 535.596106] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 535.603354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/04/10 00:30:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000007fffffff00000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:06 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xffc99a3b00000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:06 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) r1 = eventfd2(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000540)={0x0, r1}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x2b, @rand_addr=0x1, 0x4e23, 0x1, 'dh\x00', 0x2, 0xfffffffffffffffc, 0xd}, 0x2c) [ 535.610602] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000b 2018/04/10 00:30:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:06 executing program 7 (fault-call:5 fault-nth:12): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:06 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000200)={0x2, 0xc277, 0x6f, 0x6, 0x3, 0xc829}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @multicast1=0xe0000001}, {0x0, @random="fe08bdaca037"}, 0x6, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 'ip_vti0\x00'}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000000c0)}}, {{&(0x7f0000000080)=@nfc={0x27}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000002"], 0x18}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 2018/04/10 00:30:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000000000000007f100000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x1a, 0x4, @thr={&(0x7f0000000040)="7bf49f3a27609a27ee05dc35cfbd", &(0x7f0000000080)="9d0a1b1f2041f0f9947ee22a25f594a122481be4a0a64183133983084ff5ccea838ecedabee08357a15135d6fedcf3f597ecf1cec34c9e1b8bff9ed8cb3f8a89cc7977beeba5e2db08f98c915560c149d62685ab354aa690339286aa77bbf012c3015a6093b0fd9f1106de612395b22d8d89fc7546f8a224b97c3e28ed9f22077fcf246967235424e55d1030a2173a525dfae2676362c9eafdb3254f0ffc8dd8d3d17094e2a2c5f0177171374e7c115448e41094fd7047f6d84c4fc9dd4abb669b7a9474e5796191a3bd52a20b5f41db9464631687fc9f"}}, &(0x7f00000001c0)) listen(r1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r2 = semget$private(0x0, 0x4, 0x204) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/238) 2018/04/10 00:30:06 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xf000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:06 executing program 6: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0xa, 0xc8}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x10f601, 0x0) setns(r0, 0x40000000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x7, 0x1}) 2018/04/10 00:30:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x2b) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="000100000000000004010007080000000000000000000000487cf3b766b2d7ca3b9708a05f6b9823803f227cadb39ffccb61a8ccd15859daa3eb8bf083ca240e031a72c0415a2766fdb46ca91e5a3e800a83d422bd6fea39f0aace681d513fe95078ce3313e19fa0baa852188f30f6d374a8a0cac3fa273fccf1c8081612cdc5053dd2434cfcd5772ccc0362bf8b094fd5c4d39ebed5d6931777c9b9d4deaf8ea61f6c0ce303ab17a2c6d198a2dfbed3d61961ec1bec94f026cacd8d6a16aba075"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2000000000009}, 0x1c) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x882) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000780)}, 0x0) 2018/04/10 00:30:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0xfede) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 536.020403] FAULT_INJECTION: forcing a failure. [ 536.020403] name failslab, interval 1, probability 0, space 0, times 0 [ 536.031747] CPU: 0 PID: 2981 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 536.038588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.047934] Call Trace: [ 536.048666] rtc_cmos 00:00: Alarms can be up to one day in the future [ 536.050520] dump_stack+0x1b9/0x294 [ 536.050542] ? dump_stack_print_info.cold.2+0x52/0x52 [ 536.050570] should_fail.cold.4+0xa/0x1a [ 536.070224] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 536.075345] ? snd_pcm_plugin_build+0x448/0x670 [ 536.080024] ? snd_pcm_plugin_build_io+0x28c/0x720 [ 536.084958] ? snd_pcm_oss_change_params_locked+0x1247/0x3ce0 [ 536.090853] ? snd_pcm_oss_change_params+0x80/0xe0 [ 536.094238] rtc_cmos 00:00: Alarms can be up to one day in the future [ 536.095776] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 536.095792] ? snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 536.095807] ? snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 536.095825] ? graph_lock+0x170/0x170 [ 536.095848] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 536.125687] ? find_held_lock+0x36/0x1c0 [ 536.129735] ? __lock_is_held+0xb5/0x140 [ 536.133794] ? check_same_owner+0x320/0x320 [ 536.138101] ? rcu_note_context_switch+0x710/0x710 [ 536.143027] __should_failslab+0x124/0x180 [ 536.147250] should_failslab+0x9/0x14 [ 536.151035] kmem_cache_alloc_trace+0x2cb/0x780 [ 536.155687] ? snd_pcm_plugin_build+0x448/0x670 [ 536.160344] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 536.166045] ? _snd_pcm_hw_param_min+0x570/0x570 [ 536.170789] ? snd_pcm_hw_param_max+0x730/0x730 [ 536.175591] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 536.180769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 536.186291] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 536.191205] snd_pcm_oss_change_params_locked+0x1b46/0x3ce0 [ 536.196911] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 536.202778] ? print_usage_bug+0xc0/0xc0 [ 536.206825] ? debug_check_no_locks_freed+0x310/0x310 [ 536.212007] ? __lock_acquire+0x7f5/0x5130 [ 536.216234] ? debug_check_no_locks_freed+0x310/0x310 [ 536.221409] ? __lock_acquire+0x7f5/0x5130 [ 536.225631] ? debug_check_no_locks_freed+0x310/0x310 [ 536.230801] ? print_usage_bug+0xc0/0xc0 [ 536.234858] snd_pcm_oss_change_params+0x80/0xe0 [ 536.239596] snd_pcm_oss_make_ready+0xbe/0x170 [ 536.244167] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 536.248995] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 536.253495] ? find_held_lock+0x36/0x1c0 [ 536.257541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.263066] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 536.268241] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 536.272546] ? _parse_integer+0x190/0x190 [ 536.276681] ? graph_lock+0x170/0x170 [ 536.280474] ? snd_pcm_oss_release+0x290/0x290 [ 536.285049] ? graph_lock+0x170/0x170 [ 536.288838] ? find_held_lock+0x36/0x1c0 [ 536.292900] ? lock_downgrade+0x8e0/0x8e0 [ 536.297051] ? rcu_is_watching+0x85/0x140 [ 536.301182] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 536.306362] ? __fget+0x40c/0x650 [ 536.309801] ? match_held_lock+0x881/0x8b0 [ 536.314029] ? expand_files.part.8+0x9a0/0x9a0 [ 536.318596] ? kasan_check_write+0x14/0x20 [ 536.322813] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 536.327731] ? wait_for_completion+0x870/0x870 [ 536.332296] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 536.337467] ? snd_pcm_oss_release+0x290/0x290 [ 536.342037] do_vfs_ioctl+0x1cf/0x1650 [ 536.345913] ? ioctl_preallocate+0x2e0/0x2e0 [ 536.350308] ? fget_raw+0x20/0x20 [ 536.353745] ? __sb_end_write+0xac/0xe0 [ 536.357705] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 536.363222] ? fput+0x130/0x1a0 [ 536.366486] ? ksys_write+0x1a6/0x250 [ 536.370272] ? security_file_ioctl+0x94/0xc0 [ 536.374668] ksys_ioctl+0xa9/0xd0 [ 536.378114] SyS_ioctl+0x24/0x30 [ 536.381466] ? ksys_ioctl+0xd0/0xd0 [ 536.385078] do_syscall_64+0x29e/0x9d0 [ 536.388947] ? vmalloc_sync_all+0x30/0x30 [ 536.393085] ? kasan_check_write+0x14/0x20 [ 536.397306] ? syscall_return_slowpath+0x5c0/0x5c0 [ 536.402223] ? syscall_return_slowpath+0x30f/0x5c0 [ 536.407141] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 536.412491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.417325] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 536.422500] RIP: 0033:0x455259 [ 536.425673] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.433367] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 536.440618] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 536.447870] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 536.455121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 536.462375] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000c 2018/04/10 00:30:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:07 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000c041ac95980f3979a49b596c9c3e00000d28a9afc8b8137e5e24d5010e35f3169cea02000000000000c04fc978cc689c24205893f09af65b3b28eeec"]) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x3, 0x1, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'ip_vti0\x00', @random="3a1839c45fef"}) 2018/04/10 00:30:07 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='rose0\x00', 0x10) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x3d9, &(0x7f0000000280)}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "99066c9aa4c2fbbf0aecb573b9d1bdc8be397716e627f0d1865ea32e0822c1026f14d27d9eb2214e9b34beb87de5d3aab05c161c037b28907fcb4fa979f696"}, 0x60, &(0x7f0000000f80), 0x0, &(0x7f0000000000), 0x98}}], 0x2, 0x0) 2018/04/10 00:30:07 executing program 5: prctl$setmm(0x59616d61, 0xffff7fffffffffff, &(0x7f0000783000/0x2000)=nil) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'vcan0\x00', 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000013c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x4e23, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0xa0, 0xaf, r1, r2}, {0x7, 0x294b, 0x58e, 0x3, 0x7ff, 0x80000000, 0x791, 0x9c3}, {0x1ff, 0x1, 0x2, 0xfffffffffffffff8}, 0x3, 0x6e6bbe, 0x3, 0x13cfe3427d3955ee, 0xa4ea43bb842d7611, 0x2}, {{@in, 0x4d5, 0x33}, 0x2, @in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x8}, 0x3500, 0x0, 0x1, 0x4b17, 0x4, 0x7, 0xfffffffffffff801}}, 0xe8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040)=0x3ff, 0x4) 2018/04/10 00:30:07 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xa086010000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000000000ffffff9e00000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:07 executing program 7 (fault-call:5 fault-nth:13): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001440010400edffffff00000002000002", @ANYBLOB="14000d300581366772653000000000000000000008000400ffffffff08000200ac1414aafa99118de623a345971fb97f38310bb9355abecf7295c8ff3ad27f76316aeb41483154516005fb551b58b9d9e23505de5d35da1c44c0344e2520d2ff317ed014e7ab4f5afff770a8a5934a3cbc48a0d80f1da8259e680a8b4e7ecf12a06b35070331bf7a6756dba38f1eee2682ab8379b060"], 0x2}, 0x1}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000000c0)={0x3, 0x80}) [ 536.684446] FAULT_INJECTION: forcing a failure. [ 536.684446] name failslab, interval 1, probability 0, space 0, times 0 [ 536.695738] CPU: 1 PID: 3017 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 536.702581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.711928] Call Trace: [ 536.714525] dump_stack+0x1b9/0x294 [ 536.718164] ? dump_stack_print_info.cold.2+0x52/0x52 [ 536.723370] should_fail.cold.4+0xa/0x1a [ 536.727447] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 536.732562] ? debug_check_no_locks_freed+0x310/0x310 [ 536.737756] ? graph_lock+0x170/0x170 [ 536.741562] ? snd_pcm_oss_change_params_locked+0xc4d/0x3ce0 [ 536.747363] ? snd_pcm_oss_change_params+0x80/0xe0 [ 536.752294] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 536.757053] ? snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 536.760264] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 536.762067] ? snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 536.762083] ? do_vfs_ioctl+0x1cf/0x1650 [ 536.762102] ? find_held_lock+0x36/0x1c0 [ 536.762121] ? __lock_is_held+0xb5/0x140 2018/04/10 00:30:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000009effffff0000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x3fffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0xe803, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x28}}}}}, &(0x7f0000000380)) writev(r0, &(0x7f0000fea000)=[{&(0x7f00008c2ef5)="290000002000190001063524e02200ff020000168000e718f20000040d000f00000000f20d00088f1f", 0x29}], 0x1) 2018/04/10 00:30:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000007f10000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 536.762150] ? check_same_owner+0x320/0x320 [ 536.779093] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 536.779622] ? rcu_note_context_switch+0x710/0x710 [ 536.779641] ? graph_lock+0x170/0x170 [ 536.779661] __should_failslab+0x124/0x180 [ 536.779678] should_failslab+0x9/0x14 [ 536.809618] __kmalloc+0x2c8/0x760 [ 536.813169] ? constrain_params_by_rules+0x141/0x1360 [ 536.818354] ? find_held_lock+0x36/0x1c0 [ 536.822421] constrain_params_by_rules+0x141/0x1360 [ 536.827447] ? lock_downgrade+0x8e0/0x8e0 2018/04/10 00:30:07 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'erspan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000008ac0)=[{{&(0x7f0000000800)=@ethernet, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000000bc0)}, 0x3}, {{&(0x7f0000001d40)=@ax25={0x3, {"909185be1ec238"}, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="5182b395643599000920b1f9c495fa09b04cf16e43e7601e68f65ebe2fbc8b65247f6bd77ea700f4f066e06641507d000000000000000000000000", 0x3b}, {&(0x7f0000003f40)="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", 0x5b5}], 0x1000000000000205}}], 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xa2800, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x64) 2018/04/10 00:30:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000240)="370f32ba2000b001ee0f01c9baf80c66b810813a8e66efbafc0ced66b8010000000f01c1360f01cf670f200766b9800000c00f326635010000000f30673e662e660cee", 0x43}], 0x1, 0x0, &(0x7f0000000080), 0x32f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="d06a5e0f01d19a34d43a0167f20f0d7580baf80c66b884157e8d66efbafc0c66b81c00000066ef0f23d63ef4baf80c66b85a17308d66efbafc0cb80000efb89b000f00d06766c74424003f865aad6766c7442402166b00006766c744240600000000670f011c24", 0x67}], 0x1, 0x0, &(0x7f00000002c0)=[@cr4={0x1, 0x40200}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 536.831602] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 536.836789] ? rcu_is_watching+0x85/0x140 [ 536.840934] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 536.846124] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 536.851330] ? is_bpf_text_address+0xd7/0x170 [ 536.855823] ? kernel_text_address+0x79/0xf0 [ 536.860232] ? __unwind_start+0x166/0x330 [ 536.864378] ? __kernel_text_address+0xd/0x40 [ 536.868878] ? unwind_get_return_address+0x61/0xa0 [ 536.873811] ? __save_stack_trace+0x7e/0xd0 [ 536.878151] ? save_stack+0xa9/0xd0 [ 536.881779] ? save_stack+0x43/0xd0 2018/04/10 00:30:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000ffffff9e0000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 536.885407] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 536.890434] ? snd_interval_refine+0x428/0x700 [ 536.895023] snd_pcm_hw_refine+0x8e9/0x1180 [ 536.899352] ? constrain_params_by_rules+0x1360/0x1360 [ 536.904631] ? graph_lock+0x170/0x170 [ 536.908436] ? __lock_is_held+0xb5/0x140 [ 536.912508] ? __lock_is_held+0xb5/0x140 [ 536.916579] ? snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 536.922463] ? rcu_read_lock_sched_held+0x108/0x120 [ 536.927475] ? kmem_cache_alloc_trace+0x616/0x780 [ 536.932315] ? _snd_pcm_hw_param_min+0x330/0x570 [ 536.937079] snd_pcm_hw_param_near.constprop.35+0x2cf/0xb10 [ 536.942794] ? _snd_pcm_hw_param_min+0x570/0x570 [ 536.947556] ? snd_pcm_hw_param_max+0x730/0x730 [ 536.952235] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 536.957433] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 536.962972] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 536.967902] snd_pcm_oss_change_params_locked+0x1b46/0x3ce0 [ 536.973626] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 536.979513] ? print_usage_bug+0xc0/0xc0 [ 536.983580] ? debug_check_no_locks_freed+0x310/0x310 [ 536.988774] ? __lock_acquire+0x7f5/0x5130 [ 536.993019] ? debug_check_no_locks_freed+0x310/0x310 [ 536.998213] ? __lock_acquire+0x7f5/0x5130 [ 537.002451] ? debug_check_no_locks_freed+0x310/0x310 [ 537.007637] ? print_usage_bug+0xc0/0xc0 [ 537.011715] snd_pcm_oss_change_params+0x80/0xe0 [ 537.016469] snd_pcm_oss_make_ready+0xbe/0x170 [ 537.021060] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 537.025903] ? __lock_acquire+0x7f5/0x5130 [ 537.030142] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 537.034548] ? find_held_lock+0x36/0x1c0 [ 537.038612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.044152] ? _parse_integer+0x13b/0x190 [ 537.048303] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 537.053494] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 537.057814] ? _parse_integer+0x190/0x190 [ 537.061966] ? graph_lock+0x170/0x170 [ 537.065767] ? snd_pcm_oss_release+0x290/0x290 [ 537.070349] ? find_held_lock+0x36/0x1c0 [ 537.074417] ? graph_lock+0x170/0x170 [ 537.078217] ? find_held_lock+0x36/0x1c0 [ 537.082283] ? lock_downgrade+0x8e0/0x8e0 [ 537.086436] ? kasan_check_read+0x11/0x20 [ 537.090587] ? rcu_is_watching+0x85/0x140 [ 537.094737] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 537.099932] ? __fget+0x40c/0x650 [ 537.103384] ? match_held_lock+0x881/0x8b0 [ 537.107622] ? expand_files.part.8+0x9a0/0x9a0 [ 537.112204] ? kasan_check_write+0x14/0x20 [ 537.116441] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 537.121378] ? wait_for_completion+0x870/0x870 [ 537.125964] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 537.131157] ? snd_pcm_oss_release+0x290/0x290 [ 537.135741] do_vfs_ioctl+0x1cf/0x1650 [ 537.139635] ? ioctl_preallocate+0x2e0/0x2e0 [ 537.144043] ? fget_raw+0x20/0x20 [ 537.147499] ? __sb_end_write+0xac/0xe0 [ 537.151480] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 537.157011] ? fput+0x130/0x1a0 [ 537.160294] ? ksys_write+0x1a6/0x250 [ 537.164101] ? security_file_ioctl+0x94/0xc0 [ 537.168511] ksys_ioctl+0xa9/0xd0 [ 537.171970] SyS_ioctl+0x24/0x30 [ 537.175335] ? ksys_ioctl+0xd0/0xd0 [ 537.178962] do_syscall_64+0x29e/0x9d0 [ 537.182851] ? vmalloc_sync_all+0x30/0x30 [ 537.187004] ? _raw_spin_unlock_irq+0x27/0x70 [ 537.191500] ? finish_task_switch+0x1ca/0x820 [ 537.196005] ? syscall_return_slowpath+0x5c0/0x5c0 [ 537.200933] ? syscall_return_slowpath+0x30f/0x5c0 [ 537.205866] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 537.211236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 537.216089] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 537.221273] RIP: 0033:0x455259 [ 537.224455] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 2018/04/10 00:30:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000fffffff00000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 537.232164] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 537.239428] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 537.246695] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 537.253961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 537.261226] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000d 2018/04/10 00:30:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x40) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xb6c}, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, &(0x7f00000000c0)=0x80) set_mempolicy(0x3, &(0x7f0000000280)=0xff, 0x80) r2 = msgget$private(0x0, 0x200) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000600)=0xe8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r3, r4) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000300)=""/158) 2018/04/10 00:30:08 executing program 3: r0 = socket$inet6(0xa, 0xf, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000180)=""/191) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {}, 0x963}, {{@in=@dev={0xac, 0x14, 0x14}, 0x0, 0x32}, 0x0, @in=@loopback=0x7f000001, 0x0, 0x7}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/10 00:30:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000fffff0000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:08 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = accept(r0, 0x0, &(0x7f0000000000)) sendmsg$alg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000700)="87237aa8ce2ee265cf123500000000", 0xf}], 0x1}, 0x0) 2018/04/10 00:30:08 executing program 7 (fault-call:5 fault-nth:14): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000280)={r1}) accept4$unix(r3, &(0x7f0000000380)=@abs, &(0x7f00000002c0)=0x6e, 0x80800) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f000000bffa)='./control\x00', &(0x7f000000cffa)='./bus\x00') symlink(&(0x7f0000000240)='./control\x00', &(0x7f0000ee1ff6)='./control\x00') stat(&(0x7f00000001c0)='./control\x00', &(0x7f0000000300)) syz_fuse_mount(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000180)) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0fba8c861b"], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x4ae6, 0x7, 0x4, 0x7fffffff8, 0x2, 0xffffffffffff0000, 0x7482acc6, 0x8, 0x27, 0x1, 0x8, 0xffffffff00000001, 0x4}, {0x3ff, 0x521, 0x80000001, 0x0, 0x7, 0x10000, 0x7, 0x3, 0xcbe9, 0x5, 0xd6d, 0x4, 0x6}, {0x4, 0x100, 0x3ff, 0x80000001, 0x10001, 0x9, 0xffffffffffffff7c, 0x8, 0x6, 0x1, 0xb41, 0x51, 0x1}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/10 00:30:08 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x200000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:08 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f000079c000)={0x19980330}, &(0x7f0000cc7fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000ed6ff6)='map_files\x00') fsetxattr(r0, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000a7a000)="656d3073656c66a673656c696e757800", 0x10, 0x0) write$rdma_cm(r0, &(0x7f0000000e80)=@create_id={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000e40)={0xffffffff}, 0x13f, 0x1000}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xa00, 0x0) write$rdma_cm(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0a000000040200fa", @ANYRES32=r1], 0xc) [ 537.415101] FAULT_INJECTION: forcing a failure. [ 537.415101] name failslab, interval 1, probability 0, space 0, times 0 [ 537.426389] CPU: 1 PID: 3075 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 537.433225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.442573] Call Trace: [ 537.445160] dump_stack+0x1b9/0x294 [ 537.448790] ? dump_stack_print_info.cold.2+0x52/0x52 [ 537.453992] should_fail.cold.4+0xa/0x1a [ 537.458055] ? kernel_text_address+0x79/0xf0 [ 537.462462] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 537.467559] ? __lock_acquire+0x7f5/0x5130 [ 537.471787] ? graph_lock+0x170/0x170 [ 537.475581] ? find_held_lock+0x36/0x1c0 [ 537.479633] ? __lock_is_held+0xb5/0x140 [ 537.483692] ? check_same_owner+0x320/0x320 [ 537.487998] ? do_raw_spin_lock+0xc1/0x200 [ 537.492225] ? rcu_note_context_switch+0x710/0x710 [ 537.497137] ? trace_hardirqs_off+0xd/0x10 [ 537.501356] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 537.506451] __should_failslab+0x124/0x180 [ 537.510675] should_failslab+0x9/0x14 [ 537.514459] __kmalloc+0x2c8/0x760 [ 537.517991] ? __lock_acquire+0x7f5/0x5130 [ 537.522213] ? mark_held_locks+0xc9/0x160 [ 537.526352] ? constrain_params_by_rules+0x141/0x1360 [ 537.531536] constrain_params_by_rules+0x141/0x1360 [ 537.536549] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 537.541729] ? lock_downgrade+0x8e0/0x8e0 [ 537.545868] ? kasan_check_read+0x11/0x20 [ 537.549999] ? rcu_is_watching+0x85/0x140 [ 537.554140] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 537.559319] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 537.564500] ? is_bpf_text_address+0xd7/0x170 [ 537.568993] ? kernel_text_address+0x79/0xf0 [ 537.573396] ? __unwind_start+0x166/0x330 [ 537.577528] ? __kernel_text_address+0xd/0x40 [ 537.582014] ? unwind_get_return_address+0x61/0xa0 [ 537.586935] ? __save_stack_trace+0x7e/0xd0 [ 537.591241] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 537.596763] ? snd_interval_refine+0x428/0x700 [ 537.601335] snd_pcm_hw_refine+0x8e9/0x1180 [ 537.605656] ? constrain_params_by_rules+0x1360/0x1360 [ 537.610915] ? snd_pcm_oss_change_params+0x80/0xe0 [ 537.615829] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 537.620564] ? snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 537.625561] ? snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 537.630045] ? do_vfs_ioctl+0x1cf/0x1650 [ 537.634092] ? ksys_ioctl+0xa9/0xd0 [ 537.637701] ? SyS_ioctl+0x24/0x30 [ 537.641226] ? do_syscall_64+0x29e/0x9d0 [ 537.645271] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 537.650617] ? kasan_check_read+0x11/0x20 [ 537.654753] ? do_raw_spin_unlock+0x9e/0x2e0 [ 537.659144] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 537.663708] ? print_usage_bug+0xc0/0xc0 [ 537.667751] ? kasan_check_write+0x14/0x20 [ 537.671970] ? do_raw_spin_lock+0xc1/0x200 [ 537.676191] ? trace_hardirqs_off+0xd/0x10 [ 537.680409] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 537.685502] ? debug_check_no_obj_freed+0x2ff/0x584 [ 537.690508] ? mark_held_locks+0xc9/0x160 [ 537.694639] ? quarantine_put+0xeb/0x190 [ 537.698690] snd_pcm_hw_param_first+0x30e/0x680 [ 537.703356] snd_pcm_hw_param_near.constprop.35+0x6e2/0xb10 [ 537.709056] ? _snd_pcm_hw_param_min+0x570/0x570 [ 537.713802] ? snd_pcm_hw_param_max+0x730/0x730 [ 537.718457] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 537.723633] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 537.729156] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 537.734070] snd_pcm_oss_change_params_locked+0x1b46/0x3ce0 [ 537.739781] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 537.745648] ? print_usage_bug+0xc0/0xc0 [ 537.749697] ? debug_check_no_locks_freed+0x310/0x310 [ 537.754874] ? __lock_acquire+0x7f5/0x5130 [ 537.759096] ? debug_check_no_locks_freed+0x310/0x310 [ 537.764272] ? __lock_acquire+0x7f5/0x5130 [ 537.768496] ? debug_check_no_locks_freed+0x310/0x310 [ 537.773666] ? print_usage_bug+0xc0/0xc0 [ 537.777725] snd_pcm_oss_change_params+0x80/0xe0 [ 537.782465] snd_pcm_oss_make_ready+0xbe/0x170 [ 537.787040] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 537.791864] ? __lock_acquire+0x7f5/0x5130 [ 537.796085] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 537.800473] ? find_held_lock+0x36/0x1c0 [ 537.804518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 537.810041] ? _parse_integer+0x13b/0x190 [ 537.814175] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 537.819354] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 537.823660] ? _parse_integer+0x190/0x190 [ 537.827794] ? graph_lock+0x170/0x170 [ 537.831580] ? snd_pcm_oss_release+0x290/0x290 [ 537.836148] ? find_held_lock+0x36/0x1c0 [ 537.840207] ? graph_lock+0x170/0x170 [ 537.844000] ? find_held_lock+0x36/0x1c0 [ 537.848062] ? lock_downgrade+0x8e0/0x8e0 [ 537.852201] ? kasan_check_read+0x11/0x20 [ 537.856331] ? rcu_is_watching+0x85/0x140 [ 537.860467] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 537.865658] ? __fget+0x40c/0x650 [ 537.869097] ? match_held_lock+0x881/0x8b0 [ 537.873318] ? expand_files.part.8+0x9a0/0x9a0 [ 537.877890] ? kasan_check_write+0x14/0x20 [ 537.882110] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 537.887033] ? wait_for_completion+0x870/0x870 [ 537.891601] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 537.896779] ? snd_pcm_oss_release+0x290/0x290 [ 537.901351] do_vfs_ioctl+0x1cf/0x1650 [ 537.905231] ? ioctl_preallocate+0x2e0/0x2e0 [ 537.909627] ? fget_raw+0x20/0x20 [ 537.913070] ? __sb_end_write+0xac/0xe0 [ 537.917042] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 537.922563] ? fput+0x130/0x1a0 [ 537.925834] ? ksys_write+0x1a6/0x250 [ 537.929628] ? security_file_ioctl+0x94/0xc0 [ 537.934035] ksys_ioctl+0xa9/0xd0 [ 537.937480] SyS_ioctl+0x24/0x30 [ 537.940834] ? ksys_ioctl+0xd0/0xd0 [ 537.944447] do_syscall_64+0x29e/0x9d0 [ 537.948321] ? vmalloc_sync_all+0x30/0x30 [ 537.952458] ? _raw_spin_unlock_irq+0x27/0x70 [ 537.956941] ? finish_task_switch+0x1ca/0x820 [ 537.961421] ? syscall_return_slowpath+0x5c0/0x5c0 [ 537.966343] ? syscall_return_slowpath+0x30f/0x5c0 [ 537.971264] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 537.976618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 537.981454] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 537.986627] RIP: 0033:0x455259 [ 537.989798] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.997493] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 538.004744] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 2018/04/10 00:30:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(khazad-generic)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) sendmmsg$alg(r2, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002cc0)="6dab9a94cb4e701c", 0x8}], 0x1, &(0x7f0000000200)}], 0x1, 0x0) recvmsg(r2, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x5c, &(0x7f0000000000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x20}, 0x1}, 0x0) [ 538.011998] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 538.019253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 538.026508] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000e 2018/04/10 00:30:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b4ff6)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x7ff5) ioctl$TCSETA(r0, 0x5402, &(0x7f0000a26fec)={0xfdfdffff}) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x74, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0x4a, 0x9}, 'port1\x00', 0x40, 0x1, 0x3, 0x10002000000000, 0x1, 0x8001, 0xfffffffffffffff7, 0x0, 0x4, 0x3}) 2018/04/10 00:30:09 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xd00}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000f0ffffffffffff00000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 538.153912] netlink: 'syz-executor3': attribute type 1 has an invalid length. 2018/04/10 00:30:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000005000100000c0900fcff4d00040e05a5", 0x58}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000000100000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) syz_fuse_mount(&(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x8) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000140)={0xaaae, 0x3742, 0x3, 0x404}) 2018/04/10 00:30:09 executing program 3: open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)) r3 = dup2(r1, r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000200)=""/225) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) 2018/04/10 00:30:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000000200000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:09 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0xa, 0x84) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[], 0x0) write$rdma_cm(r0, &(0x7f00000021c0)=@create_id={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000002180)={0xffffffff}, 0x3, 0x3}}, 0x20) write$rdma_cm(r0, &(0x7f00000022c0)=@listen={0x7, 0x0, 0xfa00, {r2, 0x1}}, 0xfffffffffffffe6d) write$rdma_cm(r0, &(0x7f0000000440)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) dup3(r1, r0, 0x0) 2018/04/10 00:30:09 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x1100}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0x20007fff}, 0xfffffffffffffefa, &(0x7f0000000080)={&(0x7f0000000040)=@getnetconf={0x14, 0x52, 0xa01, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)) 2018/04/10 00:30:09 executing program 5: r0 = memfd_create(&(0x7f0000000000)='dev ', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f000001dff4)={0x10}, 0xc, &(0x7f0000015ff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="001567e3ea5594bbaf44483ac5d56fcd9aea8cb1ce58a91c95feffff98d6f2b9e8f8f2887beefa0d1619f3d4d3ee8713e12cb70d631bee342f44c909a7d52a0fc566257ade39ae13fcf9fe989c54cc3cf3a4829abfaac2d55c607c97b1359f2600a700165a7a5900000000000000000000ffbdb868318cb3aa5787db318f2d3cbc7cebde331270371533ee3da1cf26fe344a4a0f0663dcca91e9ddd7e56af9862a6c12f2c558300fe9c759c0412e3e94a2a0345736eaac4b2bcec51614aa4131fb43ee2bf4aa0379f21ab934825141eb9085e4a3cef5eab09ee35ef70c06c3d8a312d1f5faa51427d7998aca1bdc9ab5e2179bfea3242260d442c0a2ab275c376473390f36163145d4caa9b6955e65891a744c32464690c52a8ad121b46a80615a90946551a7837d707abadf96030810a4a7f8a6194c959ea90cffb9accc3900bda104c993e7e4e9c5ecc0340f74a6b09247bddad87bf2aa0abcf8f8a8d2e49d1b9c3f8883"], 0x1}, 0x1}, 0x0) lseek(r0, 0x0, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x9, 0x800, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_ipx_SIOCIPXNCPCONN(r0, 0x89e3, &(0x7f0000000080)=0xc4) 2018/04/10 00:30:09 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001280)='/dev/cuse\x00', 0x8080, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x1ff) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAF(r2, 0x5404, &(0x7f00009d4000)) ioctl$KDGKBLED(r2, 0xc0045405, &(0x7f0000000080)) r3 = msgget$private(0x0, 0x810) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000001240)={0x5, 0xd6, 0x3}) ioctl$void(r1, 0xc004587f) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000180)=""/4096) ioctl$TCSETS(r2, 0xc0045405, &(0x7f0000000040)) bind$llc(r2, &(0x7f00000000c0)={0x1a, 0x337, 0x81, 0xfffffffffffffffb, 0x2, 0x5, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}}, 0x10) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f00000011c0)) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000001180)) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000001200)={0x5, 0x1}) 2018/04/10 00:30:09 executing program 7 (fault-call:5 fault-nth:15): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:09 executing program 4: r0 = open(&(0x7f0000448000)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = open(&(0x7f00003f5000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = open(&(0x7f00004c2000)='./file0\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) [ 538.621665] FAULT_INJECTION: forcing a failure. [ 538.621665] name failslab, interval 1, probability 0, space 0, times 0 [ 538.633137] CPU: 1 PID: 3157 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 538.639974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 538.649323] Call Trace: [ 538.651920] dump_stack+0x1b9/0x294 [ 538.655560] ? dump_stack_print_info.cold.2+0x52/0x52 [ 538.660759] ? perf_trace_lock_acquire+0xe3/0x980 [ 538.665609] ? kernel_text_address+0x79/0xf0 [ 538.670025] ? __unwind_start+0x166/0x330 [ 538.674187] should_fail.cold.4+0xa/0x1a [ 538.678263] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 538.683381] ? retint_kernel+0x10/0x10 [ 538.687283] ? graph_lock+0x170/0x170 [ 538.691086] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 538.695857] ? retint_kernel+0x10/0x10 [ 538.699760] ? __lock_is_held+0xb5/0x140 [ 538.703840] ? check_same_owner+0x320/0x320 [ 538.708169] ? debug_check_no_obj_freed+0x2ff/0x584 [ 538.713196] ? rcu_note_context_switch+0x710/0x710 [ 538.718131] __should_failslab+0x124/0x180 [ 538.722374] should_failslab+0x9/0x14 [ 538.726181] kmem_cache_alloc_trace+0x2cb/0x780 [ 538.730861] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 538.735719] snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 538.741442] ? _snd_pcm_hw_param_min+0x570/0x570 [ 538.746209] ? snd_pcm_hw_param_max+0x730/0x730 [ 538.750887] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 538.756086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 538.761626] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 538.766567] snd_pcm_oss_change_params_locked+0x1bb1/0x3ce0 [ 538.772302] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 538.778192] ? print_usage_bug+0xc0/0xc0 [ 538.782267] ? debug_check_no_locks_freed+0x310/0x310 [ 538.787468] ? __lock_acquire+0x7f5/0x5130 [ 538.791705] ? perf_trace_lock+0x900/0x900 [ 538.795945] ? __lock_acquire+0x7f5/0x5130 [ 538.800186] ? debug_check_no_locks_freed+0x310/0x310 [ 538.805375] ? perf_trace_lock_acquire+0xe3/0x980 [ 538.810237] snd_pcm_oss_change_params+0x80/0xe0 [ 538.814998] snd_pcm_oss_make_ready+0xbe/0x170 2018/04/10 00:30:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:09 executing program 4: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0xe86824d2c1c833cb}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'teql0\x00'}) dup2(r0, r1) 2018/04/10 00:30:09 executing program 6: r0 = socket$inet6(0xa, 0x80006, 0x100000000) sendto$inet6(r0, &(0x7f0000000080)="dfe278d84f047e1808a3a992ddc389ae510e72c21d071d767c92f5a76aabd0152fcbd05c4db7f4e5e729497dfc375f1a021a5b1fd8ea7d7047775b8daf66303ddae94f4cc9d10f0e4bd21802c30927bf91de19baad5d68d29e6c0265b15278bc3a26defe99b129cae1e0377939e119e495cb84900b82d2c0689fd8d30bcd08437ed371f99c2b1cb8434a8ed7a106d463883ccdd36f76022dd29c59311fd01f26dc7cb7bb2578798d919b871cbb90dda4fccbca8d521c0c9c95c6278cad91c144f5079d7aa44b35c54465cb314586eae1b2afb0d94912bea757906d494c2e049598bae15d4a1b6892ed414e4ca5448a7e457350859333529825a60e93889fece46d4917cb7b429852148679694cbbb5d71bd8c81da130daf7387dc095c6ea85a19f5c62434a0b42723ae95420971a2edaa24f04e1c558283be5b08d1903dd2aa5b55ff876b7df8ad497a163fc1667bf677560acc9bdc58fd2190ceb7ee16969f2b7924651b5256b83fa8cee4a85b601371092d883db7c63cc060f80cc96a47d90dfc06ebf61665b68ab6c40e701325f2ad65b98bbc038fc1f70c5cec0ef6de84b30f331304e18333bf6018ab00b454771618a74cdcb90bae013843a586b8da3f26fc134faea8f02f500ccfc8d8e056bfe8154a816b1c836d2f0345fe72801be88a7bf12b5b70f3fca631f4f27ade17670201ca78090a2ce78f7660b62d6b1ae74b433a537ec8972cd75ed3aef141e6e274274ceed44bdcd0b8da06e8862dfb649d39a860042261fc9ab949991711eac9264633a7f15ff272779b3015c402e43e63fa3cbb3baaffe971b739673c5313ef74a7c2a480a7302734a607e1cd559189f4aee38fbcd3bde9776c29fc8426b18bb0029546358d39ce716f03359f656cb3103e1ef253bd0614af54f8d7d03f6bf80ab3ae047aadfd7a3e006f9f04e326f391426a8618dcf4747f189c892ca162d7a2949aedf8eb6ead2a7f8673c03830282983f880d7ff55b9bc04afd7439857238bef451407dbd506b94d8a0085a9649e9d2f24d4442ce81791d7f0b00eefc6547c57493812cb93d1166bd506ff8cd0852edd7d8ccf90a2f5f137e82c7f2b356ab3f7fc0f854f82608949d79e780d563642ee0ee73397a83117059d2b30f4dc169f98474d01200cd765918dde6c075b3444d46c0859a7d921469c7ffa6a1caac885a8f285fe70c48233d29061f13b216ac406247a68aa3c516fac4cacbd78a303377130cd92ba8331614365765b2c80cb717626c9f6e9b45d6d16b10ca7325316e8107c2b57d630b46fb8369905a2e9b75e0a3b0972634b46e44430310580e9ae49ac0f065261ca26053dc08aafb3308e40d709a6404fa39e45e9643edf205ba121470c36389e3c161ab41179418b71652f92cb4b3a6d925fcd7d5c0a13ab9c020446aae0e7d3eedf23fec3ffa6ed748953bf7a5e19960f43313f16e5bb43f3e6adc62a5a45db3ea43e44ed6ee5596a6c66c747aab8757ee26d5912a07edecd4e4b9d6f6a03c6f4d7445d041fab5cdd668280b392be052ca3095a8408ac836e6d361f5c7512768f6897b7529d658503f61bcffc714e95adabd1178191b3d82d959200e508c6358af53b7684d2cab8ed404cdfd134e004a71deaaaec8c9835e5a711b51e1829f96c2be8ad2c851f8b70c70114cbb7d647cfb26ba91f62ec29925e6f10aebbb0a28a7ffcfc360d86a70ade4d3d2bbbea005b41823f2a54b1513ee080e62d3f337a0e250d592ef3a43be37bef30496fe34eb2eb7b038bf1a8ad837c18cd9745e937d7c0503d1c50ed4a9f3d446eccc3cddc586df7c077e09119b5172dee9d6349783329c2c7a2d71dfb7c2d7aa656f2599b84fab8ee1c21073c7cf64babeb4f768d8c283ff7599849e36d5a7d7071b396fbde96af351d02ff61b159bddbb8d66e51d6431eee6173857d089d4ab3ac1c05b57c80a08fe3d1c89aefb7fe07df71b0d0f636e5b8a609af0a1e708390f828907e7691fad891c5d7a6cf7cd8842ce264ecdc1caf78795883e37a3a8b7dbd67cff31ab2c868a79691ca540660039aca28aada03950c0b00ae1d945654838b1765ed03fa2c3998e37639aa324f7dface766d31cc84e7a58571322cb066b7a01428e7d77b3bce65c6260742cb8c5b6b914623f31293a1ac91948264d17643d719b9247ecc14906e21e1c6e8e8d943652f3597f26dabc85b17a3d1a805fe2794eda2ed168913270671f7799c9d6486dc8f9095b19fbeda576dbc78919c8916e715bd08ed49a59bf17d43d5f561a11861598785cb02857324c3f063fb05092839d26c6da5177235c41cc78963b653651de1f73469aac58dfec92b22f7468f35a287f72fb3638ff85924d86c585a0df30afbef9545baef0ee83d12a50d520d9c26eae7819fe577337125dbe250b059d7e2dfde4f6bb26a2af60d2b95b07fc66c74e95fd646bb1b269dbee8cba32667499c514ce0d23f60a11c639c6379f71220a2eac32d7b1c6771643dcb66e94e6574cfda0d9513b0286843755196ce43e0580331e915d66ebbb31488cb36e0c3e2250f97cc43a46bc84a9df4c8ec952615f50f4f2f80d9849cc61d0c78e2b238fc1b66d857b11213d2321ababdeae57bddade6cfde43713ca34acbf01b3ff4ba6a205cd04d94d94d76b1ecdeb7d31339d07ddc2f25dfe3c2d2fd53c5dda58b18f3969b734a9f9767ef250ce20833a6de5caa57778d7c3f2288e1bef5f5981942f26a7519157357f35ae990931835b6c5da7fa6a1e7ce2bf4e00c11d7aed40ecb3dc662953cbdc4bec3d8a70692e47f9b73f5f3e8855ad00c324dfccea81b4dbe7795de35ba560d3c63c1203cc8f74c26c75f723ccfc372dd07f266e41a6be0528b4f0317c7af3a2a94e0c9e82135a174bc22ec8fcd2847ec28c00ed54fb5ad2e477b123becb3197b6ac6b3c2965f9d45577", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000008c0)={{0x3, 0x2, 0x2, 0x0, 0x3660}}) sendto$inet6(r0, &(0x7f0000000940), 0x0, 0x0, &(0x7f0000000ac0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}}, 0x1c) 2018/04/10 00:30:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000000000fffffff000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 538.819588] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 538.824437] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 538.828848] ? find_held_lock+0x36/0x1c0 [ 538.832916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 538.838456] ? _parse_integer+0x13b/0x190 [ 538.842606] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 538.847802] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 538.852131] ? _parse_integer+0x190/0x190 [ 538.856288] ? graph_lock+0x170/0x170 [ 538.860094] ? snd_pcm_oss_release+0x290/0x290 [ 538.864683] ? find_held_lock+0x36/0x1c0 [ 538.868751] ? graph_lock+0x170/0x170 [ 538.872554] ? find_held_lock+0x36/0x1c0 [ 538.876632] ? lock_downgrade+0x8e0/0x8e0 [ 538.880799] ? kasan_check_read+0x11/0x20 [ 538.884947] ? rcu_is_watching+0x85/0x140 [ 538.889096] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 538.894296] ? __fget+0x40c/0x650 [ 538.897754] ? match_held_lock+0x881/0x8b0 [ 538.901993] ? expand_files.part.8+0x9a0/0x9a0 [ 538.906578] ? kasan_check_write+0x14/0x20 [ 538.910816] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 538.915754] ? wait_for_completion+0x870/0x870 2018/04/10 00:30:09 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000001080)='/dev/amidi#\x00', 0x7fffffff, 0x2000) signalfd4(r0, &(0x7f0000001100)={0x40}, 0x8, 0x800) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000001040)={{&(0x7f0000000000)=""/4096, 0x1000}, &(0x7f0000001000)}, 0x20) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000010c0)={0xffffffff00000001, 0x200000, 0x7, 0x4, 0xffffffffffffffe0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001140)={0x0, @in6={{0xa, 0x2, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x7fffffff}}, 0x3, 0x3, 0x6}, &(0x7f0000001200)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001240)={r2, 0x4}, &(0x7f0000001280)=0x8) 2018/04/10 00:30:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000fffffffffffff00000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 538.920341] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 538.925530] ? snd_pcm_oss_release+0x290/0x290 [ 538.930113] do_vfs_ioctl+0x1cf/0x1650 [ 538.934006] ? ioctl_preallocate+0x2e0/0x2e0 [ 538.938416] ? fget_raw+0x20/0x20 [ 538.941876] ? __sb_end_write+0xac/0xe0 [ 538.945861] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 538.951404] ? fput+0x130/0x1a0 [ 538.954689] ? ksys_write+0x1a6/0x250 [ 538.958499] ? security_file_ioctl+0x94/0xc0 [ 538.962914] ksys_ioctl+0xa9/0xd0 [ 538.966377] SyS_ioctl+0x24/0x30 [ 538.969745] ? ksys_ioctl+0xd0/0xd0 [ 538.973387] do_syscall_64+0x29e/0x9d0 [ 538.977280] ? vmalloc_sync_all+0x30/0x30 [ 538.981432] ? _raw_spin_unlock_irq+0x27/0x70 [ 538.985935] ? finish_task_switch+0x1ca/0x820 [ 538.990435] ? syscall_return_slowpath+0x5c0/0x5c0 [ 538.995369] ? syscall_return_slowpath+0x30f/0x5c0 [ 539.000313] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 539.005687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 539.010543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 539.015736] RIP: 0033:0x455259 2018/04/10 00:30:10 executing program 3: r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffd000/0x2000)=nil) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x0, 0x2, 0x6f, 0x1, 0xfff, 0xff, 0x5, 0xfffffffffffffeff, 0x3ff, 0x6}) shmctl$IPC_RMID(r0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000f76ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) shmdt(r3) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x1263, 0x0) 2018/04/10 00:30:10 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xd0070000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000007fffffff0000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 539.018923] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.026640] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 539.033913] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 539.041185] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 539.048460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 539.055732] R13: 000000000000035f R14: 00000000006f8188 R15: 000000000000000f 2018/04/10 00:30:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x400000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000b2000)=0xffffffffffffffff, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0xfef1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000180)=0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x4800000020000000, &(0x7f0000000140)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/10 00:30:10 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, &(0x7f0000015fee)=""/18, 0x12, 0x40, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2018/04/10 00:30:10 executing program 4: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xbc}, 0x8) getsockopt$nfc_llcp(r0, 0x118, 0x7, &(0x7f00000001c0)=""/229, 0xe5) prctl$void(0x15) 2018/04/10 00:30:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:10 executing program 7 (fault-call:5 fault-nth:16): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:10 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x40000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:10 executing program 3: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f0000873ff4)='./file0/bus\x00', 0x0) mq_timedsend(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0x77359400}) getsockname(r0, &(0x7f0000000240)=@sco, &(0x7f0000000200)=0xfffffdfe) recvfrom$inet(r0, &(0x7f0000000080)=""/21, 0x15, 0x20, &(0x7f00000000c0)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) mq_notify(r0, &(0x7f000070efa0)) mq_timedsend(r0, &(0x7f0000d8e000), 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000001c00040026bd7000fcdbdf00040000001aa7990008009100ff000000"], 0x20}, {&(0x7f0000000140)={0x10, 0x39, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x10}], 0x2, 0x0, 0x0, 0x40004}, 0x4000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="090010000c000000060000000300000006000000"]) ioctl$KDMKTONE(r0, 0x4b30, 0x3e) 2018/04/10 00:30:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000007f100000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:10 executing program 6: execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)='&{\\@.#ppp1)-[\x00'], &(0x7f0000000000)) r0 = socket$inet(0x2, 0x6, 0xa) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000002000)=0xfffffffffffffffd, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x20100) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @loopback}, &(0x7f0000000280)=0xc) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r2) 2018/04/10 00:30:10 executing program 5: r0 = socket$rds(0xa, 0x2, 0x88) sendmsg$rds(r0, &(0x7f0000017000)={&(0x7f0000015ff3)={0x2, 0x4e21}, 0x10, &(0x7f000000d000), 0x0, &(0x7f000000ef03)=ANY=[@ANYBLOB="580000000000000014010000080000000000000000000000", @ANYPTR=&(0x7f0000005ff8)=ANY=[@ANYBLOB="00400000ffffffff"], @ANYPTR=&(0x7f000001aff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440000000000000014010000060000000000000000000000", @ANYPTR=&(0x7f000001bff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000009ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000011000000000000000000000001000000480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f000000f000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000004000)=ANY=[@ANYPTR=&(0x7f0000012000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000"], @ANYBLOB="010000000000000000000000000000000000000000000000580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f0000007000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f000001cff8)=ANY=[@ANYBLOB="0000024000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb7}, 0x0) getpeername(r0, &(0x7f00000000c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r0}) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xee, 0x410500) getsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = dup2(r0, r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r3, 0x0) 2018/04/10 00:30:10 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000ff8000/0x3000)=nil], &(0x7f0000000100), &(0x7f0000000180), 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)) r0 = socket(0x15, 0x2, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040), 0x0, 0x80000d}, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x101, 0x800006, 0xb, 0x1, 0x140}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r2, 0x89}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f000090bff7)="ed0c40fb58b4ba48ee", 0x9) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) sendto$inet(r3, &(0x7f0000e76000)="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", 0x5b5, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x3f}, 0x1) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0xfffffffffffff004, &(0x7f0000000240)=0x4) r5 = epoll_create1(0x80000) r6 = socket(0x15, 0x80005, 0x0) getsockopt(r6, 0x600000000114, 0x270f, &(0x7f000085c000), &(0x7f0000bda000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00000003c0)={0x20000001}) sendmmsg$alg(r0, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="0e0af27f4831ac8b41068d31230501bfc97c3f24610f85fee356e3c655c16a7bdd3dd5d1305b551b52dce99993b0ebd183517bf58db80a046887c2bec4b08fefb4a9e0e3e0244a9241bbd9529f7acdd632b4ec2727ec080b8f04b7bb", 0x5c}], 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x4000000}], 0x1, 0x4044) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) getpeername$netrom(r0, &(0x7f00000006c0), &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}}, &(0x7f0000000600)=0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'sit0\x00', 0xfffffffffffffffc}, 0xffffffffffffff09) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000640)=0x5, 0x4) ioctl(r4, 0x400, &(0x7f0000000000)) socketpair$inet6(0xa, 0xf, 0x9, &(0x7f00000001c0)) 2018/04/10 00:30:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000f000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 539.481666] FAULT_INJECTION: forcing a failure. [ 539.481666] name failslab, interval 1, probability 0, space 0, times 0 [ 539.492960] CPU: 1 PID: 3240 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 539.499799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.509146] Call Trace: [ 539.511756] dump_stack+0x1b9/0x294 [ 539.511777] ? dump_stack_print_info.cold.2+0x52/0x52 [ 539.520577] should_fail.cold.4+0xa/0x1a [ 539.524652] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 539.529780] ? debug_check_no_locks_freed+0x310/0x310 [ 539.529801] ? graph_lock+0x170/0x170 [ 539.538761] ? snd_pcm_oss_change_params_locked+0x1b46/0x3ce0 [ 539.544645] ? snd_pcm_oss_change_params+0x80/0xe0 [ 539.549582] ? snd_pcm_oss_make_ready+0xbe/0x170 [ 539.554342] ? snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 539.559368] ? snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 539.563869] ? do_vfs_ioctl+0x1cf/0x1650 [ 539.567936] ? find_held_lock+0x36/0x1c0 [ 539.572001] ? __lock_is_held+0xb5/0x140 [ 539.576079] ? check_same_owner+0x320/0x320 2018/04/10 00:30:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4, 0x9, [0x4, 0x7f, 0x2449, 0x100, 0x5, 0x8, 0x8, 0x1, 0x7f]}, &(0x7f0000000080)=0x1a) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0xe10, 0x8, [0x200, 0x7, 0x3f, 0x1, 0x3ff, 0xb7, 0x17c6, 0x9]}, 0x18) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d76a81014aed182f30284470080ffe00614ae0000000000a2bc5603ca0016087f89000000200000000101ff0000000309ff5bffff08c7e5ed5e00000000000000", 0x48}], 0x1) 2018/04/10 00:30:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000000000f0ffffffffffff000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 539.580408] ? rcu_note_context_switch+0x710/0x710 [ 539.585341] ? graph_lock+0x170/0x170 [ 539.589146] __should_failslab+0x124/0x180 [ 539.593380] should_failslab+0x9/0x14 [ 539.597174] __kmalloc+0x2c8/0x760 [ 539.600735] ? constrain_params_by_rules+0x141/0x1360 [ 539.605927] ? find_held_lock+0x36/0x1c0 [ 539.610000] constrain_params_by_rules+0x141/0x1360 [ 539.615026] ? lock_downgrade+0x8e0/0x8e0 [ 539.619184] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 539.624382] ? rcu_is_watching+0x85/0x140 [ 539.628536] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 539.633733] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 539.638935] ? is_bpf_text_address+0xd7/0x170 [ 539.643436] ? kernel_text_address+0x79/0xf0 [ 539.647845] ? __unwind_start+0x166/0x330 [ 539.651997] ? __kernel_text_address+0xd/0x40 [ 539.656496] ? unwind_get_return_address+0x61/0xa0 [ 539.661427] ? __save_stack_trace+0x7e/0xd0 [ 539.665759] ? save_stack+0xa9/0xd0 [ 539.669388] ? save_stack+0x43/0xd0 [ 539.673015] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 2018/04/10 00:30:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt(r0, 0x100000040000010e, 0x8, &(0x7f0000788fff), 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f00000001c0)=""/182, 0xb6}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/230, 0xe6}], 0x5, 0x0, 0x0, 0x7}, 0x5}], 0x1, 0x2, &(0x7f0000000540)={r2, r3+10000000}) 2018/04/10 00:30:10 executing program 6: r0 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="5503de0e7654019dc658630902b112e76fee3a645dff31291584badba21b8ce2b545d7ce1b46e8fbc0aa7371c78a6fce836eea6277240fb30946f240a39bb2b14eef278a7d368ec577e40a43b63ba2092e4518eb2df08b3583ff0afb8356fc47e0dfc38339a5f1208b0000c178d003b0cf08c7b46a3db763af30b06406c6dd30577942757334acf6f6f52abd0ab4c39bc0d9d70c1301d4d48fa961fe615807805a9b2e17cee67ddb0de5a6e38c7c14f3988e1f10bf917291a526252e4bd7bd67cf63033fa4cc422eab69550a5428236d", 0xd0}, {&(0x7f00000002c0)="2c33a8514c7409b2313fc3dee26f97c8f36a4072a165c81c1e27299c8108c0ee40aa1d291c05bd0ee8fd1caa3728f055b79a0377d8b6c76b338309c98e16c715b9f281885c7bc5dd6595fcb3a63ee3014b2a06d6ab7571811e2a25556a6f1d878a43", 0x62}], 0x2) r1 = syz_open_pts(0xffffffffffffffff, 0x10000) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="30480d8a113966fd1ed1e7e6c5e676f1ded7dc49956d8abf25a9f3011a99a6d321a81f1ab5b9dfebc6d583ba5906c82c6fcb260c736992ff6121d3d01ca3e26d9d74a063bbb29ff643c916eedd5d7dfd830eac2b609836e805c354f912a3ded6c041acd0a70bacb9387949c1aa3e43ae7f7db1c88ec43d38332605fe59e9c3d5b2281103a4b1ab6bde1596e78bddae9bac1d8eb82f8aa3eaf340cbb60323009fb93e765c40268ac8bdb56b0a1e4ff81d726fe76f") r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x2240) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000380)={0x0, {{0xa, 0x4e24, 0x5, @empty, 0x9a0}}, {{0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x7ff}, 0xb5d}}}, 0x108) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000fff), 0x5) read$eventfd(r2, &(0x7f0000000180), 0x8) [ 539.678548] ? snd_interval_refine+0x428/0x700 [ 539.683138] snd_pcm_hw_refine+0x8e9/0x1180 [ 539.687469] ? constrain_params_by_rules+0x1360/0x1360 [ 539.692749] ? graph_lock+0x170/0x170 [ 539.696542] ? __lock_is_held+0xb5/0x140 [ 539.700608] ? __lock_is_held+0xb5/0x140 [ 539.704673] ? snd_pcm_hw_param_near.constprop.35+0x15c/0xb10 [ 539.710561] ? rcu_read_lock_sched_held+0x108/0x120 [ 539.715582] ? kmem_cache_alloc_trace+0x616/0x780 [ 539.720430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.725971] ? _snd_pcm_hw_param_min+0x330/0x570 [ 539.730731] snd_pcm_hw_param_near.constprop.35+0x2cf/0xb10 [ 539.736437] ? _snd_pcm_hw_param_min+0x570/0x570 [ 539.741195] ? snd_pcm_hw_param_max+0x730/0x730 [ 539.745860] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 539.751043] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 539.756568] ? snd_pcm_plug_slave_size+0x1d0/0x350 [ 539.761485] snd_pcm_oss_change_params_locked+0x1bb1/0x3ce0 [ 539.767200] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 539.773070] ? print_usage_bug+0xc0/0xc0 [ 539.777120] ? debug_check_no_locks_freed+0x310/0x310 [ 539.782299] ? __lock_acquire+0x7f5/0x5130 [ 539.786520] ? debug_check_no_locks_freed+0x310/0x310 [ 539.791699] ? __lock_acquire+0x7f5/0x5130 [ 539.795922] ? debug_check_no_locks_freed+0x310/0x310 [ 539.801096] ? print_usage_bug+0xc0/0xc0 [ 539.805162] snd_pcm_oss_change_params+0x80/0xe0 [ 539.809908] snd_pcm_oss_make_ready+0xbe/0x170 [ 539.814478] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 539.819305] ? __lock_acquire+0x7f5/0x5130 [ 539.823528] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 539.827918] ? find_held_lock+0x36/0x1c0 [ 539.832061] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 539.837585] ? _parse_integer+0x13b/0x190 [ 539.841727] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 539.846904] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 539.851212] ? _parse_integer+0x190/0x190 [ 539.855348] ? graph_lock+0x170/0x170 [ 539.859143] ? snd_pcm_oss_release+0x290/0x290 [ 539.863721] ? find_held_lock+0x36/0x1c0 [ 539.867773] ? graph_lock+0x170/0x170 [ 539.871563] ? find_held_lock+0x36/0x1c0 [ 539.875619] ? lock_downgrade+0x8e0/0x8e0 [ 539.879758] ? kasan_check_read+0x11/0x20 [ 539.883889] ? rcu_is_watching+0x85/0x140 [ 539.888032] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 539.893220] ? __fget+0x40c/0x650 [ 539.896658] ? match_held_lock+0x881/0x8b0 [ 539.900881] ? expand_files.part.8+0x9a0/0x9a0 [ 539.905451] ? kasan_check_write+0x14/0x20 [ 539.909675] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 539.914593] ? wait_for_completion+0x870/0x870 [ 539.919162] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 539.924341] ? snd_pcm_oss_release+0x290/0x290 [ 539.928910] do_vfs_ioctl+0x1cf/0x1650 [ 539.932787] ? ioctl_preallocate+0x2e0/0x2e0 [ 539.937183] ? fget_raw+0x20/0x20 [ 539.940621] ? __sb_end_write+0xac/0xe0 [ 539.944586] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 539.950105] ? fput+0x130/0x1a0 [ 539.953376] ? ksys_write+0x1a6/0x250 [ 539.957169] ? security_file_ioctl+0x94/0xc0 [ 539.961568] ksys_ioctl+0xa9/0xd0 [ 539.965186] SyS_ioctl+0x24/0x30 [ 539.968537] ? ksys_ioctl+0xd0/0xd0 [ 539.972153] do_syscall_64+0x29e/0x9d0 [ 539.976035] ? vmalloc_sync_all+0x30/0x30 [ 539.980174] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 539.985001] ? syscall_return_slowpath+0x5c0/0x5c0 [ 539.989922] ? syscall_return_slowpath+0x30f/0x5c0 [ 539.994843] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 540.000198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 540.005040] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 540.010215] RIP: 0033:0x455259 [ 540.013389] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.021082] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 540.028335] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 540.035587] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 540.042841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 540.050114] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000010 2018/04/10 00:30:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200000000000000000000000000000000000007f1000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:11 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="d3ab27191a010023560fd9d5e03eba602dff05b82756df62", 0x18) r2 = memfd_create(&(0x7f0000000000)='*systemselfselinuxvmnet0}}-\x00', 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000c40)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}}}, 0x80, &(0x7f0000000400)}}, {{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000003cc0)=[{0x18, 0x117, 0x2, 'r'}], 0x18}}], 0x2, 0x0) 2018/04/10 00:30:12 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xffffff7f00000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000000002000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:12 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x40, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x600002, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000005c0)=""/104, 0x68}, 0x0) 2018/04/10 00:30:12 executing program 7 (fault-call:5 fault-nth:17): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:12 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r2, r2, 0x1, 0x2}, 0x10) 2018/04/10 00:30:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fallocate(r0, 0x2, 0x6, 0x1) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000617fc9), 0x0, 0x20000000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000ec5000)=0x100, 0x4) socketpair(0x9, 0x5, 0x41ef, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x6, 0x3, 0xc2}) 2018/04/10 00:30:12 executing program 4: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000a80000)={@mcast2={0xff, 0x2, [], 0x1}}, 0x14) [ 541.177769] FAULT_INJECTION: forcing a failure. [ 541.177769] name failslab, interval 1, probability 0, space 0, times 0 [ 541.189069] CPU: 1 PID: 3301 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 541.195918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 541.205269] Call Trace: [ 541.207862] dump_stack+0x1b9/0x294 [ 541.211499] ? dump_stack_print_info.cold.2+0x52/0x52 [ 541.216708] should_fail.cold.4+0xa/0x1a [ 541.220785] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/04/10 00:30:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000fffffffffffff000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 541.225894] ? rcu_is_watching+0x85/0x140 [ 541.230052] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 541.235255] ? graph_lock+0x170/0x170 [ 541.239075] ? find_held_lock+0x36/0x1c0 [ 541.243148] ? __lock_is_held+0xb5/0x140 [ 541.247228] ? check_same_owner+0x320/0x320 [ 541.251556] ? rcu_note_context_switch+0x710/0x710 [ 541.256507] __should_failslab+0x124/0x180 [ 541.260752] should_failslab+0x9/0x14 [ 541.264555] __kmalloc+0x2c8/0x760 [ 541.268099] ? do_raw_spin_unlock+0x9e/0x2e0 [ 541.272513] ? print_usage_bug+0xc0/0xc0 [ 541.276579] ? print_usage_bug+0xc0/0xc0 [ 541.280644] ? constrain_params_by_rules+0x141/0x1360 [ 541.285838] ? kasan_check_write+0x14/0x20 [ 541.290088] constrain_params_by_rules+0x141/0x1360 [ 541.295109] ? __lock_acquire+0x7f5/0x5130 [ 541.299357] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 541.304554] ? debug_check_no_locks_freed+0x310/0x310 [ 541.309761] ? lock_downgrade+0x8e0/0x8e0 [ 541.313907] ? kasan_check_read+0x11/0x20 [ 541.318045] ? rcu_is_watching+0x85/0x140 [ 541.322188] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 541.327196] ? snd_interval_refine+0x428/0x700 [ 541.331775] snd_pcm_hw_refine+0x8e9/0x1180 [ 541.336096] ? constrain_params_by_rules+0x1360/0x1360 [ 541.341360] ? find_held_lock+0x36/0x1c0 [ 541.345412] ? print_usage_bug+0xc0/0xc0 [ 541.349462] ? lock_downgrade+0x8e0/0x8e0 [ 541.353596] ? lock_release+0xa10/0xa10 [ 541.357557] ? kasan_check_read+0x11/0x20 [ 541.361688] ? do_raw_spin_unlock+0x9e/0x2e0 [ 541.366086] ? mark_held_locks+0xc9/0x160 [ 541.370223] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 541.375229] snd_pcm_hw_params+0x2a9/0x1e20 [ 541.379537] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 541.384627] ? debug_check_no_obj_freed+0x2ff/0x584 [ 541.389630] ? snd_pcm_hw_refine+0x1180/0x1180 [ 541.394207] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 541.399205] ? snd_pcm_hw_param_value+0x112/0x550 [ 541.404038] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 541.408874] ? snd_pcm_hw_param_near.constprop.35+0x6e9/0xb10 [ 541.414749] ? _snd_pcm_hw_param_min+0x570/0x570 [ 541.419494] ? snd_pcm_hw_param_max+0x730/0x730 [ 541.424149] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 541.429326] snd_pcm_kernel_ioctl+0x6c/0x240 [ 541.433721] snd_pcm_oss_change_params_locked+0x1be8/0x3ce0 [ 541.439433] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 541.445301] ? print_usage_bug+0xc0/0xc0 [ 541.449350] ? debug_check_no_locks_freed+0x310/0x310 [ 541.454528] ? __lock_acquire+0x7f5/0x5130 [ 541.458750] ? debug_check_no_locks_freed+0x310/0x310 [ 541.463928] ? __lock_acquire+0x7f5/0x5130 [ 541.468151] ? debug_check_no_locks_freed+0x310/0x310 [ 541.473323] ? print_usage_bug+0xc0/0xc0 [ 541.477387] snd_pcm_oss_change_params+0x80/0xe0 [ 541.482128] snd_pcm_oss_make_ready+0xbe/0x170 [ 541.486697] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 541.491524] ? __lock_acquire+0x7f5/0x5130 [ 541.495746] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 541.500141] ? find_held_lock+0x36/0x1c0 [ 541.504191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 541.509719] ? _parse_integer+0x13b/0x190 [ 541.513855] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 541.519038] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 541.523345] ? _parse_integer+0x190/0x190 [ 541.527480] ? graph_lock+0x170/0x170 [ 541.531265] ? snd_pcm_oss_release+0x290/0x290 [ 541.535832] ? find_held_lock+0x36/0x1c0 [ 541.539880] ? graph_lock+0x170/0x170 [ 541.543665] ? find_held_lock+0x36/0x1c0 [ 541.547718] ? lock_downgrade+0x8e0/0x8e0 [ 541.551856] ? kasan_check_read+0x11/0x20 [ 541.555986] ? rcu_is_watching+0x85/0x140 [ 541.560122] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 541.565303] ? __fget+0x40c/0x650 [ 541.568742] ? match_held_lock+0x881/0x8b0 [ 541.572965] ? expand_files.part.8+0x9a0/0x9a0 [ 541.577532] ? kasan_check_write+0x14/0x20 [ 541.581753] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 541.586669] ? wait_for_completion+0x870/0x870 [ 541.591234] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 541.596410] ? snd_pcm_oss_release+0x290/0x290 [ 541.600977] do_vfs_ioctl+0x1cf/0x1650 [ 541.604854] ? ioctl_preallocate+0x2e0/0x2e0 [ 541.609246] ? fget_raw+0x20/0x20 [ 541.612688] ? __sb_end_write+0xac/0xe0 [ 541.616653] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 541.622171] ? fput+0x130/0x1a0 [ 541.625435] ? ksys_write+0x1a6/0x250 [ 541.629227] ? security_file_ioctl+0x94/0xc0 [ 541.633625] ksys_ioctl+0xa9/0xd0 [ 541.637065] SyS_ioctl+0x24/0x30 [ 541.640416] ? ksys_ioctl+0xd0/0xd0 [ 541.644035] do_syscall_64+0x29e/0x9d0 [ 541.647905] ? vmalloc_sync_all+0x30/0x30 [ 541.652042] ? _raw_spin_unlock_irq+0x27/0x70 [ 541.656525] ? finish_task_switch+0x1ca/0x820 [ 541.661009] ? syscall_return_slowpath+0x5c0/0x5c0 [ 541.665936] ? syscall_return_slowpath+0x30f/0x5c0 [ 541.670855] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 541.676209] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 541.681048] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 541.686221] RIP: 0033:0x455259 [ 541.689393] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 541.697173] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 541.704427] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 541.711685] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 541.718936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/04/10 00:30:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000000001000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 541.726191] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000011 2018/04/10 00:30:12 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0xb00020000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@remote={0xac, 0x14, 0x14, 0xbb}}, 0x8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0xb2}, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x3, r0}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x80000000, 0x100000001, 0x5, 0x9}, 0x6) 2018/04/10 00:30:12 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0xfffffffffffffffc, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_nanosleep(0x2, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40300, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{0x77359400}, 0x3fdb, 0xc9, 0xd69f}, {{0x77359400}, 0x10000, 0x0, 0x80000000}, {{}, 0xfffffffffffff19b, 0x80000001, 0x3f}], 0x48) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="4a947c185ad4221b2a2aa359226a8bcd4fe090c0166be1d1b1b3ec76ff4d19603cb347e0d1205b74e30156ffad77ba26eab08d50d5e4ab653071d51cbd6e08625b2a844b1f3091f3b983f90cd281"], &(0x7f0000000000)=0x52) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x6}, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 2018/04/10 00:30:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000007fffffff00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:12 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x10000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000000007f100000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:12 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x20000, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="018301000200fffe0800aa01129a751c8848b96383cae9e71ed0c690fc11e91bb9f3bea5fbd0fb1b1b755bceb554859b5a6989cc76e76d12eafb4347a07184814f566e2e70714781c979658af2003ebcb21f322d6a9839000472d76f829fbd18ef79d6936669089f78862b3d5ebbf77d5af2458301b53a2d1d283c1db4f1be13543262d28fcbc4f1ecad17905d85bd10074f4fa73b3c73215e8626b673bc849982492564c6c457dc1f29899b44f3d9721f74d1b63e12c8b46da2878ef5cd5fa78ad11b74eccfcf9b1d2badc1d26c9d02904707e66e30bfa5b825c4fe223e3dd134192322d0d7fc900bed69e78a8971ae5de099fd"], 0xf4) syz_emit_ethernet(0x3a, &(0x7f0000aeb000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@timestamp={0x44, 0x10, 0x7, 0x1, 0x0, [{[@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}]}, {}]}]}}, @icmp=@address_reply={0x12}}}}}, &(0x7f0000aebfe8)) 2018/04/10 00:30:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007fbdb72d1cb2a4a280930a06000000a84306910000003900080002000c00000000001900a30700ffffffee0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000040)}, 0x0) socket$inet6(0xa, 0x5, 0xb14) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) 2018/04/10 00:30:13 executing program 7 (fault-call:5 fault-nth:18): syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(0xffffffffffffffff, &(0x7f0000002d40)=[{&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002c80)=""/38, 0x26}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) fcntl$setstatus(r0, 0x4, 0x800) readv(r0, &(0x7f0000a6fff0), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) socket$inet6(0xa, 0x0, 0x2000000009) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 2018/04/10 00:30:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000200000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/04/10 00:30:13 executing program 0: syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x802, 0x4) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x4e22}, 0x10) sendto$inet(r0, &(0x7f00005c9000), 0x252, 0x800000020000000, &(0x7f0000303000)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x1600000000000000}, &(0x7f0000768000), &(0x7f00000001c0), &(0x7f0000349000), &(0x7f0000000040)={&(0x7f0000a65ff8), 0x8}) 2018/04/10 00:30:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xff, 0x24000) r2 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x2) readv(r1, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/6, 0x6}, {&(0x7f0000002cc0)=""/69, 0x45}], 0x3) ioctl$int_in(r2, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f00000001c0)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0xfede) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000013c0)}) r4 = socket$inet6(0xa, 0x0, 0x2000000009) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000001880)=0xce6, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000014c0)) semget$private(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe38}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/04/10 00:30:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f00000003c0)="b886008ed0b801018ec8660f08660f6d57053ef0f6990100ea8e28a6003664a60f00de0f01c9f3f3f4", 0x29}], 0x1, 0x0, &(0x7f0000000340), 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000005c0)) accept4$llc(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000340)=0x10, 0x80800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f00000001c0)="b9880a0000b800000000ba000000000f30b8010000000f01d9b9960a00000f32430fc72ec46219a8f5460f01cbc46225079d8000c0feb9800000c00f32b9800000c00f3235000400000f30460f01f8", 0x4f}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000100)={0x3}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000240), &(0x7f00000002c0)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f226066b87df9eab10f23c00f21f8663500000d000f23f8b88e000f00d00f236fbaa10066b8ca4f000066eff966b9800000c00f326635002000000f300fe8d39a0f0043000f01df", 0x48}], 0x1, 0x0, &(0x7f00000000c0), 0x1d8) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_delete(0x0) 2018/04/10 00:30:13 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) sendmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400), 0x3e4}, 0x0) epoll_create1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000001000200fc90f2a4a8185653e903900000000000cd9573073e4ba3a265a61c000033181a2b116ef80b"], &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r1, 0xfffffc61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r3 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x81, 0x1) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000300)={[0x101001, 0x0, 0xf000, 0xf000], 0x1, 0x5a, 0x4}) r4 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x182e, 0x10000) setrlimit(0x0, &(0x7f0000000280)={0x3ff, 0x5}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0xc5, @empty, 0x5}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000080)}, 0x10) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 2018/04/10 00:30:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfa8840afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") sendfile(r0, r0, &(0x7f0000000140), 0xfffffffffffffffa) fremovexattr(r0, &(0x7f0000000000)=@known='security.capability\x00') getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={0x0, 0xffffffffffffaac3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in6={{0xa, 0x9, 0xfffffffeffffffff, @dev={0xfe, 0x80, [], 0x1a}, 0x4}}}, &(0x7f0000000300)=0x84) flistxattr(r0, &(0x7f00000001c0)=""/9, 0x9) 2018/04/10 00:30:13 executing program 4: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4)={0x10}, 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000000ffff0c00000000000000000000005b659a62290ffc380c2dbfc75e9f17e104000000000000001cb4e2bf501db1bb949869c29c4d904d9f26a203415e66cd4dd3050bc1700612dbc3080c91125fa158cf0d70309f7f1969136edfd73294c0351575a9e8aa5944f2a432a15b3fe56aa566"], 0x82}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@l2, &(0x7f0000000280)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x100, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000240)={0x6, 0x1, r3, 0x9, r4, 0x100, 0x671, 0x80000001}) accept4$unix(r1, 0x0, &(0x7f00000000c0), 0x800) [ 542.776852] FAULT_INJECTION: forcing a failure. [ 542.776852] name failslab, interval 1, probability 0, space 0, times 0 [ 542.788165] CPU: 0 PID: 3372 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 542.795012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.804365] Call Trace: [ 542.806959] dump_stack+0x1b9/0x294 [ 542.810595] ? dump_stack_print_info.cold.2+0x52/0x52 [ 542.815803] should_fail.cold.4+0xa/0x1a [ 542.819865] ? kernel_text_address+0x79/0xf0 2018/04/10 00:30:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000299f3e)="580000001400192340834b80040d8c5602067fffffff810000000000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 2018/04/10 00:30:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) nanosleep(&(0x7f0000000140)={0x77359400}, &(0x7f0000000180)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 542.824283] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 542.829392] ? __save_stack_trace+0x7e/0xd0 [ 542.833721] ? graph_lock+0x170/0x170 [ 542.839221] ? find_held_lock+0x36/0x1c0 [ 542.843301] ? __lock_is_held+0xb5/0x140 [ 542.847377] ? check_same_owner+0x320/0x320 [ 542.851707] ? do_raw_spin_lock+0xc1/0x200 [ 542.856585] ? rcu_note_context_switch+0x710/0x710 [ 542.861522] ? trace_hardirqs_off+0xd/0x10 [ 542.865765] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 542.873704] __should_failslab+0x124/0x180 [ 542.878082] should_failslab+0x9/0x14 [ 542.881873] __kmalloc+0x2c8/0x760 [ 542.885400] ? mark_held_locks+0xc9/0x160 [ 542.889579] ? quarantine_put+0xeb/0x190 [ 542.893631] ? constrain_params_by_rules+0x141/0x1360 [ 542.898813] constrain_params_by_rules+0x141/0x1360 [ 542.903814] ? trace_hardirqs_on+0xd/0x10 [ 542.907955] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 542.913133] ? snd_pcm_mmap_control_fault+0x3e0/0x3e0 [ 542.918308] ? debug_check_no_locks_freed+0x310/0x310 [ 542.923494] ? lock_downgrade+0x8e0/0x8e0 [ 542.927634] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 542.933152] ? snd_interval_refine+0x428/0x700 [ 542.937718] snd_pcm_hw_refine+0x8e9/0x1180 [ 542.942029] ? snd_interval_refine+0x428/0x700 [ 542.946611] ? constrain_params_by_rules+0x1360/0x1360 [ 542.951875] ? constrain_params_by_rules+0x1360/0x1360 [ 542.957135] ? find_held_lock+0x36/0x1c0 [ 542.961182] ? print_usage_bug+0xc0/0xc0 [ 542.965226] ? graph_lock+0x170/0x170 [ 542.969007] ? lock_downgrade+0x8e0/0x8e0 [ 542.973145] ? lock_release+0xa10/0xa10 [ 542.977102] ? kasan_check_read+0x11/0x20 [ 542.981231] ? __lock_is_held+0xb5/0x140 [ 542.985277] snd_pcm_hw_param_first+0x30e/0x680 [ 542.989931] snd_pcm_hw_params+0x340/0x1e20 [ 542.994241] ? snd_pcm_hw_refine+0x1180/0x1180 [ 542.998811] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 543.003807] ? snd_pcm_hw_param_value+0x112/0x550 [ 543.008633] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 543.013460] ? snd_pcm_hw_param_near.constprop.35+0x6e9/0xb10 [ 543.019327] ? _snd_pcm_hw_param_min+0x570/0x570 [ 543.024065] ? snd_pcm_hw_param_max+0x730/0x730 [ 543.028719] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 543.033887] snd_pcm_kernel_ioctl+0x6c/0x240 [ 543.038276] snd_pcm_oss_change_params_locked+0x1be8/0x3ce0 [ 543.043976] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 543.049839] ? print_usage_bug+0xc0/0xc0 [ 543.053882] ? debug_check_no_locks_freed+0x310/0x310 [ 543.059052] ? __lock_acquire+0x7f5/0x5130 [ 543.063268] ? debug_check_no_locks_freed+0x310/0x310 [ 543.068440] ? __lock_acquire+0x7f5/0x5130 [ 543.072660] ? debug_check_no_locks_freed+0x310/0x310 [ 543.077827] ? print_usage_bug+0xc0/0xc0 [ 543.081876] snd_pcm_oss_change_params+0x80/0xe0 [ 543.086614] snd_pcm_oss_make_ready+0xbe/0x170 [ 543.091180] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 543.096002] ? __lock_acquire+0x7f5/0x5130 [ 543.100223] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 543.104610] ? find_held_lock+0x36/0x1c0 [ 543.108655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.114185] ? _parse_integer+0x13b/0x190 [ 543.118317] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 543.123487] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 543.127790] ? _parse_integer+0x190/0x190 [ 543.131921] ? graph_lock+0x170/0x170 [ 543.135701] ? snd_pcm_oss_release+0x290/0x290 [ 543.140266] ? find_held_lock+0x36/0x1c0 [ 543.144312] ? graph_lock+0x170/0x170 [ 543.148095] ? find_held_lock+0x36/0x1c0 [ 543.152148] ? lock_downgrade+0x8e0/0x8e0 [ 543.156292] ? kasan_check_read+0x11/0x20 [ 543.160432] ? rcu_is_watching+0x85/0x140 [ 543.164560] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 543.169739] ? __fget+0x40c/0x650 [ 543.173175] ? match_held_lock+0x881/0x8b0 [ 543.177420] ? expand_files.part.8+0x9a0/0x9a0 [ 543.182094] ? kasan_check_write+0x14/0x20 [ 543.186311] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 543.191221] ? wait_for_completion+0x870/0x870 [ 543.195784] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 543.200954] ? snd_pcm_oss_release+0x290/0x290 [ 543.205518] do_vfs_ioctl+0x1cf/0x1650 [ 543.209393] ? ioctl_preallocate+0x2e0/0x2e0 [ 543.213789] ? fget_raw+0x20/0x20 [ 543.217223] ? __sb_end_write+0xac/0xe0 [ 543.221180] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.226698] ? fput+0x130/0x1a0 [ 543.229958] ? ksys_write+0x1a6/0x250 [ 543.233740] ? security_file_ioctl+0x94/0xc0 [ 543.238129] ksys_ioctl+0xa9/0xd0 [ 543.241565] SyS_ioctl+0x24/0x30 [ 543.244912] ? ksys_ioctl+0xd0/0xd0 [ 543.248520] do_syscall_64+0x29e/0x9d0 [ 543.252388] ? vmalloc_sync_all+0x30/0x30 [ 543.256524] ? _raw_spin_unlock_irq+0x27/0x70 [ 543.261001] ? finish_task_switch+0x1ca/0x820 [ 543.265489] ? syscall_return_slowpath+0x5c0/0x5c0 [ 543.270405] ? syscall_return_slowpath+0x30f/0x5c0 [ 543.275318] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 543.280665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.285494] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 543.290661] RIP: 0033:0x455259 [ 543.293828] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.301516] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 543.308764] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 543.316015] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 543.323271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 543.330523] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000012 [ 543.338349] WARNING: CPU: 0 PID: 3372 at sound/core/pcm_native.c:620 snd_pcm_hw_params+0x65a/0x1e20 [ 543.347541] Kernel panic - not syncing: panic_on_warn set ... [ 543.347541] [ 543.354909] CPU: 0 PID: 3372 Comm: syz-executor7 Not tainted 4.16.0+ #16 [ 543.361741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 543.371090] Call Trace: [ 543.373682] dump_stack+0x1b9/0x294 [ 543.377321] ? dump_stack_print_info.cold.2+0x52/0x52 [ 543.382521] ? snd_pcm_hw_params+0x5f0/0x1e20 [ 543.387018] panic+0x22f/0x4de [ 543.390215] ? add_taint.cold.5+0x16/0x16 [ 543.394533] ? __warn.cold.8+0x148/0x1a3 [ 543.398600] ? snd_pcm_hw_params+0x65a/0x1e20 [ 543.403099] __warn.cold.8+0x163/0x1a3 [ 543.406982] ? snd_pcm_hw_params+0x65a/0x1e20 [ 543.411468] report_bug+0x252/0x2d0 [ 543.415086] do_error_trap+0x1de/0x490 [ 543.418962] ? math_error+0x420/0x420 [ 543.422747] ? print_usage_bug+0xc0/0xc0 [ 543.426796] ? graph_lock+0x170/0x170 [ 543.430577] ? lock_downgrade+0x8e0/0x8e0 [ 543.434712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.439541] do_invalid_op+0x1b/0x20 [ 543.443238] invalid_op+0x1b/0x40 [ 543.446678] RIP: 0010:snd_pcm_hw_params+0x65a/0x1e20 [ 543.451757] RSP: 0018:ffff88018fe0f1d8 EFLAGS: 00010246 [ 543.457102] RAX: 0000000000040000 RBX: 00000000fffffff4 RCX: ffffc900036b4000 [ 543.464351] RDX: 0000000000040000 RSI: ffffffff85a20a6a RDI: 0000000000000005 [ 543.471606] RBP: ffff88018fe0f428 R08: ffff8801bb0b0080 R09: ffffed003b6046c2 [ 543.478864] R10: ffffed003b6046c2 R11: ffff8801db023613 R12: ffffffff8826949c [ 543.486113] R13: ffff8801ce43bb00 R14: ffff8801bafbd6c0 R15: dffffc0000000000 [ 543.493478] ? snd_pcm_hw_params+0x65a/0x1e20 [ 543.497970] ? snd_pcm_hw_params+0x65a/0x1e20 [ 543.502457] ? snd_pcm_hw_refine+0x1180/0x1180 [ 543.507036] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 543.512038] ? snd_pcm_hw_param_value+0x112/0x550 [ 543.516869] ? snd_pcm_hw_param_first+0x2eb/0x680 [ 543.521696] ? snd_pcm_hw_param_near.constprop.35+0x6e9/0xb10 [ 543.527564] ? _snd_pcm_hw_param_min+0x570/0x570 [ 543.532305] ? snd_pcm_hw_param_max+0x730/0x730 [ 543.536956] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 543.542128] snd_pcm_kernel_ioctl+0x6c/0x240 [ 543.546519] snd_pcm_oss_change_params_locked+0x1be8/0x3ce0 [ 543.552220] ? snd_pcm_hw_param_near.constprop.35+0xb10/0xb10 [ 543.558085] ? print_usage_bug+0xc0/0xc0 [ 543.562129] ? debug_check_no_locks_freed+0x310/0x310 [ 543.567302] ? __lock_acquire+0x7f5/0x5130 [ 543.571521] ? debug_check_no_locks_freed+0x310/0x310 [ 543.576694] ? __lock_acquire+0x7f5/0x5130 [ 543.580915] ? debug_check_no_locks_freed+0x310/0x310 [ 543.586104] ? print_usage_bug+0xc0/0xc0 [ 543.590157] snd_pcm_oss_change_params+0x80/0xe0 [ 543.594894] snd_pcm_oss_make_ready+0xbe/0x170 [ 543.599460] snd_pcm_oss_sync.isra.29+0x3a2/0x980 [ 543.604281] ? __lock_acquire+0x7f5/0x5130 [ 543.608497] ? snd_pcm_oss_sync1+0x5a0/0x5a0 [ 543.612883] ? find_held_lock+0x36/0x1c0 [ 543.616926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 543.622445] ? _parse_integer+0x13b/0x190 [ 543.626578] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 543.631749] snd_pcm_oss_ioctl+0x7b6/0x3f00 [ 543.636051] ? _parse_integer+0x190/0x190 [ 543.640182] ? graph_lock+0x170/0x170 [ 543.643961] ? snd_pcm_oss_release+0x290/0x290 [ 543.648526] ? find_held_lock+0x36/0x1c0 [ 543.652570] ? graph_lock+0x170/0x170 [ 543.656352] ? find_held_lock+0x36/0x1c0 [ 543.660405] ? lock_downgrade+0x8e0/0x8e0 [ 543.664538] ? kasan_check_read+0x11/0x20 [ 543.668670] ? rcu_is_watching+0x85/0x140 [ 543.672801] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 543.677988] ? __fget+0x40c/0x650 [ 543.681428] ? match_held_lock+0x881/0x8b0 [ 543.685646] ? expand_files.part.8+0x9a0/0x9a0 [ 543.690209] ? kasan_check_write+0x14/0x20 [ 543.694425] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 543.699337] ? wait_for_completion+0x870/0x870 [ 543.703903] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 543.709086] ? snd_pcm_oss_release+0x290/0x290 [ 543.713654] do_vfs_ioctl+0x1cf/0x1650 [ 543.717530] ? ioctl_preallocate+0x2e0/0x2e0 [ 543.721923] ? fget_raw+0x20/0x20 [ 543.725363] ? __sb_end_write+0xac/0xe0 [ 543.729337] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 543.734861] ? fput+0x130/0x1a0 [ 543.738125] ? ksys_write+0x1a6/0x250 [ 543.741910] ? security_file_ioctl+0x94/0xc0 [ 543.746303] ksys_ioctl+0xa9/0xd0 [ 543.749742] SyS_ioctl+0x24/0x30 [ 543.753089] ? ksys_ioctl+0xd0/0xd0 [ 543.756699] do_syscall_64+0x29e/0x9d0 [ 543.760570] ? vmalloc_sync_all+0x30/0x30 [ 543.764700] ? _raw_spin_unlock_irq+0x27/0x70 [ 543.769179] ? finish_task_switch+0x1ca/0x820 [ 543.773657] ? syscall_return_slowpath+0x5c0/0x5c0 [ 543.778571] ? syscall_return_slowpath+0x30f/0x5c0 [ 543.783488] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 543.788833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 543.793665] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 543.798838] RIP: 0033:0x455259 [ 543.802009] RSP: 002b:00007fb497b41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 543.809705] RAX: ffffffffffffffda RBX: 00007fb497b426d4 RCX: 0000000000455259 [ 543.816965] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 543.824215] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 543.831465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 543.839310] R13: 000000000000035f R14: 00000000006f8188 R15: 0000000000000012 [ 543.847410] Dumping ftrace buffer: [ 543.851197] (ftrace buffer empty) [ 543.856773] Kernel Offset: disabled [ 543.860394] Rebooting in 86400 seconds..