INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2018/04/30 10:05:07 fuzzer started 2018/04/30 10:05:08 dialing manager at 10.128.0.26:33975 syzkaller login: [ 50.776326] can: request_module (can-proto-0) failed. [ 50.787872] can: request_module (can-proto-0) failed. 2018/04/30 10:05:15 kcov=true, comps=false 2018/04/30 10:05:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x19, 0x2ff, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, @u32}, @typed={0x8, 0x17, @str='^\x00'}]}, 0x24}, 0x1}, 0x0) 2018/04/30 10:05:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0xfffffffffffffffd}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @loopback=0x7f000001}}) 2018/04/30 10:05:19 executing program 7: clone(0x200, &(0x7f0000000040), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000280)) r0 = syz_open_procfs(0x0, &(0x7f000042cff4)='io\x00') pread64(r0, &(0x7f00000003c0), 0x62f, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f0000000080)='./file0\x00', 0x27e, 0x0) 2018/04/30 10:05:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b9eff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000002c0)) 2018/04/30 10:05:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)="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", 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x1bfffffc, 0x7) 2018/04/30 10:05:19 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00002f8fc8)={0x0, 0x0, &(0x7f0000002000)}, 0x8001) recvmsg(r1, &(0x7f0000136000)={0x0, 0x0, &(0x7f00002a1000)=[{&(0x7f0000427000)=""/1, 0x1}], 0x1, &(0x7f0000154f5e)}, 0x0) sendmsg$alg(r1, &(0x7f00002f8000)={0x0, 0x0, &(0x7f00000fdfc0)=[{&(0x7f00001ea000)='`', 0x1}], 0x1, &(0x7f00002f8fe8)}, 0x0) 2018/04/30 10:05:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000240)) 2018/04/30 10:05:19 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfff, 0x0, 0x2, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) perf_event_open(&(0x7f000012bf88)={0x2, 0x78, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000280), &(0x7f0000001180), &(0x7f0000000380), &(0x7f0000001200)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000000480)=""/224, 0xe0) mlockall(0x0) rt_sigtimedwait(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x77359400}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000002c0)=0xc) [ 56.144838] IPVS: ftp: loaded support on port[0] = 21 [ 56.235941] IPVS: ftp: loaded support on port[0] = 21 [ 56.280523] IPVS: ftp: loaded support on port[0] = 21 [ 56.368967] IPVS: ftp: loaded support on port[0] = 21 [ 56.464867] IPVS: ftp: loaded support on port[0] = 21 [ 56.590953] IPVS: ftp: loaded support on port[0] = 21 [ 56.733165] IPVS: ftp: loaded support on port[0] = 21 [ 56.928354] IPVS: ftp: loaded support on port[0] = 21 [ 58.174740] ip (4703) used greatest stack depth: 54184 bytes left [ 58.881678] ip (4762) used greatest stack depth: 53768 bytes left [ 58.945852] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.952370] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.997231] device bridge_slave_0 entered promiscuous mode [ 59.141800] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.149201] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.188771] device bridge_slave_1 entered promiscuous mode [ 59.360237] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.366824] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.395281] device bridge_slave_0 entered promiscuous mode [ 59.419304] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.576413] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.582935] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.612399] device bridge_slave_1 entered promiscuous mode [ 59.660660] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.667173] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.696358] device bridge_slave_0 entered promiscuous mode [ 59.798810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.821747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 59.843817] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.850341] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.898812] device bridge_slave_1 entered promiscuous mode [ 59.928569] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.935119] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.970219] device bridge_slave_0 entered promiscuous mode [ 59.987554] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.994132] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.001637] device bridge_slave_0 entered promiscuous mode [ 60.033866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.067902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.184361] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.190865] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.225282] device bridge_slave_1 entered promiscuous mode [ 60.241809] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.248304] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.256623] device bridge_slave_1 entered promiscuous mode [ 60.325946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.338335] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.344879] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.390616] device bridge_slave_0 entered promiscuous mode [ 60.430851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.445166] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.472858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.502637] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.509179] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.571127] device bridge_slave_0 entered promiscuous mode [ 60.632520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.654309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 60.673933] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 60.681771] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.688257] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.718229] device bridge_slave_1 entered promiscuous mode [ 60.745897] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 60.759812] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.766312] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.803221] device bridge_slave_0 entered promiscuous mode [ 60.836202] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.842688] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.870375] device bridge_slave_1 entered promiscuous mode [ 60.927686] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 60.948915] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.020805] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.043784] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.050300] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.076361] device bridge_slave_1 entered promiscuous mode [ 61.095737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.122457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.132935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.159139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.189329] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.196360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.255321] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.302776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.313931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 61.355288] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.419152] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.458447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.465462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.479447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.492180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.524557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 61.562112] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.675505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 61.699453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 61.708862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.762365] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.770678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.828607] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.856198] team0: Port device team_slave_0 added [ 61.921190] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 61.957903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 61.970017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.044316] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.114480] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.135673] team0: Port device team_slave_1 added [ 62.201794] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.211322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.218238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.236912] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.257657] team0: Port device team_slave_0 added [ 62.284230] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 62.295232] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.309401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.316432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.327983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.427965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.464120] team0: Port device team_slave_0 added [ 62.501709] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.516114] team0: Port device team_slave_1 added [ 62.527315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.534285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.550330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.563077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.591513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.628097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.636720] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 62.644636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.664133] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 62.677937] team0: Port device team_slave_0 added [ 62.696582] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.719254] team0: Port device team_slave_1 added [ 62.739840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.752351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.766944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 62.798880] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.806821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.821480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.857404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.881291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.909593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 62.916573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.938866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 62.952562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.968098] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 62.992353] team0: Port device team_slave_1 added [ 63.012898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.021940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.032161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.055150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.071773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.089665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.116644] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.135450] team0: Port device team_slave_0 added [ 63.146803] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.154796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.168191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.204010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 63.213698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.239368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.254987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.262914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.298085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.333508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.347974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.359475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.371232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.399012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.469982] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.482283] team0: Port device team_slave_1 added [ 63.498639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.518116] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 63.525298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.555516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.586785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.614568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.637865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.645377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.654317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.687584] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.717209] team0: Port device team_slave_0 added [ 63.723339] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.735231] team0: Port device team_slave_0 added [ 63.768980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 63.780748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.801261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.826769] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 63.835813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.853742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.875525] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 63.887869] team0: Port device team_slave_0 added [ 63.895400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 63.904276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.931350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.971151] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 63.990433] team0: Port device team_slave_1 added [ 64.002421] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.020352] team0: Port device team_slave_1 added [ 64.040349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.048642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.071537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.111623] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 64.132582] team0: Port device team_slave_1 added [ 64.155333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.163130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.176113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.217633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.232836] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.241969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.269531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.314218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.358397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.406597] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.414289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.423922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.447386] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.456698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 64.467769] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.479953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.527985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.562424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.596105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.614353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.624567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.660601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.688460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.710816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.738796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.747271] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.755700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 64.764382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.792872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.839547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.867019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.884260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.894569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.924153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.936889] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 64.952941] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 64.969904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.990333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.031886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.067825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.097828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.124406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.183634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 65.203200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.227618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.999564] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.006133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.013068] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.019538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.040657] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.144699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.491259] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.497759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.504649] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.511137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.543830] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.773463] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.779952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.786853] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.793329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.807519] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 66.852219] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.858736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.865689] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.872195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.940009] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.158607] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.165141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.172245] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.178721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.211221] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.227145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.241802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.255959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.269395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.491733] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.498227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.505149] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.511634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.550268] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.565226] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.571710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.578714] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.585162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.640655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 67.681960] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.688473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.695374] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.701850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.788173] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 68.255187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.269317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.290963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.269361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.690425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.800136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.957730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.077661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.223644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.378124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.497782] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.614560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.708847] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.901814] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 76.910689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.932664] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 76.939361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.948948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.044773] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.184459] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.234236] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.240615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.253208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.567856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.595773] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.602212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.618287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.746347] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.755622] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.763998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.778983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.815195] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 77.908487] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 77.914818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.931231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.024589] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.077458] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.084869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.098428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.468658] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.475008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.485893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.539691] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.598155] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.678687] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 78.698478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.706167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.808302] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.141243] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.379906] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.534337] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/30 10:05:49 executing program 0: 2018/04/30 10:05:49 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 2018/04/30 10:05:49 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000020d000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00002f8fc8)={0x0, 0x0, &(0x7f0000002000)}, 0x8001) recvmsg(r1, &(0x7f0000136000)={0x0, 0x0, &(0x7f00002a1000)=[{&(0x7f0000427000)=""/1, 0x1}], 0x1, &(0x7f0000154f5e)}, 0x0) sendmsg$alg(r1, &(0x7f00002f8000)={0x0, 0x0, &(0x7f00000fdfc0)=[{&(0x7f00001ea000)='`', 0x1}], 0x1, &(0x7f00002f8fe8)}, 0x0) 2018/04/30 10:05:49 executing program 2: 2018/04/30 10:05:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000b9eff6)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f00000002c0)) 2018/04/30 10:05:49 executing program 5: 2018/04/30 10:05:49 executing program 3: 2018/04/30 10:05:49 executing program 7: 2018/04/30 10:05:49 executing program 5: 2018/04/30 10:05:49 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000101a30ec5a1000000000000000000000000000000000000000000", 0x1f) 2018/04/30 10:05:49 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x10000002284, &(0x7f00000000c0)) 2018/04/30 10:05:49 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2013, r0, 0x400000000000000) 2018/04/30 10:05:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000dc0), 0x0, 0x20020003, &(0x7f00000001c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) sendto$inet(r0, &(0x7f0000000000)='@', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f000000a880)=[{{&(0x7f0000000480)=@sco={0x1f}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000b80)="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", 0x218}], 0x1, &(0x7f0000000600)}}], 0x1, 0x0) 2018/04/30 10:05:49 executing program 4: getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x10000002284, &(0x7f00000000c0)) 2018/04/30 10:05:49 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000880)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) [ 85.436551] netlink: 11 bytes leftover after parsing attributes in process `syz-executor2'. 2018/04/30 10:05:49 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000140)) getsockopt$inet_int(r0, 0x10d, 0x4000000087, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/04/30 10:05:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000001280)="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", 0x27c, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000080)="9ec0c1d92d660a18922175c26ef8dffc3d397ee01a62c6e3d4f98dbdb3c3e1a9ea106ba279fad7462fcf112a2dc051ccb5644eb88b150b7b46763e79b4d636444034460e836c7537b462b6be5e110ddd2fc6b2010bb788adc03c6e8540a42b6a", 0x60, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) 2018/04/30 10:05:49 executing program 7: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), 0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x3) 2018/04/30 10:05:49 executing program 3: getpriority(0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000700)=ANY=[], 0x0) close(0xffffffffffffffff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240)={[0x39]}, 0x1) 2018/04/30 10:05:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) chdir(&(0x7f00000003c0)='./bus/file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f000074fffc)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x6) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x5, @empty, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f00000007c0)="8e417d6f4b2d5a8ae9f855402a3bfae9b1dd08b13be6993c4e8da90892f7e4a055006b7e1ad4e17305bf0c605a7c2f2b5379674a155fce1f6e7c8bf86ca7f606c6001a76b382ac94634d4c4e1912639b48e8439c6a65e5d9fcde0cd0460a47d60747ceeb7e62cee8b6468452ff2742d8141a8c6ab867180c3421fcf34cb1239ebcce1320832b8159e9df51bbc9e3ab84d04ea8da965a1f04aa8adfcd339b230913d07330bb9663c52eada83d8e", 0xad, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000280)=0xfffffffffffffffc, 0xfffffffffffffead) rt_sigaction(0x0, &(0x7f0000000040), &(0x7f00000001c0), 0x8, &(0x7f0000000200)) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240), &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in={{0x2}}}, &(0x7f0000000780)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540), &(0x7f0000000b00)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r2}, &(0x7f0000000b80)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000380)={0x0, 0xfffffffffffffffd}, &(0x7f0000000c80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x4, 0xffff}, &(0x7f0000000d00)=0x20) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000480)=@in6={0xa}, 0x1c, &(0x7f0000000600), 0x0, &(0x7f0000000d40)}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x14) ftruncate(0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x1fc, 0x4) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) fcntl$setsig(r0, 0xa, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000440), 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x3}, 0xd) ftruncate(r4, 0x1ff) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/04/30 10:05:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x1f, 0x1, {0x1, 0x0, 0x5, 0x3, 0x7fff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:49 executing program 2: prctl$void(0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40040, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) 2018/04/30 10:05:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00008f6ff9)='mounts\x00') fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0x40000000}) mount(&(0x7f0000833000)='./file0\x00', &(0x7f0000972000)='.', &(0x7f0000e63000)='ramfs\x00', 0x0, &(0x7f0000caa000)) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000080)) 2018/04/30 10:05:50 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000a00000009000000fa8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b9af08b2f04d0970000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000022edab8ca1d3ec133f8df84a1712ebfddce035f333a45397a64027908bae507404e22eeb49189d923b923f734d0e81ab276e82b8d790551307fc996da76bfbda56bfe8"], 0x90) 2018/04/30 10:05:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101005, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x80000001, 0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="80fd4f883881", 0x6}], 0x1, 0x0) 2018/04/30 10:05:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x1f, 0x1, {0x1, 0x0, 0x5, 0x3, 0x7fff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:50 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/udplite6\x00') r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='n', 0x1, 0xfffffffffffffffd) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xffffffff) keyctl$read(0xb, r0, &(0x7f0000001280), 0x0) r1 = add_key(&(0x7f0000003380)='big_key\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000002300)="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", 0x1071, 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="a9238f613552a48c71de97c0d5740e52e95e8d61a9ecf56e0d413a4238", 0x1d, r1) 2018/04/30 10:05:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000ffc)=@fragment, 0x8) 2018/04/30 10:05:50 executing program 7: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), 0x4) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x2, 0x3) 2018/04/30 10:05:50 executing program 6: 2018/04/30 10:05:50 executing program 3: 2018/04/30 10:05:50 executing program 0: 2018/04/30 10:05:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x1f, 0x1, {0x1, 0x0, 0x5, 0x3, 0x7fff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') getdents64(r0, &(0x7f0000ceffd4)=""/44, 0x2c) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x9, 0x8, [0xfff, 0x1]}) getdents(r0, &(0x7f0000000040)=""/36, 0x24) 2018/04/30 10:05:50 executing program 1: 2018/04/30 10:05:50 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f00007c5000)='logon\x00', &(0x7f0000a08000)={0x73, 0x79, 0x7a}, &(0x7f0000d77ff9)='\x00', 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x5}, 0x8, 0x800) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x10b, 0xfffffffffffffeff, 0x1000000000, 0x35f, 0x39e, 0x8, 0x18e, 0x2}, "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", [[], [], [], []]}, 0x1420) rt_sigaction(0x39, &(0x7f0000000000)={0x8b, {0x4}, 0x6, 0xa1}, 0x0, 0xffffffffffffff00, &(0x7f0000000040)) 2018/04/30 10:05:50 executing program 6: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffff13b54c007110009f30501000b00064000007200020000", 0x1f) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x8000) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x8) fcntl$dupfd(r0, 0x406, r0) connect$rds(r2, &(0x7f0000000140)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) 2018/04/30 10:05:50 executing program 3: mkdir(&(0x7f0000074ff8)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0/bus\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='sysfs\x00', 0x0, &(0x7f0000ebcffe)) rename(&(0x7f0000e7b000)='./file0/bus\x00', &(0x7f0000639000)='./file0/file0\x00') mkdir(&(0x7f0000000000)='./file0/bus\x00', 0x15c) 2018/04/30 10:05:50 executing program 7: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x10001, 0x200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='vboxnet1-$\x00') r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x10000) 2018/04/30 10:05:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x1f, 0x1, {0x1, 0x0, 0x5, 0x3, 0x7fff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:50 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x10400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000080)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0xb2b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x2}}]}, 0x34}, 0x1}, 0x0) [ 86.707983] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/30 10:05:50 executing program 1: syslog(0x3, &(0x7f0000000200)=""/176, 0x8c0a012779f0eead) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/stat\x00') getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x3f, 0x2, [0x0, 0xfffffffffffffffe]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0xffff, 0xe}, 0x90) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20c40, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000040)=""/40) request_key(&(0x7f0000001600)='rxrpc_s\x00', &(0x7f0000001640)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001680)='rxrpc_s\x00', 0xfffffffffffffff9) [ 86.755779] netlink: 'syz-executor6': attribute type 6 has an invalid length. [ 86.783749] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/04/30 10:05:50 executing program 2: mkdir(&(0x7f000091a000)='./file0\x00', 0x0) mount(&(0x7f00007a3ff8)='./file0\x00', &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, &(0x7f0000c81ffe)) unshare(0x400) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000012ff8)='./file0\x00', 0x0, 0x0) fchmod(r0, 0x0) 2018/04/30 10:05:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x1f, 0x1, {0x1, 0x0, 0x5, 0x3, 0x7fff}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:50 executing program 7: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000540)="bfd8d2115ce928f01120caa1333580edf5d5818edbbdfcc44047ddca047dbd69b943f612957f43cfd4f2af74d2ae4739631ef25b1d0de28df61688033e7e10ed0067", 0x42, 0x0) socketpair(0x0, 0x5, 0x80000001, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000280)=""/12) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f0000000a80)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f0000000500)="01", 0x1, r3) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, &(0x7f0000000580), 0x0, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r4}, &(0x7f0000a53ffb)=""/5, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={'ghash\x00'}}) [ 86.827776] netlink: 'syz-executor6': attribute type 6 has an invalid length. 2018/04/30 10:05:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffffd, 0x3) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) read(r0, &(0x7f0000000140)=""/234, 0xea) 2018/04/30 10:05:51 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000020000)={0xaa}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) setresuid(r1, r2, r3) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000004fe8)={0xaa}) userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000022000)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x4a80, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0xd01, 0x70bd25, 0x25dfdbfb, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8000) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x201) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000fe0)={{&(0x7f0000005000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000004000/0x1000)=nil, 0x1000}, 0x1}) 2018/04/30 10:05:51 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x800, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000002c0)=r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x800) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockname(r2, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x20000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000000440)=0xe8) connect$can_bcm(r0, &(0x7f0000000480)={0x1d, r4}, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = shmget$private(0x0, 0x3000, 0x54000001, &(0x7f0000541000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000300), &(0x7f00000004c0)=0x4) 2018/04/30 10:05:51 executing program 6: syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000200)) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2018/04/30 10:05:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:51 executing program 2: r0 = socket$inet(0x10, 0x1, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001c0003fd6d0000360000000007dd0700060000001f5f08c90a000200000073730beeffff005867855e7fa5", 0x2f}], 0x1}, 0x0) 2018/04/30 10:05:51 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x16907e, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0xfffffeb7) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe828, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x6, 0x80000001}) ioctl$TCXONC(r0, 0x540a, 0x7fff) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) 2018/04/30 10:05:51 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40100, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = inotify_init1(0x0) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x20010, r1, 0x0) inotify_add_watch(r1, &(0x7f0000000200)='./control/file0\x00', 0x101) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfec, 0x10000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x1, r2}) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0xb, 0x1, "051bcac3ef506a9f70afcde7e0a1e95199c7e379f731a09a9539627f6eb86da1fdae29d4bd428ac1cc1a2bd9400d541e16a532f6546ef58fc1dbb59b7e98702b", "aa542f31c750c9d08d1bf3355e5400a1aad084b32374e4fbea69faab9831d8fb", [0xe7, 0x100]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x100000001, 0xc, 0x9d, 0x3f, 0x0}, &(0x7f0000000280)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000340)=@in={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000380)="3bde06ebfbce80768a70b3da60f687da064c304ce58a99c0ecddac2537d9e93a324b9e0a7db1788d5aef18a8146902ad836a721e4918ff15564e0f44387c2412e53076086491a50efcc77f6c99c084678980091639cf96a3a30d00faceaa0df98044c3778c164b30f0aebdbe454087f69db39b6abddf08fdd82c0379234c8ff09fe3d884a3e2d4ea8b7d34f00e690fca131e406e099f2ab53b3315b858f230801f82eba20eb2c782c31a20e9693aef56815960a34d06df45a226c10ab0aebf6e0f07", 0xc2}, {&(0x7f0000000480)="b22bebd427352ef38503460c6e95a2aeb9e35520d248336abdb1e5d4fca86f1a5afcb297671846b53153b762648543248a90770a91137ebf756622d114cfb409f94a19a5bd244d83f32199118f38f405f71fda230cd9e4c18dfdd952efa71ec21d73e98b748569a4a1d75032d4def952d45fadc30b809a8eb667b16b50a486f2c9733b4d44c1045ea5328478bdca598a47c3473e314460420720f13c4c76eae802ea1ee30b670d87bdad96f91e82cf6882db34bc493e90ca309bf1298e5a2da702b520a26d9805797a3734d37dfa30f2669421c729edc1ec60", 0xd9}, {&(0x7f0000000580)="e2f5f16862207e0b6b033455366797e541e5085de0cb9aa9f08f0bf1f11fcd47551e58185ceae7489836ce2df1dc494666a2637983a882eca519c7d9f793a0497d6c3bb6f03fa73b0f3e59008b06036ee851e64980e42d97f87133f7bed76da93783fa7e2bed2b00bc772dce9dbe09c08fef5612b4b8425aa47e826f0c2819bfa17f49bc780668507985f2e372327efd97580f568242dcdffb3cf278970165840759720daaa41dfb32095302b4bcc0294e17de1dff05c52d1c143aca2b57bef5c056c3b55558c739d2afe51fc0398efaf8887cc2d0739caa0ac0b78c4561a6e7c845bd8d4c19fb698fac61e7a43333487594007976c002ca77f07cdc3ef69f4a1a04f30294840ca21e8fa9595bace43c3f63fe08a232b721af79042e24e174916585a87fe9f716ca9a9f4cc93731a7c3e408bac2d53bf2e521c43947513e6c3ae5497be81d667d6c77234eb7e761a26b5d9cadaac090695c76435312597e37848e6a3c895733acb05b13911d61f9c7c42a90e39dcc31cd71a2e339387f4c7d77cf968b2fc5e0a31782d9ac75f50f6f252e3722f8755b5c8923c1b95ca0241752fa3fc82ab07ff474471382a7aaeab8c8e98d9d96983a1b288c468713781bdf923e1ecce716491f6aeb4062bebe4cf0cf84f84bc8ad7433eb46ac93a6adbd12e0ea9fa73fdf435d271f902a5c2e1cb1d9bba73f0f61acc7be740f46f09d0be59f99191af343e9fb500f38f4db82707b1707e45e7e4a58cc4bd463f0eb607b9e2088b64de70b8d509a2d16878becd2776eafe7551101c52bd313d82f17fad223d0523f3661c58a5b9452b9cab2c2887240b7e07a6d4fb188449664e43a17bc1785604f0510cb3f9bd460ab998a79f163786a96c71c54f1dc9d3f6605823c2f401ce383a94087b37966a770102a15c992e41a33100fd747cc493149b2a4099659ed9269ee13371d976cc77dc24562a493ffa4e089490fde17ede57b0b417f1893f04be30cc884c43bd7a0ba1525d181db6e829431819f59a4c3e96db06fe7d70c924fceb4c4cf16c4ac71388f06d92bbba939faf62a81bc2358631208c15d93a1b9322db4eab37fa8f9c7c811fbac5e3534b677371af8081717654a031f3240653b6ecb9ab3d612929efab982b025ee7696a905781e5ba7385b5be5a3cced92b940b46d74a12bfc2fba7f75bfd44b2d1b986553b8ad21c855d285ce9608a962d28d45abe20ff15b54a6d43fbd3fe7fcf956e85f57a74282614b4d64d9bd6bee82c8fe1316b1136abc773c8c303cb4e3f325259d467e7b79999a2be1b862698203772d961c2e7555b4446c7f019a05ab01b6894014aea3a0790daf1b8f1bc39928216ae069e17dbb8e720076986c3a46dcbd812f80d8f95235ddbad9f394714ff9ab050dc4f7614371279d95e3a57e56fd3aca71c62a1f2b9fe76d2a94302bf07eb5e90224a6aa76306b6ce6b9b3ab165c8b46cfc44d25cea835404fdb89168cf07452825f4e6318730257c709c16c230fea33b99448270afdd84a8d602f6e38ce613650445861b9cf58eb8541d1e89e6b75e7f37cd64ef2bba3cac6655de030ccb5b27f46fc961c18650b79aa19792479da71a3292d67bda62809c42b1dba861d820c35476235921c8e61d5efc68fe35d32af532417773f3dd04f6ca32a0fd7b445645bfe0b09d70eeb54f5937bebdbc3bb57a8036bdffd9a4aa850ba19561c3062058e50dfed3f75d9b848a6090d261292b832fdbdd25a59ced905f9d59b7b63bf412a6f088c73b8dd4ecb04085e043313df161d9c3e2e8da2714f39ec3bd7448fa4b884fd48b6976764306ff7d5bef02296724c3384c16415e6772739cb3e07a76e5298491160a648ef5575ac0bf2fb73098404ffa708db5c6f0736f09879b65fb8e87d635eecb66e11da94395b2ae1085b2c7bc6148512336af4479f658a589ea29cde3055f6ec836cdbc212bb1664832ce99a3f04ad347daf0e99dc59df5fe8a60c56003ffa5ca1e18c75500b311cc6878553a30a6ded787304a1dd584924119f24f54f14a6fabd450f40ee572b7019991d0820d35ea993baeafe3cddbe6908663ab7f5c734a46e896690a215507318c15d3692614e8ac33d920611f78fee10a5cee311288fd1955a0942aeb98ea1885c87a8ea82250ee3be062e6d8a617b61a9fb4492f1f372f92272ea3f973c8ecdcfb867289ec1c44683f44c3290fde05b030053c9ef1333648c7fe46280a8fc88d6ef2b919c473e6121e2e9e6fb049d0180cd7b6542182f78f152acb54795b480d07f139d8ffed42499a60bbf2adadfcb0a7fd3253d45f07e1924a7f3b5c1159e6e67e903fffd2b2cd34765d89fac8ab7058c38fd5778b08b45b8cf060069c993a23a547e0a3dd3a72f42bce488da925317ccdeb55cd9c5d9feb4d58a7bc4be0c051cfa4342d04ac484ab6d211f24e02399df199f3decc3b50d640378615798dbab90681fb36e5cae33b4844a2833d2804e09bf6b257eddeb982d5896f554c19e64cae65b50665f2001fe3351866ed405e45b92b2c2901062d9528119494e1cd309ad67248f8b3e1b4adc8b405cc89f935c1f975467149b7d8f2afd5959a290988d01be262348e10c6a865580dee3673db246f8b80454248c2d26eb48ea2f187d179d69ba93cfbaa0c82b3fe88d8c255839557c5b5426663954089de07d1afc763d57b258e6a15bd7f6415d7332bd6984f106b1fb63a6451a8248f470cb9a1f943b098bdf0633d420937ca9687fb6c8827c1f9eb26bc0ace481c37b180e6ae2ed809392f33b6e0c2fce45533b14d36261a8e34d503a2f54b6a046be293784a70d0d331e1e4d716a73c3a7415d57c03f3ee70190a81a0f0f3e3aa905907c45fa5906a2accad913f650ef390ab1df196661c25a1afa014b23a53042ec8b7cf6886d23ec7c66116b24ca4dd78f5fd7b256830ec0a22e5834f9c782da7fa190d0e160f193b2f9a3f2d7d90f953cf5e947b336677113e6b5f4dd3b15ac340f0f7f6cc4c45b317add1338e3935b9376a96690c2785c305bad06c9dd13b36ad7251b59f411a07d1b1d196dea2da13b2ede5e7500769120a16b1a06e757dba3de1b2e4540741d974d42a10867fd6b2ef075699ba062b76fcef835acc6734031f1fd343799018fbd2db13fe5458b8c82a5f2ee35ed6d53b8cf382ced2653763909fd2a72d0c892e64c4d655c27fe051f5dd6c23cad9945317696fdfdaf2c92ad41c72154e1793b809ae5edb63e80f78d8d6a0e981226e45809a39eedf405c5c386759d266b7dbd9e5dcb4c0fa7509d630caf5d19224c3d8cb953d421312f504ff0b66f8d011376e0569cb5e22d7c0625a8d463512f6ab0fed87780dd6f07682b3149abe618014dcc634d1515df3a49feba7ee3855020570df30aee7512351474dcc4c63a996fdf80c0e6eb2114ba9ef3c69fc4afb614a9f4e52fb896fc142bfa94d16ef7030235b744e94c27716ead5b81c2836cf8866cd59ca2672d358de8b4191f8de6b33ecb71039eb3d675f1b228be7d228c70ee7eeb12531779394e286c00c0ef6473451fab9f719303e367b1e96bc766af64d7798e49f39380de6ff276eaf7f55677b7242437aa6b1d912bd6fa2df88fa3d00117eeeb5b91d23802fb0f9bf74dfc18a5b8d89377b0cebb3a5901d85ad8ffce4ecb0dd88c1f02afee0ec69b90576a27566b5bd92bbd48e4d970ada7b1f6ae7503a41efa66acf41dd68296a1edcebd57d2167ad8ec6ed1cda9111a0b4baf0ca8721b48ceaf70ba452226d47bb10651a83d9cbe1e5f2eb9c3e9c5744b8f1a4a485a120ed9f4e0b3a3ee394084978024a049c7a298d70792a6925020e4dc84a55e74151b6d38c7883d1da2bc6a012e473153b8e6b2b0da4ac091215f5d80af4f5e0f6e261f096790e9285c894ddad7179e106c99082bc001a7da8a564b5e36efdb0465c116ba777b5bbe0b90049a0ca724816fc7d0ebfbfb7e4a9ee2ec539396b82e27f21d6d563190d15dc7f8612f29a460be449f2b40d75dc584a101892d3b696c5d8810bf65d722317363fe03cca9c76134175a3de84601b50d6b9c5dcc04036c88e2f2d7296d747787b175c805d727b0833e04e71deb7414630f01b086e0e33c2b201e77d963d6936d988fa9711a8a651078141abe180be3853383d8cb299de5c95612f38060e81339b52abb1d1c5dbf3b69aa8fd70d30aa14e115e7e8b08f51489f1918b577990fbe816a8fc29da6ac417968834da7c3861c5d3a4e867f678860abf1a125ec80d505fe2324ba49bf3e902e0d0a2b7b4a881c2329128a8d2b470551c9c1c1bd16d2d51f28ba5539f210bba9ab63e1e8e9091a8d528706042e90560b693819318967feb801793946d584a02a91d043cc2343fa1c451beea017224bd097b7a47a2686328561f0eda0808917fdf9a3c3483fd31adf2a65b3318041ef7e0beebec7b6f32cf86392b444bc2891bf8c5df5ba994a71b4aa046cd6d83e9f6f9a96ba55ed7024fe074fac9f869b14be98cf45949d309446f268a840695573e905331d6e071aaa20c3db43f27f0940a381cf3b643958c1e1662069921f02de35cf5783f4e4b240b6cfe3a54083a6cc208b87e98220ab29c9cd199c6b0fc2f50f28d93e93c9ea5a970e419f2ebc04477e0b1f5ae8d6454a518e3e6e03a3d24c6a23edbece6a84c8a1baaa372ad6f3e99d29d053684f66f2b9fbac5fb4ae072c29e273ec1e068bc5858e81cf3757e67709bc4383dac2abc65c38b1c9985644abbf34f8612cf47fcc48f71c328db184bc53fb58b94b55b0dd7de398e0c8a4e64a2eb7701e1f074a631f79370cd7b2ef08c06906ea3c1154d6184bf7296d73e31bae2de38e868cf6126a16da2d103697823f9ada6e171b72122587358b160be423247efda667c61193934abf1170a29d6dce26ee7a1e231486477e90df465e07ec337baa3db0dcc00a36a96cf89043a341e21dec42f80947c2426656c4887caec6eb9765eac0168e43b9733f3426d1203b092ae7f249774e1dde6fd96a3d14865a59728b8042fc10fb740cab5accc2de3bf7f9fafbef787e66dd89a35bc67c1f9203b6de47ec770de85c48be4a0660ef8195ac301aafa422e800d4140037c0b89268aae13004b0c7a9e980f2fa89d6e773b8ca5f74abb511a3f65a81aa5ed4b7d68615bd15cf1e2acf053739d2d3d96090f6929859082822d8b6a77f3b3a6809fb71f8833773a3100cd892853dfef1130dac7e70b0b2c986135785057a453381681af63f55949e4df7741675d50c9f23e11dc84146e53be1f0bef9fdf092b1921b78bce5b53012500cead932d49c6fefc778907165d6fa4e75b43b1542d1cfe212db79d74230682d46c99213f54a24916d5ebadcfa88f0abd536211b809d7c4409413c4755f964216fe1b9b2cbea47552adc29adf0b99abef16295763d79cea1140a4e7deedfa1b93535c12ee3de6c493f1e8b9f616897a1d7b576e42959c956ffa96eeac3e399ffb9f7427343bd3b08379d8804ca0749fa193728eff69d5b225196a6892ddf307eb25da091ac8151be54ff566826653510e4cbb297ee80da058a72697fb75f94eda7673776b79321df13b7b57c5df91e6a6c45895c1d94429dd342a5e09da53296cf0a74b8922ccaf0d56473af8aaa457bcbdb0cf73e79f3ea51988ee7604d309f006af506d5a381ba52857fa721c785e86858e1039f487f8a9df45c1ff7f1cd0db88c8e692679685121acb6e7ef5da27b52cefe1d2a012e48b6eb5c6044c09a843f1ff5338c223be912302fb766790eea68ee7199f929f1", 0x1000}, {&(0x7f0000001580)="a587665ecc7aa4f59ace8d07801c108331f79175f72663fc9b8b86b6608d3334d683766077f7db5a4af5ab0bfb79055f299061343a32b7de29d0adb157439561a9280847c717456e25e282bcb87c97194b90a178a65e965b3b00fb5828a0e4c20add9e559e731d6d2c8afc9e4f705b9a36a2832f5c827dee7c7c37ad784cb347bd99e6800dc1c854", 0x88}], 0x4, &(0x7f0000001680)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0xd8b3, 0x203, 0x100000001, 0x5, 0x0, 0x800, 0xae, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0x60, 0x80}, 0x20044880) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)={r3, 0xaed5}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0xc5, 0x4, 0x6, 0x5, 0x8b1, 0x5, 0x7, 0x8, 0x20de0934, 0x6, 0x1000}, 0xb) 2018/04/30 10:05:51 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:51 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) unshare(0x40600) close(r0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)}, 0x10) recvmsg(r0, &(0x7f0000004580)={&(0x7f0000004240)=@ll, 0x80, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=""/171, 0xab}, 0x0) 2018/04/30 10:05:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xffffffffffffff29, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}]}, &(0x7f0000000100)=0x10) 2018/04/30 10:05:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='io.max\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x5e, 0x100) 2018/04/30 10:05:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4101, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x9, 0x2, 0xffffffff}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="000000000000000373005eaf1af7d1f5ebefafb7083568646292c2afcd7ce872587e077e4c792344702356bc3b04c126b68cd1dddc29ad72e0b54fdfc58b6547d2f0e3a997d1bdddd4099f40c2378d58b7636122eedd076ed5fa525b5298b9ba86e15d2767001ba37803672b8c1fe2fda4fd59ce84345cde") getdents64(r1, &(0x7f0000000000)=""/115, 0x62) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) getdents(r1, &(0x7f0000000200)=""/407, 0x197) 2018/04/30 10:05:51 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x20, 0x80001) syz_emit_ethernet(0xe, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@generic={0x4305}}}, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 2018/04/30 10:05:51 executing program 5: memfd_create(&(0x7f0000000240)='\'', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x8010000040102) r1 = dup2(r0, r0) write$sndseq(r0, &(0x7f0000000140)=[{0xfff, 0x0, 0x0, 0x0, @tick, {0x0, 0xff}, {}, @ext}], 0x30) sendfile(r1, r1, &(0x7f0000000180), 0x7ffffffd) 2018/04/30 10:05:51 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:51 executing program 6: r0 = socket$inet6(0xa, 0x400000002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x5, @empty, 0x3}, 0x5) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = getegid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000200)=0xe8) r5 = getegid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)=0x0) r7 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x2, 0xc0) ioctl$BLKRRPART(r7, 0x125f, 0x0) r8 = gettid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x3, r2, r3, r4, r5, 0x108, 0x6}, 0x6, 0x2, 0x10001, 0x9, r6, r8, 0x1f}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r9, 0x2275, &(0x7f0000000340)=0x3) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f000079f000)={0x2, 0x4e22, @rand_addr=0x7fffffff}, 0xfffffffffffffe84) 2018/04/30 10:05:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x84) 2018/04/30 10:05:52 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) getgroups(0x5, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setfsgid(r1) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x565cfcf3, 0x4a001) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000040)) eventfd2(0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000752000)) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x4}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockname$packet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast1, @remote}, &(0x7f0000000400)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) getpeername$packet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x14) getpeername$packet(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000740)=0x14) accept$packet(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000800)={@loopback, 0x0}, &(0x7f0000000840)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000880)={0x0, @empty, @local}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) accept4$packet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000980)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000e00)={&(0x7f00000009c0)={0x420, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {0x2}, [{{0x8, 0x1, r5}, {0xb4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1d4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x24, 0x4, [{0x8, 0x8, 0x0, 0x5}, {0x2, 0x9, 0x2, 0xff}, {0x3c, 0x6, 0x63a, 0xffff}, {0x8, 0x2, 0x86, 0x80}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xec, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x74ca}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x20}}}]}}]}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="700000009e870b6898c88c348f5ef52e9d50adfa0dc358db32004af9e2631f33cf2443d5eefa054997ea76f5a6363d392296e8303391e0ceef7c5da0e3dfd8a202bdca0431174282287be7a37ea0bf173b5dd5bea9328ecce0b24856275cbd1b66b48380b165d67f9028c619ccde00000000000000000000000000000000000000000000"], &(0x7f00000000c0)=0x78) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r16, 0x9}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000240)={@host=0x2}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000140)={r3}) 2018/04/30 10:05:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000004000)='map_files\x00') getdents64(r0, &(0x7f0000000140)=""/32, 0x34b) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e22, @rand_addr=0x7}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x60, {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 'veth0\x00'}) bind$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x1200) getresuid(&(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)) getdents64(r0, &(0x7f0000000180)=""/77, 0x54) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x80000001) accept4$bt_l2cap(r0, 0x0, &(0x7f00000000c0), 0x800) 2018/04/30 10:05:52 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000740)='net/ip6_tables_matches\x00') ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000a40)={0x6, 0xbef, 0x10000, 0x4, 0x0, 0xf800000000000000, 0x9, 0x3, 0x7, 0x5}) r1 = accept4$bt_l2cap(r0, &(0x7f0000000700), &(0x7f00000001c0)=0xe, 0x80000) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000200)="783ee55666ce0a3df20cb0e420ecb8f2a5b3703711b6c9a62380625981386dbb8a299c970dc58d7127ea4b10ca05e35f8ae86b238c1af1419e4395756830", 0x3e}], 0x1) preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000180)}, {&(0x7f0000000780)=""/173, 0xad}, {&(0x7f0000000840)=""/130, 0x82}, {&(0x7f0000000900)=""/31, 0x1f}, {&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000a40)}], 0x7, 0x0) perf_event_open(&(0x7f0000940000)={0xfffffffffffffffe, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp, 0x0, 0x0, 0x800, 0x7, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1e, &(0x7f0000000240)="591aef5930b0115ed6632eebfd0939c1de256c2d8eaf81d1daf1fa91eeb37eff5023cc117b667549873f83469c70e65b985ca29897dc9b97f8ad6d718b", 0x3d) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x0, 0x2000) ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000140)={'ip6gretap0\x00', @ifru_settings={0x1f, 0xf2, @sync=&(0x7f0000000100)={0x0, 0x2, 0x3}}}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) setrlimit(0x7, &(0x7f0000becff0)={0x16, 0x88}) socketpair$unix(0x1, 0x200000002, 0x0, &(0x7f00007d9ff8)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180)=0x4, 0x4) 2018/04/30 10:05:52 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e22, 0x7, @empty, 0xe6}], 0x38) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) 2018/04/30 10:05:52 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x2, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f0000efff6a)=ANY=[@ANYBLOB="5a000000000000000100000000000000070000000046b23250f0f6065d86a61bf2b3b3bbb98251dc96a2b12578ee5f95a9fededdbf7b3a8d3b87466f241542997458a32100000000000000000000000000000000000000000000"], 0x5a) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) 2018/04/30 10:05:52 executing program 4: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:52 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x1, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x88) preadv(r0, &(0x7f0000000440), 0x0, 0x0) 2018/04/30 10:05:52 executing program 6: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'irlan0\x00', 0xa201}) [ 88.477540] CUSE: DEVNAME unspecified 2018/04/30 10:05:52 executing program 5: unshare(0x80409fd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f000000dff8)=@file={0x1}, 0x2) [ 88.510500] CUSE: DEVNAME unspecified 2018/04/30 10:05:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xb}, 0x1c) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="63cb7c5f460869d1c5158e20234c2d808a7337f7bb8d16c0521d89570646862920094b7134f5c602e0085f2739a480992a28a3d5fca03ddb4d92988620454515fff54a4ac9d4e099b967eb15dc3b5c04492d742127f67a729cc7ac8bd112286ad2ad0f32cb66a25232168da5ca4f1425b526b57dc9f52dbf69713aad33d917cdc0549bd7d51b20c832c57e2c8663d4843e865fbca1e895e94d528799795a83db9fd247888818deae78b81024cf95217d2587a7502a5f6161464429ae2cc5332cbb17b93bd5921c2638492920233902571c5a281c4dd26e5a4d24cf7bb967bfe69480dd"], &(0x7f00000002c0)) 2018/04/30 10:05:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:52 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) set_robust_list(&(0x7f0000001440)={&(0x7f00000013c0)={&(0x7f0000001380)}, 0x0, &(0x7f0000001400)}, 0x18) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TCSBRK(r0, 0x5409, 0x100) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340), 0x0, &(0x7f0000000040)=""/81, 0x3a5}, 0x40002102) 2018/04/30 10:05:52 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000000100)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000920000)={0x0, 0xfffffffffffffffc}, &(0x7f0000d58ffc), 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 2018/04/30 10:05:52 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x4000000000000029, 0x20000000000001, &(0x7f0000000f44)=""/188, &(0x7f0000000080)=0xbc) r1 = socket(0x1, 0x8000f, 0xffffffffffffff7f) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x16, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x0, 'ovf\x00', 0x16, 0x7, 0x7d}, 0x2c) 2018/04/30 10:05:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000633000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000549ffc)=0x9d) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/4096) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x187, 0x80002) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000581fdc)={0x401}) 2018/04/30 10:05:52 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000239ff6)='/dev/cuse\x00', 0x2, 0x0) readv(r0, &(0x7f0000c6efe0)=[{&(0x7f00006c8f31)=""/207, 0xcf}], 0x1) write$fuse(r0, &(0x7f0000efff6a)=ANY=[@ANYBLOB="5a000000000000000100000000000000070000000046b23250f0f6065d86a61bf2b3b3bbb98251dc96a2b12578ee5f95a9fededdbf7b3a8d3b87466f241542997458a32100000000000000000000000000000000000000000000"], 0x5a) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7, r1}) 2018/04/30 10:05:52 executing program 5: r0 = socket$inet(0x2, 0x5, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x268, 0xffffffff, 0x0, 0xb8, 0x158, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@empty, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@ip={@multicast1=0xe0000001, @dev={0xac, 0x14}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x20) keyctl$get_security(0x11, 0x0, &(0x7f0000000440)=""/183, 0xb7) socket$inet_sctp(0x2, 0x5, 0x84) [ 88.861657] CUSE: DEVNAME unspecified 2018/04/30 10:05:53 executing program 1: mkdir(&(0x7f0000a09000)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xffffff86) 2018/04/30 10:05:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000873000)={&(0x7f0000186ff4)={0x10}, 0xc, &(0x7f0000452000)={&(0x7f0000000180)=@newneigh={0x34, 0x1c, 0x311, 0x0, 0x0, {}, [@NDA_DST_MAC={0xc, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, @NDA_LLADDR={0xc, 0x2, @random="664019e28046"}]}, 0x34}, 0x1}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffee6) fcntl$setlease(r0, 0x400, 0x0) 2018/04/30 10:05:53 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000331000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000c7ff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0xc0) umount2(&(0x7f0000000000)='./file0\x00', 0xd) close(r1) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7e0000008100000037ac6d613273b646c08eb4f4b6ae08370edd0a66d388e899d78ac72884dba2e4f9966459773b2cacd982ff22a8e6ed4ff83e99d562ec06aef298847157b37553d75f6983c5900930d6c5882b3513f9f2b5e63c867ba37692a3a11839e9c299f83d77a77d5b2257a3204467f7a6b686c4ff0000009995"], 0x40080) socket$nl_route(0x10, 0x3, 0x0) 2018/04/30 10:05:53 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) futex(&(0x7f0000000000), 0x3, 0x0, &(0x7f0000fd3ff0)={0xffff, 0x4}, &(0x7f0000000000), 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r0) 2018/04/30 10:05:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x8) r0 = socket(0x200000000018, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x32) setsockopt(r0, 0x400000000000111, 0x1, &(0x7f0000000040)="eaf40100", 0x4) 2018/04/30 10:05:53 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) write(r0, &(0x7f0000000080)="2200000018000700f40700000900071502040008dd200828060009040005009f004b", 0x22) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) 2018/04/30 10:05:53 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000aff8)={0xffffffffffffffff}) r2 = semget$private(0x0, 0x3, 0x1) semget$private(0x0, 0x3, 0x204) semctl$IPC_RMID(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) pselect6(0x406, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) r3 = request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)='$\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r3) tee(r1, r0, 0x4, 0x8) [ 89.794712] l2tp_ppp: tunl 4: set debug=1f4ea 2018/04/30 10:05:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x80000}}) 2018/04/30 10:05:53 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000aff8)={0xffffffffffffffff}) r2 = semget$private(0x0, 0x3, 0x1) semget$private(0x0, 0x3, 0x204) semctl$IPC_RMID(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) pselect6(0x406, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f00007fbfc0), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) r3 = request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)='$\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r3) tee(r1, r0, 0x4, 0x8) 2018/04/30 10:05:53 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000003ffc), &(0x7f0000012ffc)=0x4) 2018/04/30 10:05:53 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[]}, 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") 2018/04/30 10:05:53 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xe984, 0x80000) epoll_wait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x4, 0x1000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x400000) [ 89.919691] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:05:53 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) unshare(0x8000400) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x10001}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x3, 0x4) 2018/04/30 10:05:53 executing program 7: r0 = socket$inet(0x15, 0x5, 0x0) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) accept$inet(r0, 0x0, &(0x7f0000000000)) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, r1) 2018/04/30 10:05:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) write(r0, &(0x7f0000000080)="2200000018000700f40700000900071502040008dd200828060009040005009f004b", 0x22) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) 2018/04/30 10:05:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x80000}}) 2018/04/30 10:05:54 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bridge0\x00'}}, 0x1e) write(r0, &(0x7f0000000480), 0x5ea) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) flistxattr(r0, &(0x7f0000000040)=""/127, 0x7f) 2018/04/30 10:05:54 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="32859894909cc7a5608741fe48e17e01d6a3a70f882713909678e025189b09ed74304ddbd421c85a3b5028845807b14f663fdd42c24d2ae52f0e0900e0ab5487f179044786dbcbd2ba1c9c14abeaded874fa35fb3ed8a5ee52b3a1097cc5474d3c18d142e07599c4a6f06d84929aebb20cb77b9c3acfb68d97debdc422f10268812ee14cf7f9061b4a49cb2cc8d76c854d888d81181108cf", 0x98) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() setreuid(r1, r2) 2018/04/30 10:05:54 executing program 1: r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9}, 0x2c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)="087b726f63307b79732f09000000000000002f76732f73796a635f706572736883745f6d6f646500c646d6cf27d433dd7b178ef9a000f7fbf07ccee5827e944f68d6e69a77ca", 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000000)={@multicast1=0xe0000001, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) setgid(r2) 2018/04/30 10:05:54 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00005c3ff0)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}]}, &(0x7f0000f91ffc)=0xc) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20200, 0x0) getsockname$ax25(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getrusage(0x0, &(0x7f0000000100)) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000f85000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000d63000)="73597a6b618f6c65000d", 0x80000000009, 0x1000, &(0x7f00001d8000)=""/4096}, 0x48) 2018/04/30 10:05:54 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000016f000)='/dev/ppp\x00', 0x1, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x4, 0x4) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000521000)=""/246) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100)) sendfile(r0, r1, 0x0, 0x7) 2018/04/30 10:05:54 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000556ff0)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x40600) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x5) 2018/04/30 10:05:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x2c) unshare(0x40600) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xe, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x27}, @generic={0x10001, 0x8, 0x1, 0x9}, @exit={0x95}, @call={0x85, 0x0, 0x0, 0x21}, @ldst={0x3, 0x0, 0x0, 0xf, 0x4, 0xffffffff}, @jmp={0x5, 0x20, 0x3, 0x2, 0x5, 0xfffffffe}, @map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000080)='GPL\x00', 0x6, 0x99, &(0x7f00000000c0)=""/153, 0x41100, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x1, 0x2, &(0x7f0000fedf90)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000919ff6)='syzkaller\x00', 0x7ff, 0xe1, &(0x7f0000440f63)=""/225}, 0x48) [ 90.306996] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:05:54 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bridge0\x00'}}, 0x1e) write(r0, &(0x7f0000000480), 0x5ea) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) flistxattr(r0, &(0x7f0000000040)=""/127, 0x7f) 2018/04/30 10:05:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x7, 0x0, "70739a0ebe4ac9fea0d1f41b412878a5b6b09a357732eb1beaa5f7ffd5345333d326060f0cdeef303977eddb549970cadb75a15db7efaa43e8c3c79d29f15979133dd10315a3c2f16c7dd02273c10768"}, 0xd8) sendto$inet(0xffffffffffffffff, &(0x7f0000a63fff), 0x0, 0x20020004, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f000074847c)=[{0x8}, {}, {}, {}, {}, {}, {}, {}], 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x0, 0x1000010001, 0xea4}, 0x14) write(0xffffffffffffffff, &(0x7f0000000000)='G', 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='!', 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="70d42c7d7d47a3304e7c3900b2cc37f6ae81ecd2079184a67c8f8509d5d6d00d62e2982177ef8a038349d347a00fe0dcbef3d8fb4d83e54148e95e8749c78605de222d6c3406", 0x46, 0x4, &(0x7f00000002c0)={0xa, 0x4e20, 0x40, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x9, 0x0, "82aa2474c918f81ab460cb8e34042491d086c2226e7267e0f337db4ac54fd3b2c616d6a46f3ab22c4c9ade49e6fe815e6b0fd817e176ff8c84c0814c531570d36ba3d37a1d5bcec31b537f2fed6299d2"}, 0xd8) r1 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xffff, 0x100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000380)={r2, 0x3}) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000eb9fff), 0x0, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) 2018/04/30 10:05:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x80000}}) 2018/04/30 10:05:54 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x80000}}) 2018/04/30 10:05:54 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00005c3ff0)={0x0, 0x1c, &(0x7f0000519fa8)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}]}, &(0x7f0000f91ffc)=0xc) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20200, 0x0) getsockname$ax25(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getrusage(0x0, &(0x7f0000000100)) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000f85000)={0x1, 0x5, &(0x7f0000519fa8)=@framed={{0x18}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x2}], {0x95}}, &(0x7f0000d63000)="73597a6b618f6c65000d", 0x80000000009, 0x1000, &(0x7f00001d8000)=""/4096}, 0x48) 2018/04/30 10:05:54 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) read(r1, &(0x7f0000000140)=""/187, 0xbb) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xb22, 0x400400) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/122) [ 90.562660] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:05:54 executing program 5: semop(0x0, &(0x7f000002efe2), 0x0) semop(0x0, &(0x7f0000000000), 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000140)=""/246) 2018/04/30 10:05:54 executing program 7: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) unshare(0x400) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1}, 0x20) getdents(r1, &(0x7f00000000c0)=""/123, 0x7b) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000001c0)) [ 90.661785] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:05:54 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bridge0\x00'}}, 0x1e) write(r0, &(0x7f0000000480), 0x5ea) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) flistxattr(r0, &(0x7f0000000040)=""/127, 0x7f) 2018/04/30 10:05:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:54 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x80000}}) 2018/04/30 10:05:54 executing program 1: unshare(0x40600) accept(0xffffffffffffff9c, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) 2018/04/30 10:05:54 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x8000400) ioctl$TIOCSBRK(r0, 0x40044591) r1 = dup(r0) ioctl$TIOCCONS(r1, 0x541d) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000000)) 2018/04/30 10:05:54 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) pause() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x800000, 0xffffffffffffff4c, 0xff}) getsockname$inet(r0, &(0x7f0000000000)={0x0, 0x0, @multicast2}, &(0x7f0000000040)=0x10) shutdown(r0, 0x1000000000000000) 2018/04/30 10:05:54 executing program 7: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000480)=0x0) io_submit(r2, 0x4, &(0x7f0000000880)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x8000000000000, r1, &(0x7f0000000000)="743f39400fdbc5999336fcb985b8ceff2a22ea4be209d06e2831ab5009ecdbf20ddec7349b3ff7b074c8ce64bdbccdb0f9e73ac23db78908e582fe576c2ee50b0d4d9f17bd40db401224dcaa5deff71a2f011f6b", 0x54, 0x2, 0x0, 0x1, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000500)="d4874ae496c4c75c5e6604f48e08192640e6b5b98e5e97513625ead61f4caa1dbef5ced86d5c0184a5055b077bda248349d8c2ce381e2337eb62ce83303004b3cbcb7d71685782409c47e4cf8f48790252d804b5feb9a95946fabce84a3a71dbe11bf94c632991cb590d41dcbe534f4038d53cad71bbbca6c09de019f1019f0af4acad9aeabe889823ea4571a63511c6da6cebe8f7cb66bbd4ccf382414b8a31b39e82573b18e1fc", 0xa8, 0x7, 0x0, 0x1, r1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x11f, r0, &(0x7f0000000600)="5ce4b5fc8377380aceb00725294243b3d08bd9c2ee9b94fef01c3afc398e6f9093d022c333a63634aed64290593b50052dca365779be45597f0f367ce93b78a57954c3e698f4295380400d986d2446e06e67351aba9a2fb6fce6eee7e150dcee1eab89293b40dc61920236ce2861b31f3d2193fc878871a89e9ab2be45f34778eea0face8bd8e25eacda19ef4f828a16307ccd1d93c9bd4daa1a1e31c7b75c327c6fb9815169af862ab9b1b1a7d8466f13d1f2a4201c858cf819992a83ced2fcace992c1f6217462d716aec63fe88482520d4a7f", 0xd4, 0x7fff, 0x0, 0x0, r1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000740)="5ad4eeca7967e5ae6ba6e3a3380fc2f9d71f745af8d2af87855e0afdb64e731cb3953bf0ff5c3c9a2958b3adaf49b69b78c6f5ad6b783531e87330557a0b15540924c9cddb49ec74355fd1c08d73620bbe2e5e758661669937665dd76a182833281a422228a354c1d94d677bd0d624ad4ec5f1658d87e97f3bc44a8606a5212b1d00428734872a38f6919322a268a0f69f97d17877b468177e7699550ceaf37394218aef23cb1681b6e6f7bfafb317dfe97d34705b26aceffe3460d4ac8f5e0892576746d9cdfb866e7bf8921e0ea95cec756ed86d7e459fce65bbe7d248a706bd5f7a6dc2f1fad5", 0xe8, 0x3ff, 0x0, 0x0, r1}]) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="060000008000", 0x6}]) write$binfmt_aout(r0, &(0x7f0000000100)={{0x108, 0x0, 0x10000, 0x2cc, 0x3cf, 0x15, 0x176, 0x40f}, "77e462435d313db8e0c4edd65c17400528f4e0dc2f72c3cc220218a5fec5f9bae95f3978d6722db02d0d40a412bf1ff115901dd4c636301a74ee2e5c69d078d7d7faf874745fbf", [[], [], []]}, 0x367) 2018/04/30 10:05:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) fcntl$getflags(r0, 0x408) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) 2018/04/30 10:05:55 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xef) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000013ffc), 0x4) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x80000000, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) bind$packet(r1, &(0x7f0000000180)={0x11, 0xf7, r2, 0x1, 0x8832, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) [ 90.981910] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:05:55 executing program 2: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) mkdir(&(0x7f0000914ff0)='./file0/control\x00', 0x0) mkdir(&(0x7f0000000200)='./file0/control/file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/control/file0/file0\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400000, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000080)=@ipx, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000400)=""/150, 0x96}], 0x4, &(0x7f0000000500)=""/179, 0xb3, 0x4}, 0x1) umount2(&(0x7f0000117000)='./file0\x00', 0x0) 2018/04/30 10:05:55 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)="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", 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa0000810006000800450000140000000000679078ac14ff5248ca51aaffffffff21009078000000004500007f000000000000000000000000ac140000"], 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x1, 0x8, 0x65, 0x80, 0x3f, 0x100000000, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = semget(0x3, 0x1, 0x40) semop(r1, &(0x7f0000000000)=[{0x7, 0x2, 0x1000}, {0x0, 0x1, 0x1800}, {0x4, 0x1, 0x1000}, {0x7, 0x8}], 0x4) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) 2018/04/30 10:05:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:55 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00007f2000)='/dev/snd/timer\x00', 0x0, 0x0) unshare(0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}}) epoll_pwait(r0, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x4, 0xb, &(0x7f0000000800)={0xeb9}, 0x8) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) r4 = syz_open_dev$adsp(&(0x7f0000000780)='/dev/adsp#\x00', 0x6, 0x4800) futimesat(r0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)={{0x77359400}, {r2, r3/1000+30000}}) getsockopt$netlink(r4, 0x10e, 0x1, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000) recvmsg(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000140)=""/11, 0xb}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/83, 0x53}, {&(0x7f0000000480)=""/80, 0x50}], 0x8, &(0x7f0000000580)=""/226, 0xe2, 0xdff7}, 0x10040) 2018/04/30 10:05:55 executing program 7: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x8) bind$unix(r1, &(0x7f000000d000)=@abs={0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') sendfile(r1, r2, &(0x7f000097d000)=0x10000000, 0xff) ustat(0x4, &(0x7f0000000040)) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x4, 0x4, 0x2, 0x0, 0x9, 0x5}) 2018/04/30 10:05:55 executing program 0: r0 = perf_event_open(&(0x7f0000012000)={0x2, 0x78, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\'securityloloselinuxlo,#}&-system\x00') pause() 2018/04/30 10:05:56 executing program 1: shmget(0xffffffffffffffff, 0x13000, 0x0, &(0x7f0000ab6000/0x13000)=nil) r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f000029a000/0x3000)=nil) unshare(0x200fd) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)) 2018/04/30 10:05:56 executing program 2: mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) futex(&(0x7f00000000c0), 0x87, 0x0, &(0x7f0000191000), &(0x7f0000000000), 0x1) 2018/04/30 10:05:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000006000)='/dev/snd/seq\x00', 0x0, 0x8400000000102) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f0000000000)=[{0x1f, 0x1, 0x0, 0x0, @time, {}, {}, @time}], 0x30) 2018/04/30 10:05:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:56 executing program 7: ioperm(0x0, 0x9, 0x0) get_thread_area(&(0x7f0000001100)={0x7f, 0x20000000, 0xffffffff, 0x1, 0x100, 0x7, 0x8, 0x2590, 0x1, 0x8001}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') readv(r0, &(0x7f0000001140)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)=""/175) 2018/04/30 10:05:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) close(r1) r2 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0xff, 0x8}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000005c0)={r3, 0x2}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa}, 0x1c) sendto$inet6(r4, &(0x7f00002a0b14)="f6", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), 0x7c862990b8752969) r5 = accept$netrom(r0, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000280)=0x1e) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x200000, 0x0) getsockname$ax25(r6, &(0x7f0000000200), &(0x7f0000000240)=0x10) listen$netrom(r5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) readv(r7, &(0x7f0000001680)=[{&(0x7f0000000580)=""/49, 0x31}], 0x1) r8 = socket$inet(0x2, 0x0, 0xffffffffffffbbe0) accept4(r5, &(0x7f00000004c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000540)=0x80, 0x80800) read(r7, &(0x7f0000000040)=""/25, 0x19) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000680)={0x0, 0x80000, r8}) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@remote, @in6=@dev}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) gettid() sendmsg$nl_generic(r7, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000300)=ANY=[@ANYBLOB="d9291517a54838f2ebc8a38102dec95a72c84fe9d51238de04fd974c90c97f"], 0x1}, 0x1}, 0x0) 2018/04/30 10:05:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:56 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) pause() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x800000, 0xffffffffffffff4c, 0xff}) getsockname$inet(r0, &(0x7f0000000000)={0x0, 0x0, @multicast2}, &(0x7f0000000040)=0x10) shutdown(r0, 0x1000000000000000) 2018/04/30 10:05:56 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x100ffd, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000280)=0xbffffffffffffe00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1000) clone(0x1120000, &(0x7f0000000000)="14536a16927fa42f825057153d427d26c1aa47e0ede95e72f8bf5083d7", &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000001c0)="ede2f7e4d58e32a2a8db6036b3d66e9db7709d417a205faf9073faffab24ea43706dabf7e75a281a5c84a22bb4ccd225ab2b3e1a0c88457b660b7aa5dac7615dadeb72b60fef0edba89f7ac9c3da8a22a058ef8747a078c63709c091aa2ba462e0e0d6f6c2b523d8b3e39e947e340fc0531177c12c520d877f2cd6877b905f15") r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 2018/04/30 10:05:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000006000)='/dev/snd/seq\x00', 0x0, 0x8400000000102) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r1, &(0x7f0000000000)=[{0x1f, 0x1, 0x0, 0x0, @time, {}, {}, @time}], 0x30) 2018/04/30 10:05:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000013000)={0x1, 0x10000007a, 0xa, 0x1000000000000008}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000014000)='A', &(0x7f0000012000)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000000b000)={r0, &(0x7f0000012000), &(0x7f000000cff6)}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="aeea3d321295a2bae688c8ab8e73c36199efddc2412ec796b24aafcb1b8752b03cb3b095d53818dc522565a386fc3a22139e2433b697c3cc0ebfd3d8", &(0x7f0000000080)}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x7ff, 0x300) signalfd(r0, &(0x7f0000000100)={0x1}, 0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000002c0)={{0x4, 0x6}, 'port0\x00', 0x6a, 0x80000, 0x3, 0x9, 0x8, 0x0, 0x5, 0x0, 0x4, 0x6}) finit_module(r0, &(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$sock_SIOCOUTQ(0xffffffffffffff9c, 0x5411, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@host=0x2}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000001c0)="62e782a875ba2d0a27c201434100000000000000061dfae5468624", &(0x7f0000016f02)=""/254}, 0x18) 2018/04/30 10:05:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:56 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) exit(0x104) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xffffffffffffffff, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 'erspan0\x00'}}, 0x1e) getegid() ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 2018/04/30 10:05:56 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:56 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) [ 92.722997] FAULT_INJECTION: forcing a failure. [ 92.722997] name failslab, interval 1, probability 0, space 0, times 1 [ 92.734625] CPU: 0 PID: 7139 Comm: syz-executor4 Not tainted 4.16.0+ #87 [ 92.741502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.750903] Call Trace: [ 92.753541] dump_stack+0x185/0x1d0 [ 92.757211] should_fail+0x87b/0xab0 [ 92.761025] should_failslab+0x279/0x2a0 [ 92.765132] __kmalloc+0xc2/0x350 [ 92.768671] ? _cond_resched+0x3c/0xd0 [ 92.772592] ? snd_timer_open+0x139f/0x3b90 [ 92.776989] snd_timer_open+0x139f/0x3b90 [ 92.781195] snd_seq_timer_open+0x607/0x7d0 [ 92.785619] snd_seq_queue_timer_open+0x166/0x2e0 [ 92.790523] snd_seq_ioctl_set_queue_timer+0x423/0x560 [ 92.795899] snd_seq_ioctl+0x446/0x6f0 [ 92.799881] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 92.805374] ? snd_seq_poll+0x490/0x490 [ 92.809388] do_vfs_ioctl+0xaf0/0x2440 [ 92.813330] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 92.818734] ? __fget_light+0x6b9/0x710 [ 92.822743] ? prepare_exit_to_usermode+0x149/0x3a0 [ 92.827803] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 92.833253] SYSC_ioctl+0x1d2/0x260 [ 92.836992] SyS_ioctl+0x54/0x80 [ 92.840517] do_syscall_64+0x309/0x430 [ 92.844464] ? ioctl_file_clone+0x4f0/0x4f0 [ 92.848828] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 92.854044] RIP: 0033:0x455979 [ 92.857251] RSP: 002b:00007fa3f7681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.864993] RAX: ffffffffffffffda RBX: 00007fa3f76826d4 RCX: 0000000000455979 [ 92.872290] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 92.879583] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 92.886875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 92.894171] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000000 [ 92.901745] ALSA: seq fatal error: cannot create timer (-12) 2018/04/30 10:05:57 executing program 2: r0 = accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80000) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'lo\x00', @ifru_ivalue=0x7}) r1 = socket(0x10, 0x3, 0x2b47) ioctl$sock_ifreq(r1, 0x800000089f0, &(0x7f0000000100)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/04/30 10:05:57 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x701000, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) socket$inet6(0xa, 0x80003, 0xff) 2018/04/30 10:05:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:57 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:57 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:57 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x40033, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) 2018/04/30 10:05:57 executing program 5: r0 = epoll_create1(0x80003) r1 = dup2(r0, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x90000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0xfff, &(0x7f0000000100)=0x4) 2018/04/30 10:05:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)="4b4ab38cdb416695fd8858746143c68c490210e6f6eeb0ad2420dd6f5a7dad1c6a4dde0b", 0x24}, {&(0x7f0000000380)="0a3571c3648b398e7c29dc772f5a659fc12ab006", 0x14}], 0x2) [ 93.726732] FAULT_INJECTION: forcing a failure. [ 93.726732] name failslab, interval 1, probability 0, space 0, times 0 [ 93.738197] CPU: 0 PID: 7168 Comm: syz-executor4 Not tainted 4.16.0+ #87 [ 93.745064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.754442] Call Trace: [ 93.757073] dump_stack+0x185/0x1d0 [ 93.760750] should_fail+0x87b/0xab0 [ 93.764518] should_failslab+0x279/0x2a0 [ 93.768630] __kmalloc_track_caller+0x208/0xcb0 [ 93.773346] ? snd_timer_open+0x140c/0x3b90 [ 93.777734] kstrdup+0xd0/0x1a0 [ 93.781072] snd_timer_open+0x140c/0x3b90 [ 93.785299] snd_seq_timer_open+0x607/0x7d0 [ 93.789720] snd_seq_queue_timer_open+0x166/0x2e0 [ 93.794625] snd_seq_ioctl_set_queue_timer+0x423/0x560 [ 93.800007] snd_seq_ioctl+0x446/0x6f0 [ 93.803992] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 93.809493] ? snd_seq_poll+0x490/0x490 [ 93.813508] do_vfs_ioctl+0xaf0/0x2440 [ 93.817451] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 93.822858] ? __fget_light+0x6b9/0x710 [ 93.826874] ? prepare_exit_to_usermode+0x149/0x3a0 [ 93.831942] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 93.837403] SYSC_ioctl+0x1d2/0x260 [ 93.841150] SyS_ioctl+0x54/0x80 [ 93.844617] do_syscall_64+0x309/0x430 [ 93.848567] ? ioctl_file_clone+0x4f0/0x4f0 [ 93.852943] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 93.858161] RIP: 0033:0x455979 [ 93.861371] RSP: 002b:00007fa3f7681c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.869116] RAX: ffffffffffffffda RBX: 00007fa3f76826d4 RCX: 0000000000455979 2018/04/30 10:05:57 executing program 2: unshare(0x400) r0 = syz_open_dev$sg(&(0x7f0000b01000)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x10100) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x1, 0x0, 0x89}, 0x7, 0x6600e2fb, 'id1\x00', 'timer0\x00', 0x0, 0x8000, 0xfe, 0x6, 0x3}) r2 = accept$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000200)={@remote, 0x0}, &(0x7f00000002c0)=0x9) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000300)={@local={0xfe, 0x80, [], 0xaa}, r3}, 0x14) ioctl(r0, 0x5385, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) prctl$setptracer(0x59616d61, r4) 2018/04/30 10:05:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000fdb000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$sock_ipx_SIOCIPXCFGDATA(r1, 0x89e2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000100)=0xffffffff) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7fffffff}, 0x8) r2 = syz_open_pts(r0, 0x8000000006) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) dup2(r2, r1) acct(&(0x7f0000000000)='./file0\x00') writev(r0, &(0x7f0000003600)=[{&(0x7f0000000180)="80de8d454625f564f2b8573940e8e4efdd45c21f8a19be12b02946f2e5b65ec5cdb2f1f5fb16afc01daa30fe9dbaece198c99aa8548895ba29c9570609161f39b051e6a4bc190d31e1545c65e53ccf6a28e128", 0xffffffffffffffbf}, {&(0x7f0000000140)="ab7b5c60151a5d8dc8b1a6a9a090988aeab06c6350c735", 0x17}, {&(0x7f0000000240)="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", 0x400}, {&(0x7f0000002400)="42aa795fba4ee8e0e05439ee1bfbad0e68d3b69712428a262a41a43096e4e7a580b0528ecea83ab60ab8bbeee8abc4157436a56411e33eb9cd948a6fd03d0a71a306d8", 0xfffffdde}], 0x4) [ 93.876441] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 93.883741] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 93.891034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 93.898330] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000001 [ 93.905830] ALSA: seq fatal error: cannot create timer (-12) 2018/04/30 10:05:57 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000400000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac140000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}, 0x1}, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x50e, 0x1, 0x3, 0x4, 0x10001, 0xe16, 0x1c0000000}, &(0x7f0000000080)=0x20) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1000, 0x181002) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1756fe02000000000000000000000000"], 0x10}, 0x1}, 0x0) 2018/04/30 10:05:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x100000000, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in={0x2, 0x4e24, @rand_addr=0x7}], 0x2c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x2, 0x468, [0x0, 0x20000f00, 0x20000f30, 0x20000f60], 0x0, &(0x7f0000000000), &(0x7f0000000f00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00', 'ip6_vti0\x00', 'sit0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="ab0de8829b68", [], 0x70, 0x1a0, 0x1d0}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:etc_aliases_t:s0\x00'}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', "6772657461703000000080040900", 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xf8, 0x1a0, 0x1d8, [@limit={'limit\x00', 0x20}, @devgroup={'devgroup\x00', 0x18}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x4e0) 2018/04/30 10:05:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xad}}, 0x0, 0x1f, 0x40000}, &(0x7f00000000c0)=0x98) 2018/04/30 10:05:58 executing program 5: unshare(0x400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x100, 0x200000) lseek(r0, 0x0, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) getsockopt$inet6_tcp_int(r2, 0x6, 0x15, &(0x7f0000000040), &(0x7f0000012ffc)=0x4) [ 94.080779] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 94.126143] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' 2018/04/30 10:05:58 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) ppoll(&(0x7f0000000080)=[{r2}, {r2, 0x2038}, {r0, 0x400}, {r0, 0x400}, {r1, 0x820b}], 0x5, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x1}, 0x8) getsockopt$inet_int(r1, 0x10d, 0xc1, &(0x7f0000000180), &(0x7f0000000140)=0x4) 2018/04/30 10:05:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x100000000, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in={0x2, 0x4e24, @rand_addr=0x7}], 0x2c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x2, 0x468, [0x0, 0x20000f00, 0x20000f30, 0x20000f60], 0x0, &(0x7f0000000000), &(0x7f0000000f00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00', 'ip6_vti0\x00', 'sit0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="ab0de8829b68", [], 0x70, 0x1a0, 0x1d0}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:etc_aliases_t:s0\x00'}}}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'rose0\x00', 'rose0\x00', "6772657461703000000080040900", 'gre0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xf8, 0x1a0, 0x1d8, [@limit={'limit\x00', 0x20}, @devgroup={'devgroup\x00', 0x18}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "bed0d5d0797656507cdce4b45fef19fb37825b8db20e00de1cb84480fe46d35dd039532d20426bf508242e3749dcbe2d039be06902308c54ff5bfe77bb3442be"}}}]}, @common=@mark={'mark\x00', 0x10}}]}]}, 0x4e0) 2018/04/30 10:05:58 executing program 2: pipe2(&(0x7f0000834000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000000a000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x402000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) vmsplice(r1, &(0x7f0000101000)=[{&(0x7f0000a68000)="f0", 0x1}], 0x1, 0x0) ppoll(&(0x7f0000fb8fb0)=[{r2}], 0x1, &(0x7f0000006000)={0x0, 0x989680}, &(0x7f0000008ff8), 0x8) 2018/04/30 10:05:58 executing program 3: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:58 executing program 4 (fault-call:2 fault-nth:2): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:58 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:58 executing program 6: r0 = socket(0x10000d, 0x40000000000001, 0x0) setsockopt(r0, 0x10f, 0x0, &(0x7f0000000240), 0x0) [ 94.388652] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' 2018/04/30 10:05:58 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:58 executing program 2: pipe2(&(0x7f0000834000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000000a000)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x402000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) vmsplice(r1, &(0x7f0000101000)=[{&(0x7f0000a68000)="f0", 0x1}], 0x1, 0x0) ppoll(&(0x7f0000fb8fb0)=[{r2}], 0x1, &(0x7f0000006000)={0x0, 0x989680}, &(0x7f0000008ff8), 0x8) 2018/04/30 10:05:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:58 executing program 6: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) poll(&(0x7f0000000000)=[{r0, 0x4100}, {r0, 0x1000}, {r0, 0x4}, {r0, 0x2008}, {r0, 0x20}, {r0, 0x1000}, {r0, 0x2000}], 0x7, 0x400) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f000066cffc), 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000d66000), 0x8) 2018/04/30 10:05:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x400000005, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xfff}, 0xc) 2018/04/30 10:05:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400080, 0x0) 2018/04/30 10:05:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x8000000020013, r0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}) 2018/04/30 10:05:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f00000001c0)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000500), &(0x7f0000000540)=0x20) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x4e24, @broadcast=0xffffffff}}}, 0x88) sendto$inet(r0, &(0x7f00000000c0)="818d29a6d7b3ec21ab38bd0fd36a123bb763a134d08f770bdb2d75d8b574b15a80deca3246b5cfd6e23810a93232cf054baaa5c3c5", 0x35, 0x8000, 0x0, 0x0) 2018/04/30 10:05:58 executing program 7: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:05:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sync() setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080), 0x11) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0xcf47) 2018/04/30 10:05:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:05:59 executing program 6: socketpair(0x27, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x5c, 0x0, 0x4, 0x0, "369bed16a8e06641bf9dd5b3ce8a2cf66f583dca8734390377cebbbea4ca447c1f100c1b29079b12302603cc", 0x3800000000}, 0x200, [0x10001, 0x7fffffff, 0xa1, 0x2, 0x5, 0x5, 0x6, 0x3, 0x1, 0x3, 0x192, 0x5, 0x6, 0x3, 0x800, 0x5, 0x0, 0x7, 0x4, 0x6, 0x0, 0xa7e, 0x7ff, 0x200, 0x7fffffff, 0x1, 0x81, 0x4, 0x80000001, 0x7ff, 0x0, 0x8, 0x4, 0x3ff, 0x0, 0x5133, 0xffffffff80000000, 0x6, 0x4, 0x4, 0xffffffff, 0xca2, 0x20f, 0x81, 0x2, 0x3f, 0x100, 0x97c9, 0x9, 0x6, 0xbd9, 0x4, 0x4, 0x20, 0xff, 0x92, 0x9, 0x1ff, 0x7ff, 0x10000, 0x400, 0x5, 0x100000001, 0x20, 0x4, 0x3, 0x9, 0x1, 0xffffffffffffffe0, 0x9, 0x1f, 0x1, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x7ff, 0x3, 0x200, 0x3, 0x6, 0x4, 0x10001, 0x1000, 0x8000, 0xf, 0x5, 0x5, 0x7, 0x20, 0x861, 0xde6, 0x9, 0x8, 0x9aa5, 0x5, 0x6, 0x3, 0x4, 0x100000001, 0x78, 0x9, 0x2, 0x0, 0xffff, 0x7, 0x0, 0x100, 0xc5f, 0xff90, 0x8, 0x0, 0x20, 0x10001, 0xfd, 0xff, 0xffffffffffffff8b, 0x6, 0x0, 0x80000000, 0x4a, 0x5, 0x77e, 0x2, 0x1f, 0x2, 0x3, 0x1], {0x77359400}}) 2018/04/30 10:05:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:59 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:59 executing program 7: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:05:59 executing program 2: r0 = epoll_create(0x1) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000001280)={&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001200)=""/122, 0x7a, 0x6}, 0x10100) 2018/04/30 10:05:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4002, 0x0) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)={0x0, 0x10001, 0x1ff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x8, 0x100000001, 0x2}) ioctl$TIOCSBRK(r1, 0x80284504) 2018/04/30 10:05:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sync() setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080), 0x11) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0xcf47) 2018/04/30 10:05:59 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:00 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000001c0)) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) connect$l2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x4, 0x2, {0xa, 0x4e24, 0x5000000000, @loopback={0x0, 0x1}, 0x8001}}}, 0x32) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x80000001) 2018/04/30 10:06:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x4404c0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:00 executing program 0: semop(0x0, &(0x7f000002efe2), 0x0) r0 = semget(0x0, 0x3, 0x400) semop(r0, &(0x7f0000000000), 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000140)=""/246) 2018/04/30 10:06:00 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xffff, 0x100) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000180)=0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={"07000000000000005ef32cfd0e00", &(0x7f00000001c0)=ANY=[@ANYRES16=r0]}) 2018/04/30 10:06:00 executing program 7: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:00 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x8) r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:00 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:00 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4002, 0x0) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)={0x0, 0x10001, 0x1ff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)={0x8, 0x100000001, 0x2}) ioctl$TIOCSBRK(r1, 0x80284504) 2018/04/30 10:06:00 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000001c0)) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) connect$l2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x4, 0x2, {0xa, 0x4e24, 0x5000000000, @loopback={0x0, 0x1}, 0x8001}}}, 0x32) syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x80000001) 2018/04/30 10:06:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x2, {0x2}}) r1 = semget$private(0x0, 0x4, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000000)=[{0x7, 0x1, 0x1000}, {0x2, 0x4, 0x1000}, {0x0, 0x8, 0x800}, {0x7, 0x100}, {0x3, 0x5, 0x1800}, {0x0, 0x101, 0x1000}], 0x6, &(0x7f0000000080)={r2, r3+30000000}) 2018/04/30 10:06:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005ac0)=[{{&(0x7f0000003c00)=@nl=@proc, 0x80, &(0x7f00000053c0)=[{&(0x7f0000003d00)=""/216, 0xd8}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/165, 0xa5}, {&(0x7f0000005100)=""/248, 0xf8}, {&(0x7f0000005200)=""/167, 0xa7}, {&(0x7f00000052c0)=""/206, 0xce}], 0x6}, 0xfffffff}, {{&(0x7f00000055c0)=@sco, 0x80, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=""/15, 0xfffffffffffffff1}}], 0x2, 0x0, &(0x7f0000005cc0)={0x0, 0x1c9c380}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000, 0x8) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="12b4b18e3db4d78ca8eb16e82b7ce7f49f15b00ce36dec94c77457c6addba4d9841f28abdeb1695cff844c0c6965ce4e77c67532bb822e3a7fd14cc0c95de6ff7cd70f815fc6af3a2f332296f424cb365a9b22d5530ea0c4d73f0a0039b35c2a27057efb387d2495af3752f3ff96e6fcd3b5e6ecacca4f") 2018/04/30 10:06:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:00 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:00 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x8000000) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) 2018/04/30 10:06:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000, 0xffffffffffffffff}}) 2018/04/30 10:06:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:00 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x145000, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000440)={@rand_addr, @remote}, &(0x7f0000000480)=0x8) rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000380)={0x0, 0x22, 0x1, @thr={&(0x7f0000000340)="92264aa7cdf0fb38fba32b8b87d13c1efa5af550391618b3d68eabdfa7f3ab5d8f9be8b4b4f6b88624bb5ae2dc2bb059a3e1d9203bb00f7716", &(0x7f00000004c0)="ab8916ba29e358c7853245a23603665457972858daaa9dcf07bd459fd0a5d114bf3adfd4bb85f1d42dad5453c58e199ad388d2fe65ab4ad66b739d7fef840b38170a2db3cafa8f7db013648cd58ecdee2001303caacbfe194261cee786b43d119ad1c27c740275dbd3cf0ca6fe773ec81b6418869d8ee463aa25c6b40b83fae7d01fc6c3a753a62a0d0fb156bcba1a6b312f4ec27e382b2a0c78e190377982f968b466057cbcb97c6e3064e787650918bb8ef3957b44fe2c4f23c3d559ebd7220a664a319b29c87c89cab7a4f9f0401de78341aac2ff029b489d98073403f83e2dcfd55ea32c71f35f"}}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f00000005c0)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="ff93b067926eaf1fc56f75fdf6cb1638cbfd9b02434d8d670e77986a2c0a7bfd10086c1b19b0d843a5acdd2fd4fd51690da2895c32e88a8951", 0x39}, {&(0x7f0000000140)="85", 0x1}, {&(0x7f0000000200)="da47dbad90c0f85134da435ce9a520a975562cb41f445ccc6d5a34d8679c8682a83f5548b9ba44457ee3c52ff9d38e0be0ab7fbef084c3217c10126c77cd449f3196a083941d8c95e2cb259fa09062fe651ef3ae79e41d867311eb5c48f0fbed567116adfcb1550864f1f6750e2f39f51d8b416c3f658514484a0be9b59897fa4c8cb278c0e51f3d4026b0144c55a8d9aa668499463c1226b85a6459efde0e672a65b764c77713b40fabd880e3ac583f64e9b71619353ece73030029a9840b49f360f33cd0cea0d348163f47aeee361bec731c", 0xd3}], 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={0x0, 0x40}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000680)={r4, 0x9}, &(0x7f00000006c0)=0x8) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x77359400}, {0x7, 0xe4c}}, &(0x7f0000000100)) timer_settime(r3, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 2018/04/30 10:06:00 executing program 6: r0 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000000)={0x39980732, r0}, &(0x7f0000000080)={0x8, 0x1, 0x0, 0x9, 0x7, 0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000014000)={0x3, &(0x7f0000002000)=[{0x34, 0x0, 0x0, 0x7}, {0x5}, {0x6}]}, 0x10) sendto$unix(r2, &(0x7f000000ff57), 0x0, 0x0, &(0x7f0000013ff8)=@abs, 0x8) 2018/04/30 10:06:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005ac0)=[{{&(0x7f0000003c00)=@nl=@proc, 0x80, &(0x7f00000053c0)=[{&(0x7f0000003d00)=""/216, 0xd8}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/165, 0xa5}, {&(0x7f0000005100)=""/248, 0xf8}, {&(0x7f0000005200)=""/167, 0xa7}, {&(0x7f00000052c0)=""/206, 0xce}], 0x6}, 0xfffffff}, {{&(0x7f00000055c0)=@sco, 0x80, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=""/15, 0xfffffffffffffff1}}], 0x2, 0x0, &(0x7f0000005cc0)={0x0, 0x1c9c380}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000, 0x8) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="12b4b18e3db4d78ca8eb16e82b7ce7f49f15b00ce36dec94c77457c6addba4d9841f28abdeb1695cff844c0c6965ce4e77c67532bb822e3a7fd14cc0c95de6ff7cd70f815fc6af3a2f332296f424cb365a9b22d5530ea0c4d73f0a0039b35c2a27057efb387d2495af3752f3ff96e6fcd3b5e6ecacca4f") 2018/04/30 10:06:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:00 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:00 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x8000000) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) 2018/04/30 10:06:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/snd/seq\x00', 0x3) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000180), 0x1) r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x80000001, 0x100) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f00000000c0)={0x10000000080, 0x0, 0x10000, 0x80, 0x5, 0x6}) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100)=0x800, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x2, 0x3, 0x0, 0x3}}, 0x2e) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000200)=0x4) [ 96.865570] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:01 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x145000, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000440)={@rand_addr, @remote}, &(0x7f0000000480)=0x8) rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000380)={0x0, 0x22, 0x1, @thr={&(0x7f0000000340)="92264aa7cdf0fb38fba32b8b87d13c1efa5af550391618b3d68eabdfa7f3ab5d8f9be8b4b4f6b88624bb5ae2dc2bb059a3e1d9203bb00f7716", &(0x7f00000004c0)="ab8916ba29e358c7853245a23603665457972858daaa9dcf07bd459fd0a5d114bf3adfd4bb85f1d42dad5453c58e199ad388d2fe65ab4ad66b739d7fef840b38170a2db3cafa8f7db013648cd58ecdee2001303caacbfe194261cee786b43d119ad1c27c740275dbd3cf0ca6fe773ec81b6418869d8ee463aa25c6b40b83fae7d01fc6c3a753a62a0d0fb156bcba1a6b312f4ec27e382b2a0c78e190377982f968b466057cbcb97c6e3064e787650918bb8ef3957b44fe2c4f23c3d559ebd7220a664a319b29c87c89cab7a4f9f0401de78341aac2ff029b489d98073403f83e2dcfd55ea32c71f35f"}}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f00000005c0)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="ff93b067926eaf1fc56f75fdf6cb1638cbfd9b02434d8d670e77986a2c0a7bfd10086c1b19b0d843a5acdd2fd4fd51690da2895c32e88a8951", 0x39}, {&(0x7f0000000140)="85", 0x1}, {&(0x7f0000000200)="da47dbad90c0f85134da435ce9a520a975562cb41f445ccc6d5a34d8679c8682a83f5548b9ba44457ee3c52ff9d38e0be0ab7fbef084c3217c10126c77cd449f3196a083941d8c95e2cb259fa09062fe651ef3ae79e41d867311eb5c48f0fbed567116adfcb1550864f1f6750e2f39f51d8b416c3f658514484a0be9b59897fa4c8cb278c0e51f3d4026b0144c55a8d9aa668499463c1226b85a6459efde0e672a65b764c77713b40fabd880e3ac583f64e9b71619353ece73030029a9840b49f360f33cd0cea0d348163f47aeee361bec731c", 0xd3}], 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={0x0, 0x40}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000680)={r4, 0x9}, &(0x7f00000006c0)=0x8) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x77359400}, {0x7, 0xe4c}}, &(0x7f0000000100)) timer_settime(r3, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 2018/04/30 10:06:01 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x145000, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000440)={@rand_addr, @remote}, &(0x7f0000000480)=0x8) rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) timer_create(0x0, &(0x7f0000000380)={0x0, 0x22, 0x1, @thr={&(0x7f0000000340)="92264aa7cdf0fb38fba32b8b87d13c1efa5af550391618b3d68eabdfa7f3ab5d8f9be8b4b4f6b88624bb5ae2dc2bb059a3e1d9203bb00f7716", &(0x7f00000004c0)="ab8916ba29e358c7853245a23603665457972858daaa9dcf07bd459fd0a5d114bf3adfd4bb85f1d42dad5453c58e199ad388d2fe65ab4ad66b739d7fef840b38170a2db3cafa8f7db013648cd58ecdee2001303caacbfe194261cee786b43d119ad1c27c740275dbd3cf0ca6fe773ec81b6418869d8ee463aa25c6b40b83fae7d01fc6c3a753a62a0d0fb156bcba1a6b312f4ec27e382b2a0c78e190377982f968b466057cbcb97c6e3064e787650918bb8ef3957b44fe2c4f23c3d559ebd7220a664a319b29c87c89cab7a4f9f0401de78341aac2ff029b489d98073403f83e2dcfd55ea32c71f35f"}}, &(0x7f00000003c0)=0x0) timer_gettime(r1, &(0x7f00000005c0)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)="ff93b067926eaf1fc56f75fdf6cb1638cbfd9b02434d8d670e77986a2c0a7bfd10086c1b19b0d843a5acdd2fd4fd51690da2895c32e88a8951", 0x39}, {&(0x7f0000000140)="85", 0x1}, {&(0x7f0000000200)="da47dbad90c0f85134da435ce9a520a975562cb41f445ccc6d5a34d8679c8682a83f5548b9ba44457ee3c52ff9d38e0be0ab7fbef084c3217c10126c77cd449f3196a083941d8c95e2cb259fa09062fe651ef3ae79e41d867311eb5c48f0fbed567116adfcb1550864f1f6750e2f39f51d8b416c3f658514484a0be9b59897fa4c8cb278c0e51f3d4026b0144c55a8d9aa668499463c1226b85a6459efde0e672a65b764c77713b40fabd880e3ac583f64e9b71619353ece73030029a9840b49f360f33cd0cea0d348163f47aeee361bec731c", 0xd3}], 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={0x0, 0x40}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000680)={r4, 0x9}, &(0x7f00000006c0)=0x8) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x77359400}, {0x7, 0xe4c}}, &(0x7f0000000100)) timer_settime(r3, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) 2018/04/30 10:06:01 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x7, 0x4) r2 = dup2(r0, r0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000100)=0x6, 0x4) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x228, 0x81) 2018/04/30 10:06:01 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x8000000) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) 2018/04/30 10:06:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000, 0xffffffffffffffff}}) 2018/04/30 10:06:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) [ 97.223348] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:01 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x8000000) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x100) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) 2018/04/30 10:06:01 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:01 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0x100000000209e20, 0x8000000001, 0x5}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x13, 0x0, 0x7ffff9, 0x0, 0x730000, 0x0}, 0x205) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=""/110}, 0x18) 2018/04/30 10:06:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffffffffff31, 0x20000) accept$netrom(r1, &(0x7f0000000040)=@full, &(0x7f00000000c0)=0x48) 2018/04/30 10:06:01 executing program 5: 2018/04/30 10:06:01 executing program 1: 2018/04/30 10:06:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000000040)=0x40ac) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x80000000}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x401, r2}) 2018/04/30 10:06:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:01 executing program 5: [ 97.591841] ALSA: seq fatal error: cannot create timer (-22) [ 97.616515] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:01 executing program 1: 2018/04/30 10:06:01 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:01 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xe01fcf4c3277df96) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={@multicast2, @rand_addr}, &(0x7f0000000140)=0x8) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[]}, 0x1}, 0x0) sendto$inet(r0, &(0x7f0000a6efff), 0x0, 0x2001ffff, &(0x7f00000002c0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x22d3) sendmmsg(r0, &(0x7f0000004280)=[{{&(0x7f00000020c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1=0xe0000001}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f00000031c0)="88dc", 0x2}], 0x1, &(0x7f0000004200)}}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x264) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x7ffb, 0x7fffffff}, 0x14) sendto$inet(r0, &(0x7f00000000c0)="92", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14}}, 0x10) 2018/04/30 10:06:01 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x8000000) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x100) 2018/04/30 10:06:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000129bd7000fddbdf250cc04400000000000000020086088973e173f7ef0ed54d557f31dc6c0c2938f9597866bca4e56ff14ca4ac2f92112d20bcff916b07b7b184914a18d4b4c993cd1dec151fcf9cd2099a4674d6dbb069"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x9, 0x5, 0x8000000000000, 0xdc, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r3, 0x7}, &(0x7f0000000340)=0x8) r4 = geteuid() sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, 0x3d, 0x300, 0x70bd29, 0x8, {0x13}, [@typed={0x8, 0x82, @uid=r4}, @generic="5d9ae401977bd7032b1d7235e777ad42c191491696e612866aa5ee9dc0f2423cb023b7a513e51ef21588e5de9ad7a8ac5830197d4013b644d4f438ae224346e1a2dfd06cabc2685a102ff208acf931481f83b2f56d9d4d52ae2815abddee0530737b74b7da2b32b142df39ec8f392809a4c6e06820b3525c5d14903aead7512e05b9542ddc9346cd3979d7ff9d41d364049bc68a2c9d5b7ba77ad449a982614f8149deeb9566319d97da2df545599c5235a68b0a92bb837036a03d5d1a9610df3a3a75d238"]}, 0xe4}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) socket$l2tp(0x18, 0x1, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x80000000) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000380)) 2018/04/30 10:06:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x1}}) r1 = memfd_create(&(0x7f0000000000)='/dev/snd/seq\x00', 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) 2018/04/30 10:06:01 executing program 1: clone(0x0, &(0x7f00000002c0), &(0x7f0000000700), &(0x7f0000000000), &(0x7f00007c4000)) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000740)='./file0\x00', &(0x7f0000000900)='./file0\x00', &(0x7f0000f9cffb)='proc\x00', 0x0, &(0x7f0000000880)) r0 = open(&(0x7f0000000780)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/1679, 0x101eb) 2018/04/30 10:06:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast1=0xe0000001}, 0xc) [ 97.851657] ALSA: seq fatal error: cannot create timer (-22) [ 97.917373] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:02 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x8000000) 2018/04/30 10:06:02 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x101) 2018/04/30 10:06:02 executing program 7: 2018/04/30 10:06:02 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffe0, 0x40000) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0xff, 0x0, 0x4000000000000000, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x724edadd, 0x20000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@empty, 0x36, r3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000100)={0x3, 0xf4, 0x3}) syncfs(r1) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x3, 0x4) 2018/04/30 10:06:02 executing program 5: 2018/04/30 10:06:02 executing program 1: 2018/04/30 10:06:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x2) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000040)={'ifb0\x00', @ifru_mtu=0x4}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000380), 0x5fa263cf9df6cba1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r4 = dup3(r2, r1, 0x80000) getsockname$ax25(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2018/04/30 10:06:02 executing program 5: 2018/04/30 10:06:02 executing program 7: 2018/04/30 10:06:02 executing program 6: 2018/04/30 10:06:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:02 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:02 executing program 1: 2018/04/30 10:06:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x42001, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000200)={0x7, 0x5, 0x1ff, 0x6}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x20, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffff8}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x6d2}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x4, 0x0, 0x0, "7175657565300000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000e6ffff05ffffffff00"}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:02 executing program 5: 2018/04/30 10:06:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x40000000000200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:02 executing program 7: 2018/04/30 10:06:02 executing program 6: 2018/04/30 10:06:02 executing program 1: 2018/04/30 10:06:02 executing program 0: unshare(0x8000000) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:02 executing program 2: 2018/04/30 10:06:02 executing program 5: 2018/04/30 10:06:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000100)=0x4) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/130) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x400000100000000, 0xfffffffffffffffd, 0x8000, "71756575653000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000002100"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x3f, 0xbdac3e2cd29bfeb5, {0x2, 0x3, 0xffff, 0x1, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:02 executing program 7: 2018/04/30 10:06:02 executing program 7: 2018/04/30 10:06:02 executing program 6: 2018/04/30 10:06:02 executing program 2: perf_event_open(&(0x7f00000029c0)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000001c0)) 2018/04/30 10:06:02 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000e4dff1)='/dev/sequencer\x00', 0xa202, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{0x5, 0x8f7}}}], 0x1c) 2018/04/30 10:06:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2018/04/30 10:06:02 executing program 0: semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:02 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x88002) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xfffffffffffffffc, 0xcc67, 0xdba9, 0x8001, 0x0, 0x1f, 0x2b000, 0xa, 0xfffffffffffff380, 0x3, 0x8, 0x0, 0x80000000, 0x80000001, 0x80, 0x1ff, 0x8, 0x8001, 0x1, 0x7fff, 0x3f, 0x1, 0x81, 0xf27, 0x1000, 0xcaf, 0x2, 0xdd, 0x8000, 0x4, 0x433f, 0xfffffffffffffff8, 0x10001, 0x1, 0x3, 0xffffffff, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8000, 0x80000000, 0x1000, 0x6, 0x20, 0x6, 0xdc2}, r1, 0x6, r2, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:03 executing program 7: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) unshare(0x8000000) 2018/04/30 10:06:03 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x6) r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)=""/150, &(0x7f00000000c0)=0x96) 2018/04/30 10:06:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r0) 2018/04/30 10:06:03 executing program 6: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/227) 2018/04/30 10:06:03 executing program 0: semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x1, 0x1000, 0xffffffffffffffff, 'queue0\x00', 0x2000020000000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x2, 0x100000001}, 'port0\x00', 0x80, 0x800, 0x5b2e, 0x7, 0x7fffffff, 0xe7, 0x1, 0x0, 0x3, 0x1000}) ioctl$void(r0, 0x5450) r1 = msgget(0x2, 0x14) msgsnd(r1, &(0x7f0000000300)={0x3, "93fbde1ae727011c7d48d190f1e637d1b7b7c40e743edee1dc3b16f8843c8619588bdd712cc4f455d8e7cdcc510498659d4d283b59dcfddbafc9bba8a607d55d2049b0997168d737af87264253169e8d464114fc7dcb11adf00ca3b14e6211b3a5f06a5a2462640de0abe4325d265113c25e0330a7f9d2bb2ebfed15d529a0fd2ee70eb3e6aabe37686c708a89342f78380e9acf149986e09d35e152ac876130a79f692aa752d0b4ed9b88"}, 0xb3, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x80, 0x1, {0x70a103a4aa69f071, 0x2, 0xa4, 0x2, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0xffffffffffffffff, 0x80000}}) 2018/04/30 10:06:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=""/31, &(0x7f0000000080)=0x1f) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2018/04/30 10:06:03 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 2018/04/30 10:06:03 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005ac0)=[{{&(0x7f0000003c00)=@nl=@proc, 0x80, &(0x7f00000053c0)=[{&(0x7f0000003d00)=""/216, 0xd8}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/165, 0xa5}, {&(0x7f0000005100)=""/248, 0xf8}, {&(0x7f0000005200)=""/167, 0xa7}, {&(0x7f00000052c0)=""/206, 0xce}], 0x6}, 0xfffffff}, {{&(0x7f00000055c0)=@sco, 0x80, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=""/15, 0xfffffffffffffff1}}], 0x2, 0x0, &(0x7f0000005cc0)={0x0, 0x1c9c380}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000, 0x8) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="12b4b18e3db4d78ca8eb16e82b7ce7f49f15b00ce36dec94c77457c6addba4d9841f28abdeb1695cff844c0c6965ce4e77c67532bb822e3a7fd14cc0c95de6ff7cd70f815fc6af3a2f332296f424cb365a9b22d5530ea0c4d73f0a0039b35c2a27057efb387d2495af3752f3ff96e6fcd3b5e6ecacca4f") 2018/04/30 10:06:03 executing program 0: semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:03 executing program 7 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:03 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:03 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x2, 0x0, {0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x280000, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x800, 0x2) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0xf157, 0x30}, 0xc) 2018/04/30 10:06:03 executing program 1: socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x800, 0xe5d) r1 = fcntl$dupfd(r0, 0x0, r0) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0xa) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1ac8ada35973c4a2d5e14d41814700d6ff"], 0x8) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x33, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x0, 'sh\x00', 0x24, 0xfffffffffffffffb, 0x2c}, {@loopback=0x7f000001, 0x4e21, 0x3, 0x3, 0x7, 0xc99}}, 0x44) 2018/04/30 10:06:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x7fffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7, 0x40800) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x120, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0x1, 0x0, 0x9, 'queue1\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) [ 99.559225] FAULT_INJECTION: forcing a failure. [ 99.559225] name failslab, interval 1, probability 0, space 0, times 0 [ 99.570586] CPU: 1 PID: 7621 Comm: syz-executor2 Not tainted 4.16.0+ #87 [ 99.577459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.586849] Call Trace: [ 99.589497] dump_stack+0x185/0x1d0 [ 99.593183] should_fail+0x87b/0xab0 [ 99.597091] should_failslab+0x279/0x2a0 [ 99.601214] __kmalloc+0xc2/0x350 2018/04/30 10:06:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x8, 0x6}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") unshare(0x40600) fadvise64(r1, 0x10, 0x0, 0x400000004) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000300)) 2018/04/30 10:06:03 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setfsuid(r0) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = shmget(0x0, 0x4000, 0x408, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) [ 99.604712] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.610154] ? security_kernel_module_request+0x75/0x1c0 [ 99.615646] ? __request_module+0x777/0x1160 [ 99.620083] ? __request_module+0x457/0x1160 [ 99.624561] __request_module+0x777/0x1160 [ 99.628872] ? snd_timer_open+0x757/0x3b90 [ 99.633137] ? rcu_all_qs+0x32/0x1f0 [ 99.636882] ? mutex_lock+0x31/0x90 [ 99.640579] ? rcu_all_qs+0x32/0x1f0 [ 99.644339] snd_timer_open+0x757/0x3b90 [ 99.648456] snd_seq_timer_open+0x307/0x7d0 [ 99.652882] snd_seq_queue_timer_open+0x166/0x2e0 [ 99.657797] snd_seq_ioctl_set_queue_timer+0x423/0x560 [ 99.663178] snd_seq_ioctl+0x446/0x6f0 [ 99.667163] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 99.672668] ? snd_seq_poll+0x490/0x490 [ 99.676709] do_vfs_ioctl+0xaf0/0x2440 [ 99.680663] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 99.686065] ? __fget_light+0x6b9/0x710 [ 99.690082] ? prepare_exit_to_usermode+0x149/0x3a0 [ 99.695145] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.700599] SYSC_ioctl+0x1d2/0x260 [ 99.704336] SyS_ioctl+0x54/0x80 [ 99.707796] do_syscall_64+0x309/0x430 [ 99.711739] ? ioctl_file_clone+0x4f0/0x4f0 [ 99.716098] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 99.721307] RIP: 0033:0x455979 [ 99.724517] RSP: 002b:00007f6f6a34fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.732262] RAX: ffffffffffffffda RBX: 00007f6f6a3506d4 RCX: 0000000000455979 [ 99.739559] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 99.746858] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 99.754159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 99.761455] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000000 [ 99.838765] FAULT_INJECTION: forcing a failure. [ 99.838765] name failslab, interval 1, probability 0, space 0, times 0 [ 99.850192] CPU: 1 PID: 7620 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 99.857062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 99.866455] Call Trace: [ 99.869096] dump_stack+0x185/0x1d0 [ 99.872777] should_fail+0x87b/0xab0 [ 99.876599] should_failslab+0x279/0x2a0 [ 99.880749] __kmalloc+0xc2/0x350 [ 99.884262] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.889723] ? security_kernel_module_request+0x75/0x1c0 [ 99.895217] ? __request_module+0x777/0x1160 [ 99.899674] ? __request_module+0x457/0x1160 [ 99.904158] __request_module+0x777/0x1160 [ 99.908481] ? snd_timer_open+0x757/0x3b90 [ 99.912755] ? rcu_all_qs+0x32/0x1f0 [ 99.916511] ? mutex_lock+0x31/0x90 [ 99.920215] ? rcu_all_qs+0x32/0x1f0 [ 99.923979] snd_timer_open+0x757/0x3b90 [ 99.928104] snd_seq_timer_open+0x307/0x7d0 [ 99.932528] snd_seq_queue_timer_open+0x166/0x2e0 [ 99.937426] snd_seq_ioctl_set_queue_timer+0x423/0x560 [ 99.942807] snd_seq_ioctl+0x446/0x6f0 [ 99.946796] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 99.952294] ? snd_seq_poll+0x490/0x490 [ 99.956305] do_vfs_ioctl+0xaf0/0x2440 [ 99.960249] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 99.965636] ? __fget_light+0x6b9/0x710 [ 99.969647] ? prepare_exit_to_usermode+0x149/0x3a0 [ 99.974684] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 99.980115] SYSC_ioctl+0x1d2/0x260 [ 99.983801] SyS_ioctl+0x54/0x80 [ 99.987204] do_syscall_64+0x309/0x430 [ 99.991124] ? ioctl_file_clone+0x4f0/0x4f0 [ 99.995458] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 100.000661] RIP: 0033:0x455979 [ 100.003852] RSP: 002b:00007fa0a19d8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.011574] RAX: ffffffffffffffda RBX: 00007fa0a19d96d4 RCX: 0000000000455979 [ 100.018862] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 100.026138] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.033417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 100.040722] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000000 2018/04/30 10:06:04 executing program 0: unshare(0x0) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:04 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x4005c1) 2018/04/30 10:06:04 executing program 6: mmap(&(0x7f0000000000/0x16000)=nil, 0x16000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000280)) 2018/04/30 10:06:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x8, 0x6}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="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") unshare(0x40600) fadvise64(r1, 0x10, 0x0, 0x400000004) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000300)) 2018/04/30 10:06:04 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:04 executing program 4: prctl$getreaper(0x13, &(0x7f0000000000)) r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000, 0x800000000}}) 2018/04/30 10:06:04 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:04 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) [ 100.169746] FAULT_INJECTION: forcing a failure. [ 100.169746] name failslab, interval 1, probability 0, space 0, times 0 [ 100.181224] CPU: 1 PID: 7650 Comm: syz-executor2 Not tainted 4.16.0+ #87 [ 100.188097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.197478] Call Trace: [ 100.200117] dump_stack+0x185/0x1d0 [ 100.203788] should_fail+0x87b/0xab0 [ 100.207553] should_failslab+0x279/0x2a0 [ 100.211679] __kmalloc_track_caller+0x208/0xcb0 2018/04/30 10:06:04 executing program 0: unshare(0x0) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:04 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setfsuid(r0) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = shmget(0x0, 0x4000, 0x408, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) [ 100.216397] ? __request_module+0x7d1/0x1160 [ 100.220885] ? trace_kmalloc+0xb6/0x2b0 [ 100.224920] kstrdup+0xd0/0x1a0 [ 100.228292] __request_module+0x7d1/0x1160 [ 100.232605] ? snd_timer_open+0x757/0x3b90 [ 100.236876] ? rcu_all_qs+0x32/0x1f0 [ 100.240629] ? mutex_lock+0x31/0x90 [ 100.244346] ? rcu_all_qs+0x32/0x1f0 [ 100.248121] snd_timer_open+0x757/0x3b90 [ 100.252253] snd_seq_timer_open+0x307/0x7d0 [ 100.256681] snd_seq_queue_timer_open+0x166/0x2e0 [ 100.261592] snd_seq_ioctl_set_queue_timer+0x423/0x560 [ 100.266979] snd_seq_ioctl+0x446/0x6f0 [ 100.270974] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 100.276474] ? snd_seq_poll+0x490/0x490 [ 100.280489] do_vfs_ioctl+0xaf0/0x2440 [ 100.284431] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 100.289835] ? __fget_light+0x6b9/0x710 [ 100.293856] ? prepare_exit_to_usermode+0x149/0x3a0 [ 100.298916] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 100.304373] SYSC_ioctl+0x1d2/0x260 [ 100.308121] SyS_ioctl+0x54/0x80 [ 100.311586] do_syscall_64+0x309/0x430 [ 100.315545] ? ioctl_file_clone+0x4f0/0x4f0 2018/04/30 10:06:04 executing program 0: unshare(0x0) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) [ 100.319908] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 100.325130] RIP: 0033:0x455979 [ 100.328347] RSP: 002b:00007f6f6a34fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.336100] RAX: ffffffffffffffda RBX: 00007f6f6a3506d4 RCX: 0000000000455979 [ 100.343401] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 100.350701] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.357999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 100.365297] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000001 [ 100.407202] ALSA: seq fatal error: cannot create timer (-22) [ 100.429855] FAULT_INJECTION: forcing a failure. [ 100.429855] name failslab, interval 1, probability 0, space 0, times 0 [ 100.441409] CPU: 0 PID: 7661 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 100.448275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.457660] Call Trace: [ 100.460289] dump_stack+0x185/0x1d0 [ 100.463959] should_fail+0x87b/0xab0 [ 100.467716] should_failslab+0x279/0x2a0 [ 100.471841] __kmalloc_track_caller+0x208/0xcb0 [ 100.476563] ? __request_module+0x7d1/0x1160 [ 100.481017] ? trace_kmalloc+0xb6/0x2b0 [ 100.485067] kstrdup+0xd0/0x1a0 [ 100.488432] __request_module+0x7d1/0x1160 [ 100.492767] ? snd_timer_open+0x757/0x3b90 [ 100.497060] ? rcu_all_qs+0x32/0x1f0 [ 100.500822] ? mutex_lock+0x31/0x90 [ 100.504538] ? rcu_all_qs+0x32/0x1f0 [ 100.508309] snd_timer_open+0x757/0x3b90 [ 100.512438] snd_seq_timer_open+0x307/0x7d0 [ 100.516866] snd_seq_queue_timer_open+0x166/0x2e0 [ 100.521782] snd_seq_ioctl_set_queue_timer+0x423/0x560 [ 100.527193] snd_seq_ioctl+0x446/0x6f0 [ 100.531210] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 100.536721] ? snd_seq_poll+0x490/0x490 [ 100.540744] do_vfs_ioctl+0xaf0/0x2440 [ 100.544709] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 100.550125] ? __fget_light+0x6b9/0x710 [ 100.554162] ? prepare_exit_to_usermode+0x149/0x3a0 [ 100.559233] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 100.564699] SYSC_ioctl+0x1d2/0x260 [ 100.568445] SyS_ioctl+0x54/0x80 [ 100.571920] do_syscall_64+0x309/0x430 [ 100.575881] ? ioctl_file_clone+0x4f0/0x4f0 [ 100.580257] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 100.585479] RIP: 0033:0x455979 [ 100.588695] RSP: 002b:00007fa0a19d8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.596451] RAX: ffffffffffffffda RBX: 00007fa0a19d96d4 RCX: 0000000000455979 [ 100.603761] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 100.611071] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.618365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 100.625642] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000001 2018/04/30 10:06:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x10400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:04 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0x0, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:04 executing program 6: unshare(0x0) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x4, 0x1000}], 0x1) 2018/04/30 10:06:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000001c0)) socket$inet6(0xa, 0xf, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x200) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) fcntl$getown(r0, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x7fff, 0x1, 'client0\x00', 0xffffffff80000001, "75fbfd238ceee89f", "eea757e90118eba78f3602db2ee509df1d6cf381fe402b7655c05f45634bfa18", 0x3, 0x200a552f}) 2018/04/30 10:06:04 executing program 2 (fault-call:2 fault-nth:2): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x8, 0x6}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f657865000000000000b8608bbe9f61afac34f652925af520fd9cb4ae54ebdc756ff7b47567510de0af4f86afd61024ff2149147384aafbe9c1fd9fc828cf9b6232c202fd6627cf5e6e12faf8c4051eed49154432098dcd570dd0505042aaabaafdf50756667a0e215ba6bea09f78914dcf1bb72666109e495ef1ab3a052cf6941b160031c35e3e651d2dc5377e6091a948662e7e0fcc21f598a683b02162b24d237721d141373b8352bc5fbb7870838df9c9275c47002c5dcf1a0085b8132e6d4c25a37285735117bbc5076c373003ab5ec8a7a178d03737df83ff2ea1c542df0610e5e91a01ee0a4d8ba5f09e6d1b7559cc8e7ae09694677a62c2aefdd24e215e9c") unshare(0x40600) fadvise64(r1, 0x10, 0x0, 0x400000004) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000300)) 2018/04/30 10:06:04 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xc000000000, 0x4000) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0xfffffffffffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x3}}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x440000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x7, 0x6, 0x2, 'queue0\x00', 0xf651}) 2018/04/30 10:06:04 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) [ 100.765692] FAULT_INJECTION: forcing a failure. [ 100.765692] name failslab, interval 1, probability 0, space 0, times 0 [ 100.777187] CPU: 0 PID: 7690 Comm: syz-executor2 Not tainted 4.16.0+ #87 [ 100.777204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.777217] Call Trace: [ 100.777259] dump_stack+0x185/0x1d0 [ 100.777303] should_fail+0x87b/0xab0 [ 100.803518] should_failslab+0x279/0x2a0 [ 100.807682] __kmalloc+0xc2/0x350 [ 100.811204] ? kmsan_memcpy_origins+0xf1/0x170 2018/04/30 10:06:04 executing program 6: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x2c1371}) prctl$setmm(0x23, 0x5, &(0x7f0000ffc000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00006f4fb8)={0x1, 0x5, &(0x7f0000002000)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0xea4c, 0xc3, &(0x7f000000a000)=""/195}, 0x48) [ 100.815970] ? call_usermodehelper_setup+0x104/0x4d0 [ 100.821128] call_usermodehelper_setup+0x104/0x4d0 [ 100.826176] ? __request_module+0x1160/0x1160 [ 100.830763] __request_module+0x949/0x1160 [ 100.835093] ? rcu_all_qs+0x32/0x1f0 [ 100.838855] ? mutex_lock+0x31/0x90 [ 100.842571] ? rcu_all_qs+0x32/0x1f0 [ 100.846344] snd_timer_open+0x757/0x3b90 [ 100.850468] snd_seq_timer_open+0x307/0x7d0 [ 100.855159] snd_seq_queue_timer_open+0x166/0x2e0 [ 100.860066] snd_seq_ioctl_set_queue_timer+0x423/0x560 2018/04/30 10:06:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0xfffffffffffffffe, 0x3, 0xffffffff}}) [ 100.865457] snd_seq_ioctl+0x446/0x6f0 [ 100.869451] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 100.874952] ? snd_seq_poll+0x490/0x490 [ 100.878974] do_vfs_ioctl+0xaf0/0x2440 [ 100.882926] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 100.888339] ? __fget_light+0x6b9/0x710 [ 100.892367] ? prepare_exit_to_usermode+0x149/0x3a0 [ 100.897443] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 100.902929] SYSC_ioctl+0x1d2/0x260 [ 100.906774] SyS_ioctl+0x54/0x80 [ 100.910260] do_syscall_64+0x309/0x430 [ 100.914230] ? ioctl_file_clone+0x4f0/0x4f0 [ 100.918631] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 100.923863] RIP: 0033:0x455979 [ 100.927081] RSP: 002b:00007f6f6a34fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.934840] RAX: ffffffffffffffda RBX: 00007f6f6a3506d4 RCX: 0000000000455979 [ 100.942411] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 100.949727] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 100.957055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 100.964358] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000002 2018/04/30 10:06:05 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x7, 0x9, 0x6331, 'queue0\x00', 0x9a55}) [ 101.018297] FAULT_INJECTION: forcing a failure. [ 101.018297] name failslab, interval 1, probability 0, space 0, times 0 [ 101.029761] CPU: 0 PID: 7691 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 101.036638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.046024] Call Trace: [ 101.048668] dump_stack+0x185/0x1d0 [ 101.052348] should_fail+0x87b/0xab0 [ 101.056174] should_failslab+0x279/0x2a0 [ 101.060343] __kmalloc+0xc2/0x350 [ 101.063844] ? kmsan_memcpy_origins+0xf1/0x170 [ 101.068470] ? call_usermodehelper_setup+0x104/0x4d0 [ 101.073634] call_usermodehelper_setup+0x104/0x4d0 [ 101.078675] ? __request_module+0x1160/0x1160 [ 101.083275] __request_module+0x949/0x1160 [ 101.087614] ? rcu_all_qs+0x32/0x1f0 [ 101.091388] ? mutex_lock+0x31/0x90 [ 101.095109] ? rcu_all_qs+0x32/0x1f0 [ 101.098888] snd_timer_open+0x757/0x3b90 [ 101.103021] snd_seq_timer_open+0x307/0x7d0 [ 101.107454] snd_seq_queue_timer_open+0x166/0x2e0 [ 101.112416] snd_seq_ioctl_set_queue_timer+0x423/0x560 2018/04/30 10:06:05 executing program 1: r0 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x40}, 0x0, &(0x7f0000045000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x60) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f000003a000)={0x0, 0x807}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000003a000)={0x312, @tick=0x2b56d7a1, 0x0, {0x200000}}) 2018/04/30 10:06:05 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000836000)='/dev/dsp#\x00', 0x1, 0x20000800001) write(r0, &(0x7f0000000840)='~', 0x1) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0xffffffff80000000, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)="97") close(r0) [ 101.117808] snd_seq_ioctl+0x446/0x6f0 [ 101.121812] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 101.127320] ? snd_seq_poll+0x490/0x490 [ 101.131340] do_vfs_ioctl+0xaf0/0x2440 [ 101.135291] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 101.140701] ? __fget_light+0x6b9/0x710 [ 101.144724] ? prepare_exit_to_usermode+0x149/0x3a0 [ 101.150646] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 101.156112] SYSC_ioctl+0x1d2/0x260 [ 101.159862] SyS_ioctl+0x54/0x80 [ 101.163340] do_syscall_64+0x309/0x430 2018/04/30 10:06:05 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc), 0x0) [ 101.167303] ? ioctl_file_clone+0x4f0/0x4f0 [ 101.171682] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 101.176904] RIP: 0033:0x455979 [ 101.180120] RSP: 002b:00007fa0a19d8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.187880] RAX: ffffffffffffffda RBX: 00007fa0a19d96d4 RCX: 0000000000455979 [ 101.195197] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 101.202504] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 101.209812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 101.217126] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000002 2018/04/30 10:06:05 executing program 2 (fault-call:2 fault-nth:3): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:05 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xfffffffffffffe00, 0x1) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[0x60, 0x100, 0x401, 0x8, 0x8000]}) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000280)=0x7) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="580000001400192340834b80040d8c5602062200010400000000000000005800004824ca944f64009400050028825a003b5fbe907902008000f0fffefffffe03edf8fef5dd00000010000100000c0900fcff4d00040e05a5", 0x58}], 0x1) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x101000) r3 = dup2(r0, r2) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000240)=0x40) renameat2(r2, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x2) 2018/04/30 10:06:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x121040) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x122) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000080)="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") r2 = dup2(r0, r0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000000)={0x3, 0x380000, 0x0, 0x40, 0x74, 0xfffffffffffffffc}) 2018/04/30 10:06:05 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8001, 0x1, 0x9}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x5, 0x6, [0xc0, 0xff, 0x7, 0x1ff, 0x0, 0x0]}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'gre0\x00', 0x5}) 2018/04/30 10:06:05 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x100, 0x1, 'client0\x00', 0xffffffff80000002, "b934ff444d0a1f96", "7717c2a3af13cf158f08a055a4a0107eef9a300d1212c9aac83c46d23e87a44d", 0x9, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:05 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{}], 0x1) 2018/04/30 10:06:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000001c0)) socket$inet6(0xa, 0xf, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x200) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) fcntl$getown(r0, 0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x7fff, 0x1, 'client0\x00', 0xffffffff80000001, "75fbfd238ceee89f", "eea757e90118eba78f3602db2ee509df1d6cf381fe402b7655c05f45634bfa18", 0x3, 0x200a552f}) [ 101.626005] FAULT_INJECTION: forcing a failure. [ 101.626005] name failslab, interval 1, probability 0, space 0, times 0 [ 101.637555] CPU: 1 PID: 7738 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 101.644429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.653813] Call Trace: [ 101.656450] dump_stack+0x185/0x1d0 [ 101.660131] should_fail+0x87b/0xab0 [ 101.664045] should_failslab+0x279/0x2a0 [ 101.668167] __kmalloc+0xc2/0x350 [ 101.671667] ? _cond_resched+0x3c/0xd0 [ 101.675593] ? snd_timer_open+0x139f/0x3b90 [ 101.679954] snd_timer_open+0x139f/0x3b90 [ 101.684165] snd_seq_timer_open+0x607/0x7d0 [ 101.688588] snd_seq_queue_timer_open+0x166/0x2e0 [ 101.693499] snd_seq_ioctl_set_queue_timer+0x423/0x560 [ 101.698881] snd_seq_ioctl+0x446/0x6f0 [ 101.702862] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 101.708353] ? snd_seq_poll+0x490/0x490 [ 101.712363] do_vfs_ioctl+0xaf0/0x2440 [ 101.716303] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 101.721701] ? __fget_light+0x6b9/0x710 [ 101.725714] ? prepare_exit_to_usermode+0x149/0x3a0 [ 101.730757] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 101.736195] SYSC_ioctl+0x1d2/0x260 [ 101.739874] SyS_ioctl+0x54/0x80 [ 101.743270] do_syscall_64+0x309/0x430 [ 101.747174] ? ioctl_file_clone+0x4f0/0x4f0 [ 101.751512] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 101.756702] RIP: 0033:0x455979 [ 101.759898] RSP: 002b:00007fa0a19d8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.767612] RAX: ffffffffffffffda RBX: 00007fa0a19d96d4 RCX: 0000000000455979 2018/04/30 10:06:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) getsockopt$inet_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) 2018/04/30 10:06:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x7fffffff, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) 2018/04/30 10:06:05 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{}], 0x1) [ 101.774892] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 101.782171] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 101.789438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 101.796715] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000003 [ 101.804547] ALSA: seq fatal error: cannot create timer (-12) 2018/04/30 10:06:05 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)=""/212) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x1, 0x0, 0x10002}) fchmod(r1, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000180)={0x6, r2}) 2018/04/30 10:06:06 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) getsockopt$inet_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) 2018/04/30 10:06:06 executing program 5 (fault-call:1 fault-nth:4): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:06 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) accept$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x3, 0x10000}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0xffffffffffff52a9}, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:06 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{}], 0x1) 2018/04/30 10:06:06 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e24, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}}, &(0x7f0000000180)=0x84) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/27) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x440000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6, 0x121000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000140)="e50303dc32f22d9040cc7b221f0670323306de3193046506bc6ac418edcc282ec6427b05ac19509e385c010d27e835d0470aec9e31e95cad73ca9a49a1bf7d16bf627a42977215ac404143b3a9e2885e8750d991bc66fb5f01b6a3a4eefead8d3f6874cdf949a46b4cbf394784e71a78b05b010cb3f391f898fcbd873b83198a482d91ef23b416fa2b6df5baa7b10173805c0c6d8de390f67448fe4ba424a3a8007b317bbd6f85", &(0x7f0000000200)="4888df0cc7e39ca457f81ec2e7ee0ca37d53bc5742db74ce26c68c6f559b891ad52f2bc1febc8b143e7c7490379e13eebd11c2a3ff5b6686aeb5fe498385f2895355bcb68e6891f0e78bcc4f787bfdd8291d73dc2c13fcb0ea234ccb246a122967b05fc505383f081c983cd1d30faca729c43a5a7aa16363acf6ef9ca5951f8badb25ded9277af28f318d4c0458563fab0b1f725e89805baf5901ce329076c7bf086217e08ab5e8b399cdf87c459f6d6ec41b3da23c02a5b919836f66386304251f071103c8fd5332403e76b122cb7"}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x6, 0x1, {0x3, 0x3, 0xfffffffffffffff7, 0x2, 0x5}}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 2018/04/30 10:06:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x122) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000080)="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") r2 = dup2(r0, r0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000000)={0x3, 0x380000, 0x0, 0x40, 0x74, 0xfffffffffffffffc}) [ 102.184434] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0xfffffffffffffffe, 0x3, 0xffffffff}}) 2018/04/30 10:06:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x1}}) [ 102.264236] FAULT_INJECTION: forcing a failure. [ 102.264236] name failslab, interval 1, probability 0, space 0, times 0 [ 102.275747] CPU: 1 PID: 7784 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 102.282625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.292013] Call Trace: [ 102.294660] dump_stack+0x185/0x1d0 [ 102.298343] should_fail+0x87b/0xab0 [ 102.302112] should_failslab+0x279/0x2a0 [ 102.306244] __kmalloc_track_caller+0x208/0xcb0 [ 102.310965] ? snd_timer_open+0x140c/0x3b90 [ 102.315352] kstrdup+0xd0/0x1a0 [ 102.318682] snd_timer_open+0x140c/0x3b90 [ 102.322892] snd_seq_timer_open+0x607/0x7d0 [ 102.327314] snd_seq_queue_timer_open+0x166/0x2e0 [ 102.332203] snd_seq_ioctl_set_queue_timer+0x423/0x560 [ 102.337572] snd_seq_ioctl+0x446/0x6f0 [ 102.341561] ? snd_seq_ioctl_get_queue_timer+0x440/0x440 [ 102.347064] ? snd_seq_poll+0x490/0x490 [ 102.351078] do_vfs_ioctl+0xaf0/0x2440 [ 102.355015] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 102.360419] ? __fget_light+0x6b9/0x710 [ 102.364429] ? prepare_exit_to_usermode+0x149/0x3a0 [ 102.369482] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 102.374938] SYSC_ioctl+0x1d2/0x260 [ 102.378677] SyS_ioctl+0x54/0x80 [ 102.382148] do_syscall_64+0x309/0x430 [ 102.386092] ? ioctl_file_clone+0x4f0/0x4f0 [ 102.390448] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 102.395671] RIP: 0033:0x455979 [ 102.398868] RSP: 002b:00007fa0a19d8c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.406608] RAX: ffffffffffffffda RBX: 00007fa0a19d96d4 RCX: 0000000000455979 2018/04/30 10:06:06 executing program 1 (fault-call:2 fault-nth:0): unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:06 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) flistxattr(r0, &(0x7f0000000100)=""/244, 0xf4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200000, 0x0) [ 102.413902] RDX: 000000002013e000 RSI: 0000000040605346 RDI: 0000000000000013 [ 102.421192] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 102.428481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 102.435771] R13: 0000000000000324 R14: 00000000006f8c00 R15: 0000000000000004 [ 102.443978] ALSA: seq fatal error: cannot create timer (-12) [ 102.553198] FAULT_INJECTION: forcing a failure. [ 102.553198] name failslab, interval 1, probability 0, space 0, times 0 [ 102.564736] CPU: 0 PID: 7804 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 102.571615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.581005] Call Trace: [ 102.583642] dump_stack+0x185/0x1d0 [ 102.587323] should_fail+0x87b/0xab0 [ 102.591096] should_failslab+0x279/0x2a0 [ 102.595220] __kmalloc+0xc2/0x350 [ 102.598720] ? do_semtimedop+0x115d/0x7c40 [ 102.603008] do_semtimedop+0x115d/0x7c40 [ 102.607202] ? kmsan_set_origin+0x9e/0x160 [ 102.611517] ? fsnotify+0x493/0x18f0 [ 102.615312] ? kmsan_set_origin_inline+0x6b/0x120 [ 102.620235] ? __msan_poison_alloca+0x15c/0x1d0 [ 102.624979] ? syscall_return_slowpath+0xe9/0x700 [ 102.629883] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 102.634888] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 102.640407] ? prepare_exit_to_usermode+0x149/0x3a0 [ 102.645494] ? syscall_return_slowpath+0xe9/0x700 [ 102.650401] ? fput+0x25c/0x2e0 [ 102.653756] ? SYSC_write+0x2f0/0x360 [ 102.657599] SYSC_semop+0x94/0xb0 [ 102.661137] SyS_semop+0x54/0x80 [ 102.664588] do_syscall_64+0x309/0x430 [ 102.668529] ? compat_SyS_semtimedop+0x1d0/0x1d0 [ 102.673325] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 102.678541] RIP: 0033:0x455979 [ 102.681747] RSP: 002b:00007ff1c07f6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 102.689487] RAX: ffffffffffffffda RBX: 00007ff1c07f76d4 RCX: 0000000000455979 [ 102.696786] RDX: 0000000000000001 RSI: 00000000201b0ffc RDI: 0000000000000000 [ 102.704347] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 102.711644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 102.718944] R13: 0000000000000512 R14: 00000000006fba50 R15: 0000000000000000 2018/04/30 10:06:06 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) getsockopt$inet_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) 2018/04/30 10:06:06 executing program 5 (fault-call:1 fault-nth:5): r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:06 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x6, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x106, @time={r1, r2+30000000}, 0x8, {0x7, 0x2}, 0x8, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) fcntl$setflags(r0, 0x2, 0x1) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000100)=""/176, &(0x7f00000001c0)=0xb0) r4 = socket$inet6(0xa, 0x5, 0x7) fcntl$setstatus(r4, 0x4, 0x4400) 2018/04/30 10:06:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r1 = socket$inet(0x2, 0x0, 0x5a) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x60080) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x7, 0x1a, 0x15, "0f89ba4e1ffc7e65afdd4d1c283e8fda531701353e53d92358e179b7fcbf366206390af012186845db73da6076c98998453173e4973d5815656c97082efe26e0", "1ae6926d52fe526d6f42a39fde31d72cf022afc84cb865b864fb28eeb9bf1fee9e2508fd66a6750799af5edf49a8ce3044965a8c6e7bd6599104f52071ba0ccd", "15959a8818eb3a9619e4a379bcb8c55638cdda12dfe77cc3b7c7ad73a95cd2f3", [0x5, 0x898]}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x124) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x2, 0x4) 2018/04/30 10:06:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2018/04/30 10:06:06 executing program 1 (fault-call:2 fault-nth:1): unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:06 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) migrate_pages(r1, 0x8, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x8) inotify_init() 2018/04/30 10:06:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x1}}) 2018/04/30 10:06:06 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) getsockopt$inet_dccp_buf(r0, 0x21, 0xcf, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) [ 102.905803] ALSA: seq fatal error: cannot create timer (-22) [ 102.927818] FAULT_INJECTION: forcing a failure. [ 102.927818] name failslab, interval 1, probability 0, space 0, times 0 [ 102.939282] CPU: 0 PID: 7829 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 102.946165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.955555] Call Trace: [ 102.958204] dump_stack+0x185/0x1d0 [ 102.961895] should_fail+0x87b/0xab0 [ 102.965707] should_failslab+0x279/0x2a0 [ 102.969827] __kmalloc+0xc2/0x350 [ 102.973330] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 102.978753] ? ipc_rcu_getref+0x1e9/0x250 [ 102.982962] ? do_semtimedop+0x5af8/0x7c40 [ 102.987258] do_semtimedop+0x5af8/0x7c40 [ 102.991405] ? kmsan_set_origin+0x9e/0x160 [ 102.995725] ? fsnotify+0x493/0x18f0 [ 102.999524] ? kmsan_set_origin_inline+0x6b/0x120 [ 103.004446] ? __msan_poison_alloca+0x15c/0x1d0 [ 103.009195] ? syscall_return_slowpath+0xe9/0x700 [ 103.014117] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 103.019130] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 103.024660] ? prepare_exit_to_usermode+0x149/0x3a0 [ 103.029757] ? syscall_return_slowpath+0xe9/0x700 [ 103.034669] ? fput+0x25c/0x2e0 [ 103.038041] ? SYSC_write+0x2f0/0x360 [ 103.041895] SYSC_semop+0x94/0xb0 [ 103.045437] SyS_semop+0x54/0x80 [ 103.048888] do_syscall_64+0x309/0x430 2018/04/30 10:06:07 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x101, 0x40) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9d43, 0x6, [0x3, 0x1fffffffe00000, 0x3, 0x9, 0x1, 0x200]}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x84) [ 103.052836] ? compat_SyS_semtimedop+0x1d0/0x1d0 [ 103.057649] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 103.062871] RIP: 0033:0x455979 [ 103.066086] RSP: 002b:00007ff1c07f6c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 103.073839] RAX: ffffffffffffffda RBX: 00007ff1c07f76d4 RCX: 0000000000455979 [ 103.081140] RDX: 0000000000000001 RSI: 00000000201b0ffc RDI: 0000000000000000 [ 103.088445] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 103.095743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 103.103221] R13: 0000000000000512 R14: 00000000006fba50 R15: 0000000000000001 2018/04/30 10:06:07 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x82a, 0x1, 0x2, 'queue0\x00', 0xfff}) fremovexattr(r0, &(0x7f0000000200)=@known='system.posix_acl_default\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:07 executing program 1 (fault-call:2 fault-nth:2): unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) migrate_pages(r1, 0x8, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x8) inotify_init() [ 103.278850] ALSA: seq fatal error: cannot create timer (-22) [ 103.350599] ALSA: seq fatal error: cannot create timer (-22) [ 103.362298] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:07 executing program 3: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x200, 0x240000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0xd8, 0x4) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'team0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) r2 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x33edd530, 0x9, 0xd74, 0x5, 0x7fffffff, 0x5}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000380)={0x7390, 0x7, 0x5}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00000000c0)={'vcan0\x00', {0x2, 0x4e23}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x7ff, 0x7, 0x5, 0x2, "67817c1977c05931a2e1462da222ed3174de06a136898e39e15fe0a7419f73912f13f912790daf30c154737b", 0x81}, 0x0, 0x0, 0x0, r3, 0x1000, 0x4, "df6fbfad2e0375a1e68158bd73be364b0172c01b414421b0820cbbcb912f6c795c81df0f0dbd9197d03c67d1d0646fdf95dfbe0930fb9aff7cd71f98e96143a4", &(0x7f0000000200)='vcan0\x00', 0x6, [], [0x4, 0x2, 0x37, 0x200]}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) 2018/04/30 10:06:07 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fffffff, 0x52040) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000080)=0xc) 2018/04/30 10:06:07 executing program 6: r0 = semget$private(0x0, 0x2, 0x80) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x6, 0x800}], 0x1, &(0x7f0000000040)) unshare(0x40600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x101000, 0x0) setsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f00000000c0)="7619ede3141b8948693491d7930dd400ada6c3768f1cfb065d2b8f6b2941190a3c68b849a9b4957814aceb6d3545d0b59b38c02ef540614d3a8a13da6f0864fd5a14706e760e0f5aa9667cf74ef10d26d299785f2e5fd693b1f314a92a53336f3d7aa290a312773cb15382bea266b7210af32c50deec42228c9c8ca71ccf4741fb2fe66a849d4d3082f70fa6f81eef7633e33a76ce514879f0ab40d0a8d6139d0de570e67dc5fbf7762be587c75e2661b0b8ad089f9bdd9fe40077afabd27a314a699a039f1aec", 0xfffffe7c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x12, "32a95905a8f79380734de0062c65c2b7b6fd"}, &(0x7f0000000300)=0x1a) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000340)={r3, 0x8}, 0x8) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f0000000200)=""/189, &(0x7f00000002c0)=0x30e) 2018/04/30 10:06:07 executing program 1: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, &(0x7f0000000080)=0x80) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0), 0x1) 2018/04/30 10:06:07 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x14000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x8d0, 0xdc, 'queue0\x00', 0x100}) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="f28f00001a0001000000000000000000020000000000000000000001"], 0x14}, 0x1}, 0x0) 2018/04/30 10:06:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x80020242) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3df5, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) [ 103.649393] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) clock_gettime(0x6, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x106, @time={r1, r2+30000000}, 0x8, {0x7, 0x2}, 0x8, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) fcntl$setflags(r0, 0x2, 0x1) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xc0, &(0x7f0000000100)=""/176, &(0x7f00000001c0)=0xb0) r4 = socket$inet6(0xa, 0x5, 0x7) fcntl$setstatus(r4, 0x4, 0x4400) 2018/04/30 10:06:07 executing program 6: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000012c0)=ANY=[]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x406800, 0x0) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0xffffffffffffff8f) 2018/04/30 10:06:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x7, 0x4, 0x1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) process_vm_writev(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/193, 0xc1}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000580)=""/7, 0x7}], 0x7, &(0x7f0000000740)=[{&(0x7f0000000640)=""/195, 0xc3}], 0x1, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x800, 0x884, 0xfffffffffffffffe, 0x5, 0x2}) 2018/04/30 10:06:07 executing program 1: unshare(0x10000) semget(0xffffffffffffffff, 0xa, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x100) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000040)=""/136, &(0x7f0000000100)=0x88) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7ff, 0x0, 0x7ff, 0xfffffffffffffff9, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x7, 0xc0b7, 0x1}, &(0x7f0000000200)=0x10) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) [ 103.819666] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop6 2018/04/30 10:06:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x2, 0x6}, {0x3ff, 0xffffffffffffffff}, 0x5, 0x6, 0x80}) 2018/04/30 10:06:08 executing program 6: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f00000012c0)=ANY=[]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x406800, 0x0) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0xffffffffffffff8f) 2018/04/30 10:06:08 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x8, 0x1, 0x9, 0x7}, {0x9, 0x80000001, 0x9, 0xfffffffffffffffc}, {0x4, 0x200, 0x1, 0x3}]}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x80, 0x0, {0xffffffffffffffff}}) 2018/04/30 10:06:08 executing program 3: times(&(0x7f0000000000)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xa003, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x1, 0x0, {0x2, 0x3, 0x0, 0x0, 0x2}}) 2018/04/30 10:06:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup(r0) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f0000000840)=0xffff) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000880)=""/197, &(0x7f0000000980)=0xc5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0xa88, 0xc1b, 0x7, 0x8001, 0x3, 0x3f, 0x0, 0x60, 0x40, 0x3c8, 0x8, 0xfffffffffffffffc, 0x38, 0x2, 0x7fffffff, 0xffffffff00000001, 0xfffffffffffffffb}, [{0x6474e551, 0x5, 0x3, 0xfffffffffffffff7, 0x5, 0x0, 0x7, 0x6}, {0x60000000, 0x8, 0xffffbfff, 0x31, 0x3ff, 0x0, 0x7}], "6ac1ff6a7016fedac468514fd5", [[], [], [], [], [], [], []]}, 0x7bd) 2018/04/30 10:06:08 executing program 1: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x2, 0x30}, 0xc) unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6ae0fd41, 0x900) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0c7a00000001000000e134ed3f9dcf9fbabe57e773"]) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r2, 0x3}, 0x8) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:08 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x14000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x8d0, 0xdc, 'queue0\x00', 0x100}) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0xb99, 0x0, 0x100000000000000, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:08 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getparam(r1, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) unshare(0x8000403) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={r1, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000001c0)={0x10000000104c, 0x0, 0xfffe, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x5, r3, 0x10001, 0x7fff}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f00000000c0)={r4, 0x7fff}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000100)) ioctl(r0, 0x4000000002284, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x5e90, r3, 0x3, 0x6}) 2018/04/30 10:06:08 executing program 1: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x6}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) 2018/04/30 10:06:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x758) 2018/04/30 10:06:08 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup2(r0, 0xffffffffffffff9c) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) r2 = socket$inet6(0x10, 0x3, 0x4) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="5500000018007fafb72d1cb2a4a280930206002000a843096c26236925000600290002000000ca8a9848a3c728f1c46b7b31afdc1338d54600009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4c516f954b671529fe6e84e75cc4752154d4973e8e294ac088948d03ed41b1bd741a32b45706a7fce40d5869d2cfc2d550febe3bd80094586cf0235f603cf9996347dbb6ccbc2fe40c8c585e19a99f09d25ddd5677d1cab258a6e", 0xaf}], 0x1, &(0x7f0000000080)}, 0x0) 2018/04/30 10:06:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/llc\x00') recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1, 0x0, 0x0, 0x8}, 0x40000060) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x3, 0x0, 0x0, 0x2}}) r1 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)='/dev/snd/seq\x00', 0xfffffffffffffff8) keyctl$read(0xb, r1, &(0x7f00000000c0)=""/154, 0x9a) [ 104.496768] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:08 executing program 1: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x400040) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}, 0x5, 0x0, 0x0, 0x0, 0x7, 0x4, 0xff}, &(0x7f0000000100)=0x20) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x301440, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[{0x8, 0x1}, {0x6, 0x3}, {0x4}, {0x2, 0x1}], 0x4) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r3 = getegid() syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x2001, r2, r3, 0x100000000, 0x1400000000, 0x200000) 2018/04/30 10:06:08 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@broadcast=0xffffffff, @loopback=0x7f000001, 0x0, 0x9, [@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0x58, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast=0xffffffff, @rand_addr=0x80000001, @rand_addr=0x4081]}, 0x34) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24}, 0x7baf) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x2, 0x100000001, 0x80a, 0x6, 0x6, 0x7fffffff}) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) syz_emit_ethernet(0x20e, &(0x7f0000000040)=ANY=[@ANYBLOB="8000ffffffff00001400000008004500001c0000000000114d45969078ac14ffbbe000000100004e2100089078"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) 2018/04/30 10:06:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x600000, 0x81) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) time(&(0x7f0000000300)) 2018/04/30 10:06:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001300)=0x7ff, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000e16ff0)={0x1, &(0x7f0000683ff0)=[{0x6, 0x0, 0x0, 0x1000}]}, 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0xfd3}], 0x1, &(0x7f00000036c0)}, 0x0) 2018/04/30 10:06:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x3}}) 2018/04/30 10:06:08 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x81, 0x200) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x200}, &(0x7f0000000100)=0x8) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000180)={{0x5, 0x1800000000000000, 0x6, 0x0, 0x2, 0x2}, 0x0, 0x5, 0x40}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x8001, 0x30}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) 2018/04/30 10:06:08 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x40000) ioctl$KDDELIO(r1, 0x4b35, 0x1ff) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x9, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) memfd_create(&(0x7f0000000040)='queue0\x00', 0x1) ioctl$void(r0, 0xc0045c79) 2018/04/30 10:06:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x800) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0xfffffffffffffffe, 0x2) 2018/04/30 10:06:08 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2400, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:08 executing program 0: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x6}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) 2018/04/30 10:06:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa241, 0x2) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x1ff}, 0x4) [ 104.910854] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:08 executing program 4: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:09 executing program 6: vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000000c0)="49705590f6d44468d4f5f15879e20a27dd414ba7c4a5c654c6a4f6c92f292310b7504b6ee3924625c6621ecb0889c90e5ebc465c68e5f871699328a9dd53075bc92a196ca7357c681d44d2dada1ba14c8cef9dcf398a5da241ebe8374e0cf872ad972c2b9b7b4703ccb0eadb9015558ddf89b278f6e42bc3473ee1b57e79789387fd70db99", 0x85}], 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0xee, @mcast2={0xff, 0x2, [], 0x1}, 0x3a}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e20, 0x6, @loopback={0x0, 0x1}, 0x7f}}, [0x4, 0x101, 0x9, 0xfffffffffffff11c, 0x7, 0x2, 0x7ff, 0x6, 0x800, 0x5, 0x7, 0xff, 0x7, 0x4]}, &(0x7f0000000180)=0x100) r2 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000200)="04345b76348c62c38947fb643f", 0xd}], 0x1, 0x0) ioctl(r2, 0xc2604111, &(0x7f0000000100)) 2018/04/30 10:06:09 executing program 1: unshare(0x2000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x5a000, 0x2) write$tun(r0, &(0x7f0000000040)={@void, @void, @llc={@snap={0xaa, 0xaa, "04bc", "ba1960", 0x0, "306401abc27a3690bc26dd5e19302983046a4f8caa7d1023cdfa76da75df984e9928112574d69ff92d7884e7733e666be93925ff20a3291db4d2d87e64f2f147b5e9b9e1e2b74f4ef27b746e77d77c786a60dc531242190031be7f1f6b5a5a8ef978b25c659c5f553c397a884fb4b93a30db52e2d15d15ba9155e9f75d8bda9c46c14c89c2b13f2f3b520122a47d5658958dc5481b801c671745b5afe3badf47c09d85fd300b4215e6ee7d8c26ae633beb9e7a827da8e632395349d3780a82b8e2"}}}, 0xca) 2018/04/30 10:06:09 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x1c1000, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x27, 0x1, 0x2, 0x5, 0x100000000000000, 0x10000, "7d288de388b0c43f2eef45905a5af3180f686444ed2270763b85ab933fbe7862a51148505997509e6b213f5e7f94f4d67b789f62a809cd8b497aae86667ec4", 0x14}, 0x60, &(0x7f0000000300)=[{&(0x7f0000000180)="704821baebdc52f66ba38c0b71c2187ba8040f6b704f5ee06b8c6f9f2ac654c040d5b9dff898c512551c348d5e85ffb947ec42c6d87d18f1b2fe5d05415bf3bacb51c0efbe14978cf5aeac5b1e0648f28c9f6d8ed2bfca312dfb5f5b143c3c9664e5e3fcdec35b35db607b693a615f84ea4a0896329bfab19ed21d6777b70eb7f17421b187a01929f65f4201084c58b31c296855da00dc34bbc3b849b963ccc7edc369860ca500de462b4626f5977f622654796608fecb096129cace321f1b6e82bb22c991d9f3773b00938677538f34ffdb1d4805", 0xfffffffffffffc85}, {&(0x7f0000000280)="7571cddc237b3824e23656c7f0b4f040851d70a277bcd3f4d17d7b2ffcef1664303e4d4903d2879eac4a52aaa92166fb9c646ad807d13a8df912b56e8be753df48", 0x41}], 0x2, 0x0, 0x0, 0x8044}], 0x1, 0x40800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:09 executing program 7: r0 = memfd_create(&(0x7f0000000000)='/dev/snd/seq\x00', 0x3) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x80000001, 0x5, 0xa66ce27, {r1, r2+30000000}}) r3 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000280)={r4, 0x8, &(0x7f0000000180)=[0x1f, 0x401, 0x100000000, 0x5, 0x4, 0x857b, 0x7, 0x7], &(0x7f00000001c0)=[0xff, 0x9, 0x101], 0x20, 0x2, 0x81, &(0x7f0000000200)=[0x211, 0x0], &(0x7f0000000240)=[0x0, 0x7ff, 0x4, 0x0, 0xd1, 0xffffffff, 0x20, 0x7, 0x1]}) [ 105.089313] random: crng init done 2018/04/30 10:06:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"47726533b36c3000000800", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@newneigh={0x30, 0x1c, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x30}, 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x1b}, 0x4) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x4, 0x400000) 2018/04/30 10:06:09 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x8001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x40000000000001, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x7, 0x3, {0x3, 0x3, 0x800000, 0x0, 0x3ff}}) 2018/04/30 10:06:09 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x40000) ioctl$KDDELIO(r1, 0x4b35, 0x1ff) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x9, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) memfd_create(&(0x7f0000000040)='queue0\x00', 0x1) ioctl$void(r0, 0xc0045c79) 2018/04/30 10:06:09 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000300)={0xfffffffffffffffc}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x100) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40110000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="bf0beef163d02e1ea0c2ee46b6c4ae95b1f99bc1c3ce0f889988a72d5dd432c977f22be8502c94785fe8f51e4f393554a08b74721d9dca65d08ac3b1d2e91e8f7e4847af704671", @ANYRES16=r2, @ANYBLOB="00042abd7000fedbdf250300000034000200080003000700000008000900ffffff7f0800030002000000080003000600000008000400ff03000008000b000a00000008000500080000005c000100080009003500000008000200880000000800050004000000080001000200000014000300ff0200000000000000000000000000010c00070004000000010000000800050001000000080004004e21000008000b0073697000"], 0xac}, 0x1, 0x0, 0x0, 0x810}, 0x4) read(r0, &(0x7f0000000000)=""/157, 0x9d) signalfd4(r1, &(0x7f00000002c0)={0x8}, 0x8, 0x80000) getsockname$ipx(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10) 2018/04/30 10:06:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000029000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000009f00190d00000000070000000008000800040000000000"], 0x24}, 0x1}, 0x0) 2018/04/30 10:06:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2) 2018/04/30 10:06:09 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='net/if_inet6\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:09 executing program 1: unshare(0x8000000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x508c0, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0xf32, 0x1000}], 0x1) keyctl$join(0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x124) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x87, @rand_addr=0x2, 0x4e24, 0x3, 'dh\x00', 0x1, 0x3, 0x1e}, 0x2c) 2018/04/30 10:06:09 executing program 5: syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) 2018/04/30 10:06:09 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="73ab77708aa7140b692cd77fbd8a55b4783829c0ce9f837b1520a35bbfb9e5d339c2eca2b949f98ad7c7742bf19430181ca401d5b829b2faa3954649ca52"]) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)="dd50acf3ca532be20b04db8654ea26d546d73598e770656135b5818cd1b24b41367fad8aca93b060e373d2f8d83326b902e2f5d3da5081fb2e79afc60c7148666cd541288c8867c5184234bf8141069dfe62a21e3310cf5b61e1fe6fa830ba52b7d65e81e1b6e8f0b835536e2e62822affbac3383de3918c46586306fa0c27d838b4733df2afe175c790461a23c5f3e49535f07c58505622de2d2010d556f3767a6bbd34b5f26577cf03f2b09b5763992c13c3836b29aee7974eaa6f561ee6e89896030900cd02a5baf365573dfaa32a2a989d13e3560c38bc3800c681aa295edad5dd8e", 0xe4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80, 0x1c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xffffffff, 0x600000000000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r1, 0x4}, &(0x7f0000000300)=0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=@fragment={0x6, 0x0, 0x4, 0x31d0, 0x0, 0x8, 0x65}, 0x8) 2018/04/30 10:06:09 executing program 1: unshare(0x8000000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getpeername$ax25(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:09 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000fb8ff8)='./file0\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x1) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x800000008000000, 0x1}) 2018/04/30 10:06:10 executing program 0: r0 = semget(0x1, 0x2, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)}], 0x3, 0x0) getsockname$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x6, [], 0x1}}, 0x1c) semop(r0, &(0x7f0000000040)=[{0x3, 0x1, 0x1000}, {0x0, 0x8}, {0x3, 0xcb0e, 0x1000}, {0x4, 0x20, 0x1800}, {0x0, 0x3, 0x800}, {0x0, 0x1, 0x1000}, {0x3, 0x6863, 0x800}, {0x3, 0xfffffffffffffff7, 0x800}, {0x3, 0x6, 0x800}], 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x16}]}, 0x10) 2018/04/30 10:06:10 executing program 2: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x20, 0x1, 0x9, 0xffffffff, 0x6}, 0xc) 2018/04/30 10:06:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0x778}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff00", 0x1, 0x20048, 0x9431, 0x8, 0x0, 0x7, 0x4, 0x0, 0x6, 0x63}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x6, 0xfffffffffffffffa}, 'port1\x00', 0x80, 0x1010, 0x1ff, 0xfffffffffffffee1, 0x2, 0x4, 0x9, 0x0, 0x0, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) 2018/04/30 10:06:10 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$ax25_int(r0, 0x101, 0xd, &(0x7f0000000280)=0x2, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ipddp0\x00', 0x10) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x141000) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7, 0x800) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r4) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, {0x80000000, 0x18, 0x7, 0x1ff, 0x2, 0x6}, 0x0, 0x10001}, 0xe) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x200000, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000040)={{0x0, 0x9}, 'port1\x00', 0x3, 0x0, 0xdf60, 0x6, 0x3f, 0x7, 0x3, 0x0, 0x3}) 2018/04/30 10:06:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000000)={0xffffffffffffffe1, 0x2, 0x7, 0x800, 0x101, 0x319d}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000, 0x0, 0x20000000}}) getsockname(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)=0xf057, 0x4) 2018/04/30 10:06:10 executing program 1: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x13, "59ead40a597a8d45078672f22260889ed12541"}, &(0x7f0000000080)=0x1b) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}}, 0x84) unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:10 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) r1 = memfd_create(&(0x7f0000000000)='!+trustedwlan0$\x00', 0x3) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @rand_addr=0x800}, {0x7, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}}, 0x12, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 'rose0\x00'}) 2018/04/30 10:06:10 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='net/if_inet6\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:10 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x88000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xcc, [], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/204}, &(0x7f0000000280)=0x78) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000002c0)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000300)) mq_getsetattr(r0, &(0x7f0000000340)={0xfffffffffffffffb, 0x4, 0x8000, 0x80000000, 0xffffffffffff98f5, 0x8, 0x0, 0xc3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', r2}) 2018/04/30 10:06:10 executing program 1: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)={0x303, 0x33}, 0xffaa) 2018/04/30 10:06:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)=0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) [ 106.512209] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='security\x00', 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='big_key\x00', &(0x7f0000000140)=':selfself\x00') 2018/04/30 10:06:10 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0x778}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff00", 0x1, 0x20048, 0x9431, 0x8, 0x0, 0x7, 0x4, 0x0, 0x6, 0x63}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x6, 0xfffffffffffffffa}, 'port1\x00', 0x80, 0x1010, 0x1ff, 0xfffffffffffffee1, 0x2, 0x4, 0x9, 0x0, 0x0, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) 2018/04/30 10:06:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x400, 0xfffffffffffffff8, 0x2, {r1, r2+10000000}, 0x8, 0x3}) 2018/04/30 10:06:10 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0x3, 0x3, {0xffffffffffffffff, 0x0, 0x7, 0x1, 0x10f}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:10 executing program 1: unshare(0x8000000) r0 = semget(0xffffffffffffffff, 0xa, 0x0) semop(r0, &(0x7f0000000040), 0x0) [ 106.897440] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:11 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0x778}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff00", 0x1, 0x20048, 0x9431, 0x8, 0x0, 0x7, 0x4, 0x0, 0x6, 0x63}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x6, 0xfffffffffffffffa}, 'port1\x00', 0x80, 0x1010, 0x1ff, 0xfffffffffffffee1, 0x2, 0x4, 0x9, 0x0, 0x0, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) 2018/04/30 10:06:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) mlockall(0x2) mkdir(&(0x7f000001c000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000032e000)) chdir(&(0x7f0000f95000)='./file0\x00') r1 = open(&(0x7f00007d0ffa)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) clock_getres(0x0, &(0x7f0000003ff0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}}) 2018/04/30 10:06:11 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x400}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1}, 0x8) r2 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x3}}) 2018/04/30 10:06:11 executing program 1: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x30, 0x5, 0x1, 0x800, 0x0, 0x5, 0x0, 0xf5}, 0x0) unshare(0x8000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00270700f70300a0b22c582bf3aed17d"}) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) syz_open_procfs(r0, &(0x7f0000000080)='task\x00') 2018/04/30 10:06:11 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x4, {0x0, 0x0, 0x0, 0x1}}) 2018/04/30 10:06:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r1 = memfd_create(&(0x7f00000000c0)=':/\x00', 0x1) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x8}, {0xa, 0x4e21, 0x8, @empty, 0x1}, 0x400, [0x1, 0x6, 0x76, 0x8, 0x1, 0x5, 0x200000]}, 0x5c) 2018/04/30 10:06:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x88000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xcc, [], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/204}, &(0x7f0000000280)=0x78) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000002c0)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000300)) mq_getsetattr(r0, &(0x7f0000000340)={0xfffffffffffffffb, 0x4, 0x8000, 0x80000000, 0xffffffffffff98f5, 0x8, 0x0, 0xc3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', r2}) 2018/04/30 10:06:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001100)={'team0\x00', 0x0}) connect$pppoe(r1, &(0x7f0000001600)={0x18, 0x0, {0x4, @random="730ab055b256", 'bpq0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1d, 0xc, &(0x7f0000000040)=@raw=[@generic={0xfffffffffffffffa, 0x5, 0x40, 0x8}, @exit={0x95}, @exit={0x95}, @jmp={0x5, 0x7, 0x8, 0x3, 0xa, 0xffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, @jmp={0x5, 0x4, 0x0, 0x1, 0x7, 0x30, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x1, [], r2}, 0x48) r3 = open(&(0x7f00000011c0)='./file0\x00', 0x80000, 0x40) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000001540)={'filter\x00', 0x2b, "33fbde4992c80b291c5f846252180d474ee26b07c69db58a100948b0fe1e55c8aac68e9acc5b47a558972d"}, &(0x7f00000015c0)=0x4f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000001380)={0x0, 0xf2, "b35ed6eda1bb635bfbee2a9ebfad5f56a4662193626fdb7759b0a16d64f5dbd3de28dfa2ef5c26fafd6fa62aac32ab41d8dccbabfb3f93cb83625cf912057cfcceb90ba25606027b6093d422a54357f343c7bad8424482c364c1f81b069875eae24b945c5dc1eb48719632ac90b3d637e50d39431a68aaada5fa5622dde7165982d8cb2dc0cc1d8fe757aa4603aa9bd2937963a3d27ab0ac4069a42947acb1fec717c5c9350140d81052303e1781bb23ea1e5e187edc916ea21ef67c928f4eba95c1a8b0b48d61731e1c32924893f5abb7c76877fe4ee321d7d9ca8c771d8108039888b2141fd7b92a493ba679541d3e3dba"}, &(0x7f0000001480)=0xfa) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000014c0)={r4, 0x6, 0xf}, &(0x7f0000001500)=0x8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000001200)=""/135) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001340)={r1, &(0x7f00000012c0)="39fb62297d8114", &(0x7f0000001300)=""/64}, 0x18) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:11 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0x778}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff00", 0x1, 0x20048, 0x9431, 0x8, 0x0, 0x7, 0x4, 0x0, 0x6, 0x63}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x6, 0xfffffffffffffffa}, 'port1\x00', 0x80, 0x1010, 0x1ff, 0xfffffffffffffee1, 0x2, 0x4, 0x9, 0x0, 0x0, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) 2018/04/30 10:06:11 executing program 7: r0 = socket$unix(0x1, 0x200000000005, 0x0) recvfrom(r0, &(0x7f0000000040)=""/229, 0xe5, 0x0, &(0x7f0000000280)=@can={0x1d}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f000013e000)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0', [{0x20, ':*\\vboxnet1'}, {0x20, 'vboxnet1bdev['}, {0x20}, {0x20, '-'}, {0x20, '/dev/snd/seq\x00'}], 0xa, "2b2c1236eced00ae146c8028b4f1588c9597871c3047e53e471465b1f11a640fe544252d6a11fc9c757f9dc1298171d8bebec626c61e056279c67a7c800268b068f2dddc20b18477c1ffee10b4b0ec18c3cf15374292a80cf733231cb195e3d25e77cb142de39fbdf7eb6a26238d67c17b244e84b9170ce49204351705fcfda55a8a98682a4de9e0070d5c877daf986c3415247d174cf97533c44df4f75948a2dcfc06aa9b13a287a6a666d34fde1e993de5ab5b68b8a4"}, 0xed) 2018/04/30 10:06:11 executing program 1: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8082, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x8, 0x4}) 2018/04/30 10:06:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x800) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)="d17f9d12d0fd35c2bdad6d6c1802cae5922966579e8241b48b200109ca52196373629734b7b0a04816fea055e4de08c86081548e723e6c0bea180ed7f3855e6d12d8f016b1c646a96fca6ceec90271b531ad64ee193510926e0c66f799cc99ffaace8317429de4e1e59bfc4d42c3da68548682173c", 0x75) 2018/04/30 10:06:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$void(r0, 0x5451) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) 2018/04/30 10:06:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x88000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xcc, [], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/204}, &(0x7f0000000280)=0x78) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000002c0)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000300)) mq_getsetattr(r0, &(0x7f0000000340)={0xfffffffffffffffb, 0x4, 0x8000, 0x80000000, 0xffffffffffff98f5, 0x8, 0x0, 0xc3}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', r2}) 2018/04/30 10:06:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x6) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7ff, 0x400941) getsockopt$inet_dccp_buf(r1, 0x21, 0xcd, &(0x7f00000001c0)=""/246, &(0x7f0000000140)=0xf6) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x3, 0x4000000000001) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x200000007}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000c9af18)={{{@in=@rand_addr, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x2, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x7, 0x0, 0xfffffffffffffffd}}, 0xe8) sendmsg(r2, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:11 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) r1 = open(&(0x7f0000001980)='./file0\x00', 0xc0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000019c0)=0x8000, 0x8) 2018/04/30 10:06:11 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x2, 0x0, {0x0, 0x0, 0x400000000}}) 2018/04/30 10:06:11 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0x778}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff00", 0x1, 0x20048, 0x9431, 0x8, 0x0, 0x7, 0x4, 0x0, 0x6, 0x63}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x6, 0xfffffffffffffffa}, 'port1\x00', 0x80, 0x1010, 0x1ff, 0xfffffffffffffee1, 0x2, 0x4, 0x9, 0x0, 0x0, 0x1f}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:11 executing program 1: unshare(0x8000000) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x20000) getsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 107.991639] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) prctl$intptr(0xe, 0x2) 2018/04/30 10:06:12 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0x778}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff00", 0x1, 0x20048, 0x9431, 0x8, 0x0, 0x7, 0x4, 0x0, 0x6, 0x63}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x6, 0xfffffffffffffffa}, 'port1\x00', 0x80, 0x1010, 0x1ff, 0xfffffffffffffee1, 0x2, 0x4, 0x9, 0x0, 0x0, 0x1f}) 2018/04/30 10:06:12 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) r1 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3, 0x600000) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x1, 0x0, "71756575653000000000f1ffffffffffffff400700000000000000000000000000000000000000000000e653e77c8000"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x80000}}) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x4}, &(0x7f00000001c0)=0xffffffffffffffe9) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x1000}, 0x8) 2018/04/30 10:06:12 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$ax25_int(r0, 0x101, 0xd, &(0x7f0000000280)=0x2, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ipddp0\x00', 0x10) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x141000) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7, 0x800) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r4) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, {0x80000000, 0x18, 0x7, 0x1ff, 0x2, 0x6}, 0x0, 0x10001}, 0xe) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x200000, {0x2}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000040)={{0x0, 0x9}, 'port1\x00', 0x3, 0x0, 0xdf60, 0x6, 0x3f, 0x7, 0x3, 0x0, 0x3}) 2018/04/30 10:06:12 executing program 3: syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20000003) 2018/04/30 10:06:12 executing program 1: unshare(0x10000400) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x9f, "49743fcb3f68c10ed13c5d5ba16d92c6366e4f108b114097d183f2f2ed9d0edf7f25cd85f997bd110f0720d99efc6bee57b0aa2ea757c300c77dfabea6ffce6938bda57fa5e96391c8e96d41eedb91f41051588a2cf9b7b7c0b2a783bfa11bea618d437efea809164348bfc975298bd1ec71ccc75fcac05361e3fe461e04daa74173bd4b226da1fc59e0877cad48bf1fcd8b543a94f94c68811b8e1eb66c29"}, &(0x7f0000000180)=0xa7) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x1f}, &(0x7f0000000200)=0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000040)={{0x6065}, 0x0, 0x2, 0x5, {0x3, 0x1}, 0x8}) r2 = getpgrp(0xffffffffffffffff) tkill(r2, 0x36) ioctl$LOOP_CLR_FD(r0, 0x4c01) bind$rds(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/04/30 10:06:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) [ 108.262785] ALSA: seq fatal error: cannot create timer (-22) 2018/04/30 10:06:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x0, 0x2, {0xffffffffffffffff, 0x3, 0x1, 0x1, 0x100000000}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x18, 0x7, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}, 0x1}, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000000)=""/98, &(0x7f0000000080)=""/65, &(0x7f00000001c0)=""/195, 0xfdfdffff00000000}) 2018/04/30 10:06:12 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x3, 0x778}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ff00", 0x1, 0x20048, 0x9431, 0x8, 0x0, 0x7, 0x4, 0x0, 0x6, 0x63}) 2018/04/30 10:06:12 executing program 1: unshare(0x8000000) semget(0xffffffffffffffff, 0xa, 0x0) r0 = dup(0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0xffffffff, 0x8000]}, 0x8) semop(0x0, &(0x7f00001b0ffc)=[{0x0, 0x0, 0x1000}], 0x1) 2018/04/30 10:06:12 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)) 2018/04/30 10:06:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, "717565756530000000000000000000000000000043c64457d3b920b7000000000000000000000000000000000000000000000000000000ed00", 0xfffffffffffffffd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2, 0x0, 0x1, 0x2}}) 2018/04/30 10:06:12 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x10002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) pipe2(&(0x7f0000001ff8)={0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000ffc000/0x4000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil, 0xfffffffffffffffe}) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) vmsplice(r1, &(0x7f0000000000), 0x23b, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x8, 0x4}, 'port1\x00', 0xc0, 0x41, 0xffff, 0x6, 0x100000000, 0x5, 0x1, 0x0, 0x7, 0x7ff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:12 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) [ 108.635792] ------------[ cut here ]------------ [ 108.640618] kernel BUG at drivers/vhost/vhost.c:1652! [ 108.646106] invalid opcode: 0000 [#1] SMP PTI [ 108.650638] Dumping ftrace buffer: [ 108.654198] (ftrace buffer empty) [ 108.657928] Modules linked in: [ 108.661174] CPU: 0 PID: 8300 Comm: syz-executor0 Not tainted 4.16.0+ #87 [ 108.668036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 108.677453] RIP: 0010:log_write+0x5fa/0x660 [ 108.681803] RSP: 0018:ffff88014c18f9c8 EFLAGS: 00010297 [ 108.687227] RAX: 0000000000000000 RBX: ffff880150d16198 RCX: ffffffffffffffff [ 108.694532] RDX: 0000000000000000 RSI: 000fdfdffff00001 RDI: 0000000086c00099 [ 108.701838] RBP: ffff88014c18fa68 R08: 0000000000000000 R09: 0000000000000002 [ 108.709149] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 108.716454] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 108.723767] FS: 00007ff2cf4b0700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 [ 108.732028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.737941] CR2: 0000000000701514 CR3: 00000001481d6000 CR4: 00000000001406f0 [ 108.745251] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.752561] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 108.759859] Call Trace: [ 108.762605] vhost_update_used_flags+0x680/0x8d0 [ 108.767479] vhost_vq_init_access+0x173/0xa20 [ 108.772052] vhost_net_ioctl+0x22b0/0x3480 [ 108.776416] ? vhost_net_chr_poll+0xc0/0xc0 [ 108.780823] do_vfs_ioctl+0xaf0/0x2440 [ 108.784816] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 108.790263] ? __fget_light+0x6b9/0x710 [ 108.794318] ? prepare_exit_to_usermode+0x149/0x3a0 [ 108.799387] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 108.804843] SYSC_ioctl+0x1d2/0x260 [ 108.808588] SyS_ioctl+0x54/0x80 [ 108.812053] do_syscall_64+0x309/0x430 [ 108.816004] ? ioctl_file_clone+0x4f0/0x4f0 [ 108.820375] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 108.825586] RIP: 0033:0x455979 [ 108.828795] RSP: 002b:00007ff2cf4afc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.836550] RAX: ffffffffffffffda RBX: 00007ff2cf4b06d4 RCX: 0000000000455979 [ 108.843849] RDX: 0000000020d7c000 RSI: 000000004008af30 RDI: 0000000000000016 [ 108.851155] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 108.858466] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 108.865771] R13: 0000000000000386 R14: 00000000006f9530 R15: 0000000000000000 2018/04/30 10:06:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x101000) clock_gettime(0x7, &(0x7f0000000080)) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x802) 2018/04/30 10:06:12 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r2, 0x0, 0x20}, &(0x7f00000000c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)) 2018/04/30 10:06:12 executing program 1: unshare(0x8000000) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x400) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) semget(0xffffffffffffffff, 0xa, 0x0) semop(0x0, &(0x7f0000000080)=[{0x4, 0x0, 0x1000}], 0x0) 2018/04/30 10:06:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)=""/154) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000002c0)) fchown(r0, r1, r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x2}}) 2018/04/30 10:06:12 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x200203) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000280)={0xf430, 0x2, 'client1\x00', 0x4, "683b86986a4986ca", "ab6679f6b3275d37163499cbe95158ac9cfe1f4bf81c2e95a5cb525b9d03b58d", 0x4f7, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000400)={0x8, 0x0, 0xffffffff80000001, 0x1e, 0x7, 0x2}) syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') [ 108.873074] Code: eb 1b 8b 7d c0 e8 f7 00 35 fa 45 85 f6 0f 89 fe fb ff ff eb 0f 4d 89 f7 e9 ed fd ff ff e8 5f 7f dd f9 eb 25 e8 58 7f dd f9 eb 3e <0f> 0b 0f 1f 40 00 eb fe 8b 7d d0 e8 c6 00 35 fa 4d 85 ff 0f 85 [ 108.893122] RIP: log_write+0x5fa/0x660 RSP: ffff88014c18f9c8 [ 108.899132] ---[ end trace ade4b90df76ef504 ]--- [ 108.904024] Kernel panic - not syncing: Fatal exception [ 108.910022] Dumping ftrace buffer: [ 108.913569] (ftrace buffer empty) [ 108.917265] Kernel Offset: disabled [ 108.920888] Rebooting in 86400 seconds..