0180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:35 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 144.183336] x86/PAT: syz-executor4:17649 map pfn RAM range req write-combining for [mem 0x195c90000-0x195c93fff], got write-back [ 144.213755] x86/PAT: syz-executor3:17658 map pfn RAM range req write-combining for [mem 0x18fac0000-0x18fac3fff], got write-back 2018/03/29 11:59:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x0, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:35 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:35 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x0, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:35 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:35 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:35 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x0, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:35 executing program 7 (fault-call:3 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 144.402989] x86/PAT: syz-executor4:17695 map pfn RAM range req write-combining for [mem 0x1b4c00000-0x1b4c03fff], got write-back [ 144.423851] x86/PAT: syz-executor3:17706 map pfn RAM range req write-combining for [mem 0x198b60000-0x198b63fff], got write-back [ 144.471897] FAULT_INJECTION: forcing a failure. [ 144.471897] name failslab, interval 1, probability 0, space 0, times 0 [ 144.483529] CPU: 1 PID: 17714 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #5 [ 144.490720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 144.500073] Call Trace: [ 144.502663] dump_stack+0x194/0x24d [ 144.506298] ? arch_local_irq_restore+0x53/0x53 [ 144.510995] should_fail+0x8c0/0xa40 [ 144.514723] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 144.519832] ? trace_hardirqs_off+0x10/0x10 [ 144.524152] ? print_irqtrace_events+0x270/0x270 [ 144.528915] ? trace_hardirqs_off+0x10/0x10 [ 144.533252] ? trace_hardirqs_off+0x10/0x10 [ 144.537589] ? find_held_lock+0x35/0x1d0 [ 144.541665] ? __lock_is_held+0xb6/0x140 [ 144.545750] ? check_same_owner+0x320/0x320 [ 144.550068] ? lock_release+0xa40/0xa40 [ 144.554041] ? rcu_note_context_switch+0x710/0x710 [ 144.558993] should_failslab+0xec/0x120 [ 144.562962] kmem_cache_alloc_trace+0x4b/0x740 [ 144.567522] ? cma_pernet_idr+0x1cb/0x300 [ 144.571652] ? cma_exit_net+0x2c0/0x2c0 [ 144.575611] cma_alloc_port+0x51/0x170 [ 144.579477] rdma_bind_addr+0x11a0/0x1d60 [ 144.583625] ? cma_ndev_work_handler+0x1a0/0x1a0 [ 144.588357] ? __mutex_lock+0x16f/0x1a80 [ 144.592406] ? trace_hardirqs_off+0x10/0x10 [ 144.596723] rdma_resolve_addr+0x39b/0x26c0 [ 144.601031] ? find_held_lock+0x35/0x1d0 [ 144.605078] ? rdma_bind_addr+0x1d60/0x1d60 [ 144.609374] ? lock_downgrade+0x980/0x980 [ 144.613501] ? perf_trace_lock+0xd6/0x900 [ 144.618143] ? lock_acquire+0x1d5/0x580 [ 144.622094] ? trace_hardirqs_off+0x10/0x10 [ 144.626388] ? __fdget_pos+0x12b/0x190 [ 144.630255] ? __radix_tree_lookup+0x435/0x5e0 [ 144.634837] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 144.639662] ? wait_for_completion+0x770/0x770 [ 144.644227] ? lock_release+0xa40/0xa40 [ 144.648180] ? check_same_owner+0x320/0x320 [ 144.652483] ? find_held_lock+0x35/0x1d0 [ 144.656558] ucma_resolve_ip+0x178/0x240 [ 144.660596] ? ucma_resolve_ip+0x178/0x240 [ 144.664818] ? ucma_resolve_addr+0x330/0x330 [ 144.669221] ? kasan_check_write+0x14/0x20 [ 144.673438] ucma_write+0x2d6/0x3d0 [ 144.677044] ? ucma_resolve_addr+0x330/0x330 [ 144.681429] ? ucma_close_id+0x60/0x60 [ 144.685298] ? handle_mm_fault+0x35b/0xb10 [ 144.689524] ? ucma_close_id+0x60/0x60 [ 144.693387] __vfs_write+0xef/0x970 [ 144.697002] ? kernel_read+0x120/0x120 [ 144.700872] ? wait_for_completion+0x770/0x770 [ 144.705456] ? security_file_permission+0x89/0x1e0 [ 144.710366] ? rw_verify_area+0xe5/0x2b0 [ 144.714403] ? __fdget_raw+0x20/0x20 [ 144.718096] vfs_write+0x189/0x510 [ 144.721617] SyS_write+0xef/0x220 [ 144.725053] ? SyS_read+0x220/0x220 [ 144.728660] ? do_syscall_64+0xb7/0x940 [ 144.732615] ? SyS_read+0x220/0x220 [ 144.736222] do_syscall_64+0x281/0x940 [ 144.740085] ? __do_page_fault+0xc90/0xc90 [ 144.744297] ? _raw_spin_unlock_irq+0x27/0x70 [ 144.748813] ? finish_task_switch+0x1c1/0x7e0 [ 144.753287] ? syscall_return_slowpath+0x550/0x550 [ 144.758197] ? syscall_return_slowpath+0x2ac/0x550 [ 144.763107] ? prepare_exit_to_usermode+0x350/0x350 [ 144.768104] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 144.773449] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 144.778277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 144.783527] RIP: 0033:0x4548b9 [ 144.786689] RSP: 002b:00007fa44c364c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.794374] RAX: ffffffffffffffda RBX: 00007fa44c3656d4 RCX: 00000000004548b9 [ 144.801620] RDX: 0000000000000048 RSI: 00000000200003c0 RDI: 0000000000000013 [ 144.808863] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 144.816106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/03/29 11:59:35 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 6 (fault-call:7 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 144.823448] R13: 00000000000006a9 R14: 00000000006fc078 R15: 0000000000000000 [ 144.848302] x86/PAT: syz-executor4:17726 map pfn RAM range req write-combining for [mem 0x1c5110000-0x1c5113fff], got write-back 2018/03/29 11:59:36 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 144.881198] x86/PAT: syz-executor3:17732 map pfn RAM range req write-combining for [mem 0x1cc180000-0x1cc183fff], got write-back 2018/03/29 11:59:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 7 (fault-call:3 fault-nth:1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r7, @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 145.012210] FAULT_INJECTION: forcing a failure. [ 145.012210] name failslab, interval 1, probability 0, space 0, times 0 [ 145.020193] x86/PAT: syz-executor4:17753 map pfn RAM range req write-combining for [mem 0x198b70000-0x198b73fff], got write-back [ 145.023516] CPU: 0 PID: 17756 Comm: syz-executor7 Not tainted 4.16.0-rc7+ #5 [ 145.023530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 145.023536] Call Trace: [ 145.054386] dump_stack+0x194/0x24d [ 145.057997] ? arch_local_irq_restore+0x53/0x53 [ 145.062666] should_fail+0x8c0/0xa40 [ 145.066361] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 145.071440] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 145.076603] ? print_irqtrace_events+0x270/0x270 [ 145.081345] ? perf_trace_lock+0xd6/0x900 [ 145.085478] ? find_held_lock+0x35/0x1d0 [ 145.089522] ? __lock_is_held+0xb6/0x140 [ 145.093578] ? check_same_owner+0x320/0x320 [ 145.097884] ? lock_downgrade+0x980/0x980 [ 145.102014] ? rcu_note_context_switch+0x710/0x710 [ 145.106938] should_failslab+0xec/0x120 [ 145.110900] kmem_cache_alloc+0x47/0x760 [ 145.114949] ? radix_tree_node_alloc.constprop.19+0x2d0/0x2d0 [ 145.120809] ? is_bpf_text_address+0x7b/0x120 [ 145.125293] radix_tree_node_alloc.constprop.19+0x5e/0x2d0 [ 145.130903] idr_get_free+0x9d0/0xfd0 [ 145.134701] ? radix_tree_clear_tags+0xb0/0xb0 [ 145.139260] ? perf_trace_lock+0xd6/0x900 [ 145.143391] ? unwind_get_return_address+0x61/0xa0 [ 145.148299] ? __save_stack_trace+0x7e/0xd0 [ 145.152600] ? trace_event_raw_event_lock+0x340/0x340 [ 145.157783] ? save_stack+0xa3/0xd0 [ 145.161389] ? trace_hardirqs_off+0x10/0x10 [ 145.165688] ? save_stack+0x43/0xd0 [ 145.169289] ? kasan_kmalloc+0xad/0xe0 [ 145.173152] ? kmem_cache_alloc_trace+0x136/0x740 [ 145.177969] ? cma_alloc_port+0x51/0x170 [ 145.182004] ? rdma_bind_addr+0x11a0/0x1d60 [ 145.186306] ? rdma_resolve_addr+0x39b/0x26c0 [ 145.190774] ? ucma_resolve_ip+0x178/0x240 [ 145.194986] ? ucma_write+0x2d6/0x3d0 [ 145.198762] ? __vfs_write+0xef/0x970 [ 145.202541] ? SyS_write+0xef/0x220 [ 145.206148] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 145.211502] ? find_held_lock+0x35/0x1d0 [ 145.215558] idr_alloc_u32+0x1b2/0x390 [ 145.219434] ? __fprop_inc_percpu_max+0x2a0/0x2a0 [ 145.224257] ? __lock_is_held+0xb6/0x140 [ 145.228311] idr_alloc+0xf5/0x180 [ 145.231746] ? idr_alloc_u32+0x390/0x390 [ 145.235795] ? cma_exit_net+0x2c0/0x2c0 [ 145.239754] cma_alloc_port+0xb0/0x170 [ 145.243623] rdma_bind_addr+0x11a0/0x1d60 [ 145.247768] ? cma_ndev_work_handler+0x1a0/0x1a0 [ 145.252499] ? __mutex_lock+0x16f/0x1a80 [ 145.256549] ? trace_hardirqs_off+0x10/0x10 [ 145.260959] rdma_resolve_addr+0x39b/0x26c0 [ 145.265268] ? find_held_lock+0x35/0x1d0 [ 145.269322] ? rdma_bind_addr+0x1d60/0x1d60 [ 145.273621] ? lock_downgrade+0x980/0x980 [ 145.277747] ? perf_trace_lock+0xd6/0x900 [ 145.281871] ? lock_acquire+0x1d5/0x580 [ 145.285821] ? trace_hardirqs_off+0x10/0x10 [ 145.290117] ? __fdget_pos+0x12b/0x190 [ 145.293979] ? __radix_tree_lookup+0x435/0x5e0 [ 145.298557] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 145.303380] ? wait_for_completion+0x770/0x770 [ 145.307951] ? lock_release+0xa40/0xa40 [ 145.311902] ? check_same_owner+0x320/0x320 [ 145.316200] ? find_held_lock+0x35/0x1d0 [ 145.320270] ucma_resolve_ip+0x178/0x240 [ 145.324305] ? ucma_resolve_ip+0x178/0x240 [ 145.328520] ? ucma_resolve_addr+0x330/0x330 [ 145.332929] ? kasan_check_write+0x14/0x20 [ 145.337147] ucma_write+0x2d6/0x3d0 [ 145.340753] ? ucma_resolve_addr+0x330/0x330 [ 145.345140] ? ucma_close_id+0x60/0x60 [ 145.349010] ? handle_mm_fault+0x35b/0xb10 [ 145.353235] ? ucma_close_id+0x60/0x60 [ 145.357098] __vfs_write+0xef/0x970 [ 145.360709] ? kernel_read+0x120/0x120 [ 145.364575] ? wait_for_completion+0x770/0x770 [ 145.369161] ? security_file_permission+0x89/0x1e0 [ 145.374071] ? rw_verify_area+0xe5/0x2b0 [ 145.378107] ? __fdget_raw+0x20/0x20 [ 145.381806] vfs_write+0x189/0x510 [ 145.385330] SyS_write+0xef/0x220 [ 145.388763] ? SyS_read+0x220/0x220 [ 145.392372] ? do_syscall_64+0xb7/0x940 [ 145.396323] ? SyS_read+0x220/0x220 [ 145.399936] do_syscall_64+0x281/0x940 [ 145.403800] ? __do_page_fault+0xc90/0xc90 [ 145.408015] ? _raw_spin_unlock_irq+0x27/0x70 [ 145.412492] ? finish_task_switch+0x1c1/0x7e0 [ 145.416968] ? syscall_return_slowpath+0x550/0x550 [ 145.421873] ? syscall_return_slowpath+0x2ac/0x550 [ 145.426779] ? prepare_exit_to_usermode+0x350/0x350 [ 145.431777] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 145.437125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 145.441956] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 145.447120] RIP: 0033:0x4548b9 [ 145.450283] RSP: 002b:00007fa44c364c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 2018/03/29 11:59:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 145.459184] RAX: ffffffffffffffda RBX: 00007fa44c3656d4 RCX: 00000000004548b9 [ 145.466431] RDX: 0000000000000048 RSI: 00000000200003c0 RDI: 0000000000000013 [ 145.473676] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 145.480925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 145.488169] R13: 00000000000006a9 R14: 00000000006fc078 R15: 0000000000000001 [ 145.505294] x86/PAT: syz-executor3:17766 map pfn RAM range req write-combining for [mem 0x18da80000-0x18da83fff], got write-back 2018/03/29 11:59:36 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x1, &(0x7f0000fc9000)) r1 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) fchownat(r1, &(0x7f0000e0effa)='./bus\x00', 0x0, 0x0, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000003ff4b40b75cc66e59ca1c3b022d56bac44d8d294bbe71f097f0e616efbe801ef042a4578198249b76492eb94a8ec3950f1f63454977c1b0f5500b53b417508e30d2de6f72dee90ad96c5d045c2dfacf5b69760c5896a8cd7597bfe183519c407ed5696b38b4243202779c69ed116be0c975f0464e7a3276a5dc0f42c0c1754f3ca282f7e362ce525f9bcc843fa10fb755677cde8b6d27594213bd35b7e41b8de6baa68e6d3c369a07fd96525d34d750b5b52a05b964f6935ea1e91367aff00abc85b595b684bed876fa994270ff31c", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r7, @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000040)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffff}, 0x106, 0x1009}}, 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@bind={0x14, 0x0, 0xfa00, {r1, 0x3c, 0x0, @in6={0xa, 0x4e20, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffff00000000}}}, 0x37f) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 145.632398] x86/PAT: syz-executor3:17792 map pfn RAM range req write-combining for [mem 0x197ac0000-0x197ac3fff], got write-back [ 145.646756] x86/PAT: syz-executor4:17795 map pfn RAM range req write-combining for [mem 0x197ad0000-0x197ad3fff], got write-back 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140)=0x2, 0x4) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB="04bb6307a7aaaaf014ca6e62000000"], 0x48) getrlimit(0x8, &(0x7f0000000040)) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x100000000, 0x30000) 2018/03/29 11:59:37 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000980)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000940)={0xffffffff}, 0x111, 0x6}}, 0x20) write$rdma_cm(r0, &(0x7f00000009c0)=@connect={0x6, 0x118, 0xfa00, {{0x69db, 0x415, "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", 0x2a, 0x100000001, 0x6, 0x5, 0x9, 0x391, 0x8}, r1}}, 0x120) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r7, @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 145.813835] x86/PAT: syz-executor4:17827 map pfn RAM range req write-combining for [mem 0x198d30000-0x198d33fff], got write-back [ 145.838487] x86/PAT: syz-executor3:17838 map pfn RAM range req write-combining for [mem 0x197940000-0x197943fff], got write-back 2018/03/29 11:59:37 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000000)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xf) 2018/03/29 11:59:37 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 145.901099] x86/PAT: syz-executor0:17848 map pfn RAM range req write-combining for [mem 0x197950000-0x197953fff], got write-back 2018/03/29 11:59:37 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 145.942754] x86/PAT: syz-executor4:17857 map pfn RAM range req write-combining for [mem 0x19a2a0000-0x19a2a3fff], got write-back 2018/03/29 11:59:37 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000040)=0x44) write$rdma_cm(r0, &(0x7f0000000200)=@migrate_id={0x12, 0x0, 0xfa00, {&(0x7f0000000280), r1, r0}}, 0xff11) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc8) 2018/03/29 11:59:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r7, @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2) sendmmsg$alg(r3, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="9ba38630ceee81229f7cfd4c2ad5a37b92e28ed0add896660352537f0724ce9406d11ecb189bb2ed49c0751c856fb25750b12883a839b4f813478d6d4e62d46641a6477f6becdcd7ba263233cb8c6e5d49526b437016008cd19ad326076cbdab02c92d8576983e15399b911d6538fe5ec80f6b87cd43c04fbcb70a5f1b1658dc3357900a3ecb60f8b06d32efac54bcf174ee8d541c4b4798b21af8c3a92d4e2b089519175b81b6e3eab589bac422dd919dc8aca93d57a1715e85c654e0ed91d074c41db1b158d4ecc048dc30f65a", 0xce}, {&(0x7f0000000100)="5c06ce58577ab05f92b9e514061bf920c0f87ade389a0f899d42178c1ea9738b0d1ee9ac6f1fc0a850a28851a42237ce305e6dd53d022dd944fcf90ec211b6af77c4964e77979746878052428b1f89aef05e49746d4f9b4789d8bd", 0x5b}, {&(0x7f00000005c0)="e0f76350edf1284a26fc20e832c16420afb52a70d2fbdfe83b2449a1ff80de5f449729fdbec157d56ca118182f2e1640f972658a37e319da36e7454fb047c8dc9ecd83356c5605dff297574b5360990bbcceb1e90b538caf46095f21d37616f77a1abdc3d67efb68febf8d04c8c225bad4833b27a0d4b24dd9148a93c3156d1920fb36e1da0aae39965412612c6e68266f8bc46460324d2916bcc644acfbd1af328eed67c42e539bcfea0b67bf4887f852b4aac4a8f455c8000ed76e86d6fe4d5e1516", 0xc3}, {&(0x7f0000000200)="801cc55a5de4da6cc6cff4549a338d5a0af761a700d0fa1824540cbdc3295c22f8", 0x21}, {&(0x7f00000006c0)="a109d483eeed0ef43073cec6f5148e19f7130cae947d63b564fd2ae266996066631307ce861f8eafa2a99de0dbf8a501f4df5a59dfeab8e52f12e97b4ce133e9cf5180ae71429be5b81233cd83ef9045568e4194157c59ebe3740448180891f1709cea98a3304eedab33d35454376ea091dfe118c06fe608bd131f63128efbc5643e1ca6ae40c479cbe15c640b56eae7", 0x90}, {&(0x7f0000000780)="7ab337fb8eb22832cd8e92e345c94e65e52567e91ddad7ccfd000f60814678ac8eaef249d4a124ce53d4d0e8ff90e965797e4e0c17e8080fc144f7ce6c1efcc89a7999aff4dbb543289852fc10a10f99c1f266497f2b9b891dab1539dc9d7c3d489a63268bf2d2e638fc3904474f02185f56c06c04429e8e37ed7ad4aa23658ec91c5f1fe469428cd0d5954e6c08c957a6c694a9837fae84bd235d44d2fb75edb14ae5133e38232db7bcc98867c4c29c30fde1308eda1cfd4347e8211f3517a8967da77f04ac9c688af863d26727dd9d16c1e7570778", 0xd6}, {&(0x7f0000000880)="6463918c76e18db825c255a3f42ee40e84c1457c82959db2c813d9248f96bde883f15ff17636eaaddf1b278da00911f5de1b25622c56895ceea9e14e3c87248ebc0471acbe7bb094b5966c2fc6bba75a026956143f73ddcff7e10f8b549070d6b85f275c98459a48874cf465039103c6d298c2f3366bde89cd633bbf69c95ff06ac96d054aeab59a2d8407d463a026d26bf7", 0x92}], 0x7, &(0x7f00000009c0)=[@iv={0x108, 0x117, 0x2, 0xf2, "8e9e7409cc4cfb7d964b992e872d5e0cc95c0b52911c37d08bf5fb1bcd707a0d70f58865e717361dec5179c9eb166d17a1c52c9c92f6e294c480dea379092c595ac71d10b50892d256bb12c6c1ea0fc593974921363d4c9d455a6640b2b2c03eeb2c846ab57335206a2e800cf2eb5f3be94bab3e4b0d6c759f75cbfcf2f3daf59486ace2e35297d881ef60b9eb7e7774f70ba7fd9209bfa9a663cfd392db45886a5b515ec272581c44c2620bb5a882e4caf104253b391ffc29d6d50d039d2e189b2d59c6bb1d71ef7baf56a1c5b5d053bee7b750f59412a38f3acaed2321fc84b7ef358db9decf73602adeefaddb7b42583c"}, @iv={0xe0, 0x117, 0x2, 0xc9, "7191fb2c7efdacb2ce99509abf946d24ae3a6d23d37a58370bea1f803d91bedd6d71c9d16b1b812d1717c38547ab176979254692cfecc988ec6c42a8e98e3759c2cc794685a376da8c2606d9932c761cbd926bb17096187f17866aa1f52b449ca7da780a52f4160e10ed2724ea57b62678dbdad433d43aead6174f07088ba44f1eb6c2f040c4cf78fbb4b6e2afe054c2cabbf032c2d20fceed69c7a6df6cc0201b76c58f3db8e820af4114a5f4ecd88c6c26bcecee4cf1f2c7f3ee1fe702d1636f0ec0a73c263472dd"}, @op={0x18, 0x117, 0x3, 0x1}], 0x200, 0x20000810}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)="2be73e5d82fcbbea0180733cf5d2245a53821cd2c1dce08b51fa278199bc645a0ca963d316c32dc3f0c4527b50401b0364d831021e529a519620b831f0a96b2d7f2e05302cc433e056956f8d2a8f97aae8ba16624c1d126ddd47813092771972b2604ad13c101afb7deb192a92e000f4cbf50f0b254ea12321bde40ff2a8c0c441c0345d9b01d9bce464d7a9275a8af20a140916fef791972471c3a3807c446c1cb684303ce9d25e4866cfd04fa2aa64e38744906d72bb863ca3146a09afe6e612567b0e4c724aa45e807111664c19fb46c48ec4f022c9b2eecc80a1047ad33075d4abee", 0xe4}, {&(0x7f0000001d00)="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", 0x1000}, {&(0x7f0000000240)="136d083bf7d189cdf1f2df877f653365631dbbd5b4d161bcd8042b97593f1645741d5d0f64011ecb4cdca04e2bd90c99d06deb73d6f3ee266b47e406", 0x3c}, {&(0x7f0000000380)="1251807ff3820b3ea92443884db939d9997bb82b77a6f560e68583bd025a436fd4eab6149763ea8eb82fe7abfe3c5e71", 0x30}, {&(0x7f0000000cc0)="61e5d77229c6de2a46f8ab7f60ebcf9059a08faecebb58df397a7d611f4ac3703fcd178a51e8a3039a6110c4d12b757c9ec4f0dacf48e31f986b6552b891c559b2ab3b8f18cff682c55a1d08bc66ab67d0bf0bea6baae29c74de41d20fa155e292e1d143e5226f5d25d4ffe40c30d55f1a95dd95605ce0547b2ba3c724a86e33f2d870b2d0c6dad606257f41a88f3443548dc6e786d685988868b98b92dde3ae20174ab7dd39e45cb882518091623b90a7cd36f2a0ecd59e22a2551b611b372ec7c1222444026d8a25362cd527823f41946aa86cfc9610c7423ac06df3db029263", 0xe1}, {&(0x7f0000000dc0)="8f7672b10dd74f7d0522be18e463b9b553af3e0674d402f1e0e205bd05be7874b698fe4a3880286c900327ca38b9c534890a98e3f8eafe43a0b709c8e235e0ac1f97c552917a9c0c3b9c9fa3476677e1b75896a59c878c4e9682ff343beda4cbe3a507199a2ef4056ab7134f89981bf1833295391fa537b08c207a5217585041ea198bd45fa35d31c7c3a2616796dd3f49953c2382c42a4d9d5de7a5f72ed97ac71a9a73c27169f69414c683006bd40028ce8fc951552492a98dcf81cf9ddc5a867477a403a417dc390ff9ba461c41ce8cab5b8edcc15eeca6282d1a7c37344c29d4f054f5c6d6c41e", 0xe9}], 0x6, &(0x7f0000000f40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xf1, "ec2aba8367d82231e0e7092d51cc14f65a0ea4973e1716006bf9e1610040a200b6d6fd6b56237b021e8e692511fadf79009a4b20f94a31221c88d9b8b6c996152076986a0fc09aa5a5380b7df9be4e3fcf041dd1ca5a48622863b85e41e9961ac8554514351a5b72dd1ed7173f1c295a8ae6920656e9eb508408b6715e3700452d3063dc40f5b06f6f8e1a4911c07f1850b71177f00babb8e8ff10a6716a0dda20bf51118612a134ae6890323840bde4d4ee1ec9d26443bc1fb44a10fdb90c2dd6bbaf25d92036aca66319f8c4128eac732d4e103936518fa9c7c630561419e2e5eaecdb65dc4c27ed84b4af1ab9b4b0c1"}], 0x120, 0x1}, {0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001080)="1215c9ac85b544d0216a9ee8c713380a26bac4685a81160a20712dd249b7ab2daff7c86ee0b2ea547db0e5a1827aed382d4b22d71a", 0x35}, {&(0x7f00000010c0)="f8245137685fa7e7ca4938112f56fab01c81ce1bfc66572712f34540cddb2641efcd41f59e1aa95055044d1134a18dc00188ff3cf8f8d35dbd074cb8d92a0f4fc1e598cd78032c1a7e152831cd151db4f12c4b6ac997c35ca764c53b", 0x5c}, {&(0x7f0000001140)="bc97b728b2be348aa779ae76a3f998b22c09aa7e5bf06e1a40d3418c640897d5f803e5a9e65b5bf0b4ce79181665c127d8d5c849336b711dfe0e52e888025a512a97e800334172c37563b9529d2996ae31e4b7c65cff4dc962508fa1d194e15105b5b77613adad8f3dcc732a66371af1d29c7ddefd5fa0e07bf5bb0e8cdde346f877b63917feb2af4a13a3df27e292f823d36c2fb21abba2ca87480a0a7d3ce584b68e6c5aeaf59b3cc0097afcd8ce33a9221e5611", 0xb5}, {&(0x7f0000001200)="9579231eff9562e61faaf077f346edc0007ea571238bd9e70dde2032dbf7fb7906f3cc8136ec573e866ea2b75b97a4d43710e95d28012d1ad96ab14f77bc9539ce27a71c9da49256df10fd2df1c6968bc2e2f57fc3ec9ef4587f53acd79f4a29", 0x60}, {&(0x7f0000001280)="411e53afae7692717b487a8379c13875883569ef1c66d8be8e1eadfe2c70910b10415637ee7d004401305230c571c707ea5ed7f13e74b8882add1531971eb3b825d329e0b773a76fb1fc07", 0x4b}, {&(0x7f0000001300)="773ed50e0878a1e13a52bb1290d83564be34a2de012292f76953318f8152cd1c287244bfb1dbc3d6ede10004a58df4c6248cd080c0494240db570ab27fdf5c012bf4d81b16f2d1d0ae92fa9e98745746c65a7889e8f7ffb087e8ed5dd2e09909ce5d22ae3533c842e79b647a11e1", 0x6e}, {&(0x7f0000001380)="b4d33889cc2be7f4336823e940a309ca4531b1217c78ff5a37f170c31f674139264f244916a94bd848603663d6a1af", 0x2f}], 0x7, &(0x7f0000001440)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x8000}, {0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001480)="7efc0cc2fde3eaf4e8c504b9791a996e20eecc3d65d293a1466c65e4500452730348b77b719595328f8122c847", 0x2d}, {&(0x7f00000014c0)="7f74b67b77309dab89256a8805049bb4352d7cbdf95d3524af4e241292f4314f40538fd46522c6", 0x27}, {&(0x7f0000001500)="9c7622796aa0b01a2f58f7ec88b711169b6d8038b63256a0bb7634915573031bf71887531e4129f9d9b4be3e3a278196a739dd1d281778e805d9cf678999f089d25d72d9ef0c3bc179dcdfaacb8e4567bde786b221b348b115ac2205d60327ebb34e2f19a15a", 0x66}, {&(0x7f0000001580)="3cd03f39ea4a53debdc210ac89e0131ab328df44deffe7dc68f30e7aec563b9018f3bec56c0fb8fa2b86f63b40bca7ff2f7a5136d463102ec31382190cf18255b9e7990fbb6e03d4f086b795f393410620c4e9ccc37c885b18749eecc7583acc4a17ea4643589e14d833", 0x6a}, {&(0x7f0000001600)="6bbfa609cf9bec8bb2817ef35b91af3ca2b22776f7304bb4455745c826c9fcdee41498e226f31348bb3f2aa3733bc206ea7384fc17f3d9fda86d074bba4c25990bdc1bf994b2d1b924fd4047808a89e71075c1744ebaa3a423608445712e06055462435a4c097930064111e06d987852d5b14256fe3670ed1b41bfc3b2b315e6815ebd38c8f64a57e8a09c4ddf5fc9c005ddc5d8894b10e13a78e1280d4546986dd3e906", 0xa4}, {&(0x7f00000016c0)="ec67ac2e0904b98199", 0x9}], 0x6, &(0x7f0000001780)=[@op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x9eb4}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x10000}, @iv={0xe8, 0x117, 0x2, 0xcf, "ecfc56a4ce3a5a3f7487c117914cecf826c2c30902f94e543553f1686ddd1d3907b9c99f31570d53e8b2f39ea0fc0554860068d254ea417b7054e22f77f5791b8dd78dfb95dc82c67010d412dad7ca959da769f79cd815fe17a7554095fb48361dd59de52f744217de33b6102ba533136977f53c2183e2a5eae4303ed03b0f4eb81f30759d5e501f414b2e424eba30d0c8a253d15d38f5352ac931d341cee9aaaff9330ba1089770d60902d6652af16004802b6d8325f196e6d29b92b347a85c3ad42c7f863178ed90c0e3d20ffab6"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0xf5c5}], 0x1a8, 0x40}], 0x4, 0x44000) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 146.444695] x86/PAT: syz-executor0:17883 map pfn RAM range req write-combining for [mem 0x19a2b0000-0x19a2b3fff], got write-back [ 146.460101] x86/PAT: syz-executor4:17886 map pfn RAM range req write-combining for [mem 0x198920000-0x198923fff], got write-back 2018/03/29 11:59:37 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="971074acd8172039ebbe64e008210989bfd04300bb9363a85f6d385ca22b0da0617907d04f4137c24547a7f6b4d0cb3bf362ffc6d9830507c71df119cc34ab4d68a10e324ab7e97472595d702102642bba"], 0x20) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1, 0x200000) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @loopback={0x0, 0x1}, 0x4}}, [0x9, 0x0, 0x3f, 0xffff, 0x2, 0xfffffffeffffffff, 0x5, 0x7, 0x80, 0xffff, 0x2, 0x5bb, 0xfffffffffffff8d3, 0x80000001, 0x2]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000240)={r6, 0x3}, 0x8) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) process_vm_writev(r7, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/45, 0x2d}, {&(0x7f0000000800)=""/100, 0x64}, {&(0x7f0000000880)=""/152, 0x98}, {&(0x7f0000000940)=""/155, 0x9b}, {&(0x7f0000000a00)=""/104, 0x68}], 0x5, &(0x7f0000001300)=[{&(0x7f0000000b00)=""/67, 0x43}, {&(0x7f0000000b80)=""/103, 0x67}, {&(0x7f0000000c00)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/167, 0xa7}, {&(0x7f0000000d80)=""/233, 0xe9}, {&(0x7f0000000e80)=""/171, 0xab}, {&(0x7f0000000f40)=""/238, 0xee}, {&(0x7f0000001040)=""/229, 0xe5}, {&(0x7f0000001200)=""/195, 0xc3}], 0x9, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0xffffffffffff7fff, @mcast1={0xff, 0x1, [], 0x1}, 0x226}}, 0x8, 0x1, 0x5f6, 0xdd, 0x11}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={r9, @in6={{0xa, 0x4e22, 0xa0, @empty, 0x4}}, 0x4, 0x9}, 0x90) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000180)={0x81}) write$rdma_cm(r4, &(0x7f00000011c0)=@create_id={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001180), 0x111, 0x100b}}, 0x20) write$rdma_cm(r5, &(0x7f0000001680)=@create_id={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001640)={0xffffffff}}}, 0x20) write$rdma_cm(r5, &(0x7f00000013c0)=ANY=[@ANYBLOB="03000000000000fa0a004e2407000000000000000000000000000000000000002f01001fc9e5ec8f12dec23f260bb081ed000a004e23020000000000000000000000000000000000000020000000", @ANYRES32=r10, @ANYBLOB="1f030000"], 0xd2317427f4a4883) 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x440000, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="70010000300000082bbd7000fbdbdf25120000009b4a9774c55cef439733cffe5335707adcb28132049931783a0583bdea9c619e47bb8d25674e474973d1b897cea295408a8afc98eb621214004c0008000f914c82008000000000", @ANYRES32=r2, @ANYBLOB="140000000000000000000000000000000000000020001a001c0044002f6465762f696e66696e6962616e642f72646d615f636d00e0001100a4fde480012154dd8eaa677a54b9b8a5645037511b202ddd90b00e77daac7d9934afcba6619d0ac5dc69115de94c71beb1ee0b0bffecc6d88303440adae5e078ddf90b5c995bab7c3cea49b1096e618d393f22e7f5e529831998506ced7ea3286cf73beb84544b14aca18d15849e76f0f8eb3dd09b6bf93dde776f3534cc70553783d5b18bcb282f3bb633796ad2a1d23b96b6ec1b6d3b2230dbe3e3871ca09aee20b2fa08979c3de9180f4bcf4fb558cac165d6d86ea739c26b7c4888658465ed5e38bd8d25d7186f7962205a46376b0214b37b66cfb51b151def0000"], 0x170}, 0x1, 0x0, 0x0, 0x4801}, 0x20000000) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000004c0)={{0xa, 0x4e22, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0x4e23, 0x4, @loopback={0x0, 0x1}, 0x1}, 0x5, [0x9, 0x85, 0x400, 0x800, 0x8000, 0x5, 0x9b3, 0xff]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB="005b856c"], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 146.528228] x86/PAT: syz-executor0:17908 map pfn RAM range req write-combining for [mem 0x198930000-0x198933fff], got write-back 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 146.576908] x86/PAT: syz-executor4:17912 map pfn RAM range req write-combining for [mem 0x198860000-0x198863fff], got write-back 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f00000016c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0xffffff3c, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x64, r3, 0x200, 0x70bd27, 0x25dfdbfb, {0x1}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffff978a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c800}, 0x40) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000200), 0x4) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[], 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000040)={0x6002, 0x2000}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mq_notify(r4, &(0x7f00000001c0)={0x0, 0x0, 0x2, @thr={&(0x7f0000000540)="b6bee0e635864617f1b2caf6e5bbe0dcac168adb1ee723660d116a66e4fb10db360e7a3cdaadb7e26a418d9bf61e66b7bcf1179faca485efc9b72b853b4f6c8f9340ba38dbe1ac627fa6ea3b7dc87039de4ea8d2c3aa7719c7d56cc62b8774624bbe7ffc9f9eb9aa3f92b222e316e75c8f2f550366f04e89ebf5128a84e0573a8dbcbaee9e2312de83cc69dfec8b46e438d4f24a4c167385810ee6e7cbc81be5", &(0x7f0000000600)="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"}}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000001680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000001640)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1c130008000000ffdf257f000000000000009a05f51c280019df050008000080"], 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xfffffffffffffe34, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80}, @in=@rand_addr}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'ccm_base(pcbc(aes-aesni),sm3-generic)\x00'}, 0xffffffffffffff2a}}]}, 0xd4}, 0x1}, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) ioctl$TCFLSH(r4, 0x540b, 0xfc3) ioctl$TIOCGPTPEER(r4, 0x5441, 0x101) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000208007c61", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) 2018/03/29 11:59:37 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r7, @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:37 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000040)=0x401, 0x4) [ 146.668486] x86/PAT: syz-executor0:17935 map pfn RAM range req write-combining for [mem 0x198920000-0x198923fff], got write-back [ 146.688095] x86/PAT: syz-executor4:17944 map pfn RAM range req write-combining for [mem 0x198870000-0x198873fff], got write-back [ 146.692808] x86/PAT: syz-executor3:17945 map pfn RAM range req write-combining for [mem 0x18c0e0000-0x18c0e3fff], got write-back 2018/03/29 11:59:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc8) [ 146.765085] x86/PAT: syz-executor4:17965 map pfn RAM range req write-combining for [mem 0x19a160000-0x19a163fff], got write-back [ 146.778143] x86/PAT: syz-executor0:17968 map pfn RAM range req write-combining for [mem 0x18c0f0000-0x18c0f3fff], got write-back 2018/03/29 11:59:38 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x101000, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x80910, r3, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180900000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) r5 = getuid() ioprio_set$uid(0x3, r5, 0x9) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82040, 0x0) ioctl$KVM_SMI(r6, 0xaeb7) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r7, @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 146.848538] x86/PAT: syz-executor0:17985 map pfn RAM range req write-combining for [mem 0x18c560000-0x18c563fff], got write-back 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 146.923181] x86/PAT: syz-executor0:18003 map pfn RAM range req write-combining for [mem 0x18c570000-0x18c573fff], got write-back [ 146.949724] x86/PAT: syz-executor3:18013 map pfn RAM range req write-combining for [mem 0x18f380000-0x18f383fff], got write-back 2018/03/29 11:59:38 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000004c0)={0x4d80000000000000, 0x0, 0x3, 0x4, 0x1b}) r1 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x0, 0x101100) fallocate(r1, 0x2, 0x81, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000001, 0x200000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f00000002c0)={r4, 0x8, &(0x7f0000000140)=[0x8, 0x6, 0x1, 0x100, 0x8, 0x5d29, 0x8000, 0x1], &(0x7f0000000200)=[0x7fffffff, 0x2, 0x0, 0x3], 0x40, 0x1, 0x1, &(0x7f0000000240)=[0x3], &(0x7f0000000280)=[0x3, 0x81, 0x3, 0xfffffffffffffffd, 0x8, 0xd41, 0x7fff]}) write$rdma_cm(r2, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r2, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r5}}, 0x48) write$rdma_cm(r2, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) fadvise64(r2, 0x0, 0x2, 0x1) [ 146.971333] x86/PAT: syz-executor0:18027 map pfn RAM range req write-combining for [mem 0x18f390000-0x18f393fff], got write-back 2018/03/29 11:59:38 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x7ff, 0x30}, &(0x7f00000006c0)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000007c0)={r3, 0xc0, &(0x7f0000000700)=[@in6={0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x1ff}, @in6={0xa, 0x4e21, 0xcc, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e23, 0xffffffffffffff01, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x58, @dev={0xfe, 0x80, [], 0x13}, 0x3f}]}, &(0x7f0000000800)=0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000840)=0xfff, 0x4) r4 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x200202) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x88, "3d209b5991f060fc1311f8705915b218fa5784cee8e6898fd83659f2b23ff8c747fa9fc41eb019c4762ba8c41c91ea9d58565edb8dd184a7fd559325fa21eaf1017c04ebbad23ecb6e7e41fb43891644f86a8ac99eee70550afee0a19b1703dc4225257da95689688f58f77ad72c2ff578573720c016f81a1856b2d643c444bd063721f945d91f97"}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={r5, 0x0, 0x8, 0xf16, 0x8000}, &(0x7f0000000580)=0x14) write$rdma_cm(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00080000761300009dd3ff8724244e5fa903105b1d9c4eec8193b8a7b0540bca0fac2ddfb2c7212c1bde4cd767684ed9c8f1a04db1ee8f069350e08952edccf05253cc9119a9e913c701ccb554266e2196d4a5d480e341aa1f851f3914376f6fbb47601da285196f8397ba6f2dba56b5b2b8a3ce86dbcbd3e2b16ce17ebea7168378111009b2fcdba44ab3b9ccef27fd0212b6909cd59643b68e516185c44bcaec24685afdbfc4e7f03252f620ef65dded", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) getsockname(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000040)=0x80) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r6}}, 0x48) write$rdma_cm(r7, &(0x7f0000000380)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xd2) 2018/03/29 11:59:38 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80000000, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x0, 0x6000, 0x7f, 0x8, 0x1}) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9}) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 147.104858] x86/PAT: syz-executor0:18049 map pfn RAM range req write-combining for [mem 0x199070000-0x199073fff], got write-back [ 147.117262] x86/PAT: syz-executor3:18050 map pfn RAM range req write-combining for [mem 0x198900000-0x198903fff], got write-back 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x0, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) 2018/03/29 11:59:38 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9}) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x420000, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000340)={0x3ff, 0x8, 0x1, r3}) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x200080) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x800}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000200)={r5, 0x7e, "4335390db2cb7c51aff0cc614ff745b33c3e50bacafa05816b45725c323fa33433f6935739b8b0f45c95b299f0fdab411059eea8093d360b1645377a9d8976a6a8c0d6cb4b8c8fc8ecbf6766ee86cf35475fef405b5fb02d1cf1f6174b119785d154948d0091b55d5b68bd7794034c228c7cc61eac0aeb2051d110aa38df"}, &(0x7f0000000140)=0x86) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffffd}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) keyctl$clear(0x7, 0x0) r3 = accept$nfc_llcp(r2, &(0x7f0000000100), &(0x7f0000000040)=0x60) getsockopt(r3, 0x5, 0x10000, &(0x7f0000001d00)=""/4096, &(0x7f00000000c0)=0x1000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000500)=0x7) write$rdma_cm(r0, &(0x7f00000011c0)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001180), 0x106, 0x100f}}, 0x20) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000020000000000000000a79f3a5b94e9fcbb0000000000", @ANYPTR=&(0x7f0000001340)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="11010600000067d3abeaff0000"], 0x20) write$rdma_cm(r1, &(0x7f00000013c0)=@listen={0x7, 0x8, 0xfa00, {r5, 0x9}}, 0x10) bind$nfc_llcp(r1, &(0x7f0000000200)={0x27, 0x1, 0x0, 0x7, 0x80000001, 0x10001, "bb39ab468a9d2d308e1858d67348e10ede5c1cfa9a6c8d0aebd41523bbd54a573fd34699d3d270bfb91f03b279ba3c8451235029c7285ac4a868cd0fff1a17", 0x14}, 0x60) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x8, 0x4, 0x1, r6}) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32, @ANYBLOB], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe68af6e85a64cae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc8) 2018/03/29 11:59:38 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9}) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) 2018/03/29 11:59:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000006c0)=@join_mcast={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffff}, 0x1, 0xffffffff, 0x30, 0x1, @ib={0x1b, 0x200, 0xffffffffffffffff, {"4f82b60e6e09ef8413fa9299c726b6c5"}, 0x20, 0x4, 0x7f}}}, 0xa0) write$rdma_cm(r0, &(0x7f00000000c0)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x141) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000004c0)='tls\x00', 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) fanotify_mark(r0, 0x40, 0x10020, r0, &(0x7f00000002c0)='./file0\x00') write$rdma_cm(r1, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r2, @ANYBLOB="050000009da7fa97bd474d2a1383416ffde37b6cf0ad6ae6e1fc8208c244b4f9597995a6eca6faf371850bdb04acd42639d52b694d257b36955b64deebaaf946df4c55209870c9753f573c34c204f83e1bfd2939b368afa869d51859b4b65551a9479b83dd9a2f92bc893381fccd65ec4ec994501d94e7cfe88dcddea562d189a0aab5d38267d2c706cce38ea1b4b98f992d4cdd8364612c3c18afd2a5c8340af019387ed8715c49dd6716556e606d8637206f975235deea9600d46b0d6a29265d8a55653f75f35d0b9d2cf5ae60"], 0x48) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="779207bde45bec5b5a8825e245d5aedfaacd4376d6d70a255574797a5f368a93c43e8d1a1e15ec493863e82c46c1eda214e87496350c70987acf48e35ac8bc04b7ba1f459140403f546a3449b0c7783420bb8428a7fce03194e9a5ed02eb836c", 0x60, 0xfffffffffffffffe) keyctl$get_security(0x11, r3, &(0x7f0000000200)=""/84, 0x54) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xfffffffffffffe2c) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000000)=@disconnect={0xa, 0x0, 0xfa00, {r1}}, 0xac) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1a}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x9, 0x4, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000400000fa8ae225b710369a4fc33afeb8be24a10a0000000000080000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 4: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000080180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 147.592703] x86/PAT: syz-executor3:18179 map pfn RAM range req write-combining for [mem 0x1c5840000-0x1c5843fff], got write-back [ 147.611079] x86/PAT: syz-executor4:18185 map pfn RAM range req write-combining for [mem 0x1b5780000-0x1b5783fff], got write-back 2018/03/29 11:59:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 4: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:38 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getcwd(&(0x7f00000004c0)=""/248, 0xf8) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:38 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000140)={0xd7, 0x8, [0x1f, 0xe5]}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000040)={0x0, 0x10f001, 0x9, 0x10001, 0x2}) 2018/03/29 11:59:38 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 147.756774] x86/PAT: syz-executor4:18229 map pfn RAM range req write-combining for [mem 0x192100000-0x192103fff], got write-back [ 147.785127] x86/PAT: syz-executor3:18237 map pfn RAM range req write-combining for [mem 0x192110000-0x192113fff], got write-back 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r4 = shmget$private(0x0, 0x2000, 0x7c0002e9, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f00000004c0)=""/149) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 147.816327] QAT: Invalid ioctl 2018/03/29 11:59:39 executing program 4: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0xffffffffffffffd0) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 147.867693] QAT: Invalid ioctl [ 147.922746] x86/PAT: syz-executor4:18271 map pfn RAM range req write-combining for [mem 0x18c4c0000-0x18c4c3fff], got write-back 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x101200, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000540)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) setsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000000600)=0x5, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x220000, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000580)=""/93) setns(r1, 0x44000000) r7 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) accept$packet(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000004c0)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$set_reqkey_keyring(0xe, 0x7) sendmsg$nl_netfilter(r8, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)={0x1c, 0x2, 0x9, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x2, @u32}]}, 0x1c}, 0x1}, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r5}}, 0x48) fgetxattr(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="757365722e2f6465760100000000"], &(0x7f0000000240)=""/49, 0x31) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) accept$packet(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000680)=0x14) 2018/03/29 11:59:39 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$getown(r1, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03b7337f6efad1b1000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r1, @ANYBLOB="ffffff7f00000000534e1cd053d6f4f85dff64f011dcfaf2fc238180c32d1d467ae3bf1cd0c5b65e01c5ca32fa97e1e26b70ff0027122fbb9ba4aa88637435b4e503512c7b2e743d21b300afcfc5521730eaec0ca6aacbb29cb766c0800040257371812c5df8ac98d1f5"], 0x48) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40080, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/112) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x401, 0x4) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 148.019513] x86/PAT: syz-executor3:18291 map pfn RAM range req write-combining for [mem 0x18c4d0000-0x18c4d3fff], got write-back [ 148.041862] x86/PAT: syz-executor4:18300 map pfn RAM range req write-combining for [mem 0x198640000-0x198643fff], got write-back [ 148.049984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 148.105803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x10001, 0x8001) ioctl$VT_WAITACTIVE(r2, 0x5607) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffb, 0x2) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f0000000580)}, 0x10) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000040)={0x9, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x40000000}) ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000200)) 2018/03/29 11:59:39 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x1, 0x480) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x5872b0d13dc56799, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffffffffffffff3c, 0x2) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000004c0)={0x8, 0x0, [{0xc000000f, 0x6, 0x2ce5, 0x3, 0x100}, {0xf, 0x2, 0x8001, 0x1, 0xfffffffffffffbb5}, {0x8000000f, 0x9, 0xef0, 0x7f, 0x8}, {0x0, 0x6, 0x80, 0x400, 0x40}, {0xc0000008, 0x10000, 0xff, 0x0, 0x401}, {0xc0000007, 0x0, 0x3, 0x1, 0x5}, {0xc0000008, 0x1, 0x863f, 0x7fff, 0x2}, {0xc000000f, 0x9, 0x5, 0x83a, 0x7}]}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f00000005c0)=ANY=[@ANYPTR64]) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa080000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x1f, 0x8, 0x820c, 0x101, 0xffff, 0x6, 0x4, 0x81, r5}, 0x20) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 148.203304] x86/PAT: syz-executor4:18342 map pfn RAM range req write-combining for [mem 0x1c3a50000-0x1c3a53fff], got write-back [ 148.204817] x86/PAT: syz-executor3:18339 map pfn RAM range req write-combining for [mem 0x198650000-0x198653fff], got write-back 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="1a25ac181c020000"], 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="13000000100000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000c0a1de8bf8391c9a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6e4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYRES32=r1, @ANYBLOB="01000000"], 0x18) r2 = getpid() fcntl$setown(r0, 0x8, r2) r3 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="0fb40d17f82c478f77ec1843a2f741b4a9bb5cc787e651d8e6f720289cfbac182365bf3d3d1a6435a1962717670fbaf028c270f0d1231c2c3f094217f3a5ffea9365e07033d5cb496836f335cbd770cc3979cb496a5191e15d63d814de04896b7c7e969e36150e78c94ad3931b28ae5f2e3deccbab9eb88c26f24e0e6975044861e9ba2cec0466cbbd59ef3258afeee8e2c72492aa7990dd2b0a846610fb3a00a99bef3f1d8daf23a49cb94ffef9ada29d4979b8997445f39e79cc3971218b2f0521e42fa0", 0xc5, 0x0) r4 = request_key(&(0x7f0000001940)='user\x00', &(0x7f0000001980)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000019c0)='/dev/infiniband/rdma_cm\x00', 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, r3, &(0x7f00000018c0)=[{&(0x7f0000000300)="9ccceaebfab379a4eb0e28c42f1db2153488a7f68637a4b65974b13684c565772b112b3c30b7cf3843d39300b37609d239696c9bbdfebb85b1d90b7c43dee51743c3c1f4cb50b2c1808fbbc42cd21c95cfee8029e7dc10e636b6162bfe280b14a9a256e3d60176a4fdaea775c7099898946db39dc1936562eba384f62ee7d893df2b487c77106a772d4c8f6d79ecf3f4ab8b8705020608", 0x97}, {&(0x7f00000006c0)="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", 0xfe}, {&(0x7f00000007c0)="bcc47c86bd8feb3660354261ca8def80d7fb92bd878e5d3c03025c8dd7a5e8d37439db6e57d3e7308832b478a37f39db5b072c04d73241ca4801c828360ea0d4306099e273a58a64a89448f2ba322973dda66fc6605e25ea8843ea815c8570eb146bcea1310de8b25c3f4be87f76d7c8378af1b17164cd1e05e74f84e6b0c78510bed9244404697a27ea9ad135d8ac787de7ca1ea23f971799e7e2f3a271bd9a8a2ae4c1427358f2199d36e748697c5355e5bbf46513746d200681137514e6ffc623d6b8a9942eda82a0ceadeb9c2dd0014f0dcc4655d9f2a08cd5a0ef1de77dcf6ed8f5873e0bda1c053273ab286bd6501a5678b8a5c40d70051e7e1a3315350d73c232305d6e370498064d3c5089267a81f04ea2525fdab6891c1f71b1c3a69602fabac99b37ff92e7d85e037ba2977bea00e407f06854e326f348dd056add5f523514dc6a116c13c578d893ad3ced639ed986d5685115ebad974ffbe9303e0d79056128f04804e156dc5350cac408305bab3b79a6a5f2a464f2f9fe3da59febf949304e3cc23a814eac2950ef97bee7fffdb3d638e0c54a4f5b62a916d3f5836a344a3f035b5d8384a5304e7f0e601e58c8d681476f6900155102205815df52b848b64b7fd0fad2eac045d5935ae87ffb35827236d336ad2e42fce0d33cea909b8b3d6822ee1738a4ef29d0da846dc4d7614d54ccb50bc78a94037bb98ab2197846f7cb9a96c56d9f4b93ce55337c77cf37bfc43df4230bfe0afe8ffe291405291530f30c4bf4291fd382ad7acffbfac724c19b928c00014ec3c8850739bd397d99d470abf4d2b56385a1ac3908625cb39d7c3e51adb5a7104f06e02a6cf8b2e0249615c19eb14b2e0e62dcea6a073aa0378cf0862c4c063de4b4f8399e38420bc9030f60d72e2459dc9578381901a618fd206290070a3b4976e238f1c4c71f81e17159619d885a92421694d289b09bf23194a865ede3a16e0601b6bf6a23cbedf9f9e46af9cba94cfed078f7214d69436ab91b189ed6e1216fa7f59c186ba759207987dcb0fb2148ff78d48d4cb9d25aba2d7dff3988ff1a97919a8e750e98a998a4c1acbfcea9fe72dc6cf70cdf97d46cab0a3f07b6cbefb2c0a7b555fa9f4d88e153f21776c3d9acf69abdcf2b6412f65b85ccffeb80fec0c29f94f79e69d2bcab00a76da90534c16ff1f1de89d790f5527a34b964d8d4e19fd5c16f15d51ee6cedaac88b14eae5e8b576a51e67aa32ec6e9749b553b674d80139f900109345b01272785bf33de9be7309bd0192243f0d0f477b5ba5417a2ba9be3157853dc2dda8b74fc1bd0b4210a9074df2866f807b6daaa778935f2e13d00c411972aa0545984f16acf3a7ec156cb7ac89b7e772872a0895c9e309b45fc0d1d960d46b374b8f6dd531f248e4bbf978c5b006aa50cf7b268a2fa4a7daaa88fa883cf2406a4fa30d95dbd0da44be611a8ee946660801aeb3116c0e4fa00923582d75e98df8bb82bdb3adaa18c348754029dd4f6d5d0fb172629c5a506d58dcad6a75fc7f0505e7e74e337907028919d2302bc76ca201077b5b334339a373c297ca3f7021d87c1ec11fa26032367b0f5093ee6e50dddaa0bcecf93b059acee89807e56108fd321d33469c4750ee9fafae29b8ac82df5f794b428870ef7a721ef69580a96bc18607be8496b1ed9b94ef4a345712cf1586b2c382aa42c1fba0234fc6d91088a8f1c78795bc2b74454be286acc4b38622d44e0b13d700d1e32ba9069b30aa7487b38d377b881f70d31be34271e3d2644d4d648fee88f689b7184b15c547a814b17665850f0fc8d8d933e7b19591fc2559a4d5f1ebcfe2c13a501a57cccba8160596484e4fdbf0ce2ca788956cf41a20299a6d0c9b21cfc113429236d6d452e164f58d7c8224a0da57eaa1b169079ba811dcd5eb8fce2522802c32012329a650f6ee2bd36845d33a577a434365c3acc6fc99200f4c8c515b5e30f664a04de346dee319d2345936d5d5046ac59ace36906eb59edd220eac336d1898ef281045d84d8f59e025e2ebbcf679812cdf32f9b8c0e9295344c2140ff788e0f63b91b9013bf3218b4ea78538aab126c85e3e8343750799113ce962904c4675eb86cd6809364556c6571704ea90662556083d54e97186faf89320c9899c7cca14a9f721a531f5f4a4519b84389a601f89085ba728802f110cfda26ee6fca93038db084c016af1f3fc9edf77cee6a717c6d174a31aad3faeee1822d5b51dfd896206316f416bb908424e8d7aa47d1ccb67e6dd8ea3b0d02c079c36dc7b74e0e529ee6b47f5f7b4ea6bc7509869d0e136c0ea699fae6295913d3f668573338ac260b95f41a5727f56e3bce6a514a3c3811031efab305680658c7e9eb9942ea1a1d53b973d3b96569cdd109b05aebc76fad91aef8cf7d9550ab523691c8f30c9015b6c5f54d224dfba48f5b4f45a8b06d984d4a9e286ebdcb01e8489ad1ff793492eadbf477085923adfad744a513ffbf4af9433403758af80995ed7f67f6cbf5cbad6b199266f89457f8f550e552e7bc70e7bccc6373bf4b9875ea45d8fe8bdafe66218d4402a57a6a6c91926a422df2fecfd8e8e7ed5b8fd17c3afb15afa8fadb2f78be92ace2a771a6637a3a8d0f14ffb55e895bc9ed048e6cb350721bcc82280af8ef2401a16652b17650fa5bf6ca27abbda8091aacdb6d63baa21d2c9fb48f38c928f9544aae3e1192024b22abc202f64c37f7b4fef8be2057ca7b867460a57f494d11025d40cf7a11f69118ed0531adcd73f4f187c421cab35cd95caee881df2b14073d5f52872faf6937409841c671f1916417b54eef6c55710529b716b79c2b7e0c179f5bef477bb6f72146258e3ecd45fa626147f5cee49b7a779c8eb2ccfda1b9dc6b29fa67c3a84fce8eddc3bedd06a5a0f98dc9a41a35505ee1f72029024cdf23a5d80082ed3dd08310f760e24e56c5957b378d3903bb972fa98bab6aa5587c4b42c8f542ed89a41c11fe5b5e04c756ab1c9230a4b3fc130259b15e9f2778dd7a28384aa825f6da181dc512adc46b7826f3b1362dd764c0c4eef957d7307dbfb939eba55a5a3791879d1b22a782fad3cd4e3990c13eee542bfa41e2660d414eb244821ca6f701124c522adf135733881f041dba92e7d9aedf263fa317614dd3703f2d8097d43af9e86f1af7287926fa309773257e98079d70ecbf4c5b660be88b0c2489bdd6a7bb4261c91ad697de83751ef723d83315f9e23c647947b2a1fe60cc2f18ff7f3f8642e6491f60c4cc1e4e2d167b31f98c9c5c5fa49488b42b29f39b9d1d24f35fdd00cc79446ac82bba9deea7c0491cbf3d4ab8a3e23cd6c65e1eb92931657ea9ce96eff484ef9fa9ce06444c5de2c2557f6f11ddabc778972d4e3f748b25f4984efbbeca981b6c8beb9cc6c0ad34eefdf565f31b2b333b096e1ea15e1dc8bf42a6edb7ecc930c0176b1b480a68df5670e73982784a9b6615a7b674c0dff33b797b633ffaf740f0680a3cb7d3eecff76a1ddece7a35d8027b35298557cf30e3e134a4aa4deb61c06b677f4cac913b39f166999cff53c051737a45dfd684b881e4294832efb599935dc0e784cb44e087512d2fa206486323a8e1e1b6ed7135cfc52de6e76e1146bba7928524edfacc5b589b352a68294b75cb0a7ea1b4462b9b31cc349d2615851a1842df418b097296f988951784156fe9d5435af9ddef3cff14e0836f46e2b081d029c065aef81600f9206b24a1c082905886392f3eb4208b12240e4dd59c89ce1e3827dc0818a55b45f72ff2def39b674baf9174c6439b71bf80055d54fe798a009eea552f9721835672507963576e883c62ade33d4d5569fa8cf838ded64f62bcc0c448a46592ef4e7cd5159e9a1eb9cde33374017c13c6d2833aa3e128fa447ba228dabc85a694a3a6239d01251bdf8024a16bf107ec73cb7904b4bfa7d5ba2440c97e6f97c3a6d50f238a1556c2dbe1100569a0723ce29a9e7f5a8219a096acc8e6ff7080580e7da454258b8673948e18d2b3a485ce0655400b502191a37170fca2f2c633de3238a1b9f3ea817b9003a44f03cb48e019523bea5e315bac4e6c4a62511cb62352f8f61de8e88d94518031f5ef7dae7755873b06b44302844fafa7b450ab70adad276f83b2e15e50b4f711d3c4fa2d0c053845c4a83649bcc722e99d39340f5f5aaf0938a84090d43fe81f5713879416ca52ec6144fd53f6185742a6f9401f10abe8699ed6e3a54ee68f0bff38d3ca5a2b3d493a9faeb906aaa469a9f422366b11bb387756ce156403b2994386f88444e93b915e106631e5324a9b6dacd4d15e5c5a04fc7cff5a0dea62dab48a5e63d23d21394f1e8156462be61dc7d9586f69a7ff786cfa8f5a1c1ccbd54e3ecea1643a43214fa110ed46dffb0e647e44e0bfc06defdd0ba3e1e216ecb6dc79777fb4c35b81d3a8a98415d951ea281a48acd0314782ddf0a7947f55304e0050c35185e880dede8bf92f493be30555e3ea4a0ad0f1bd666ede8e7750592e496996d70cde795c0da9c8667869f7d7535fce6dc4058ecd5d48bea632910b7ce27b28710e743b32797f8af012a568a884060c9d950feabd11020580e44f9f9172e5ad61ab23cff6b773726d736d1eb7e8085079259f236d3b19934a21515935de6f37bda82a91c195cb54489f65a29dee721e19079a5b8b0ac267d5ba2194f77eabf92a3a58e9533ddb534ebccaaa262358eff15221b9f64fedb8a00f140e1992c9556b363b2a3a1c4d23899e97bef4af0ac3753508e066bf50c62cccc6049d7a568630538a3a72a39cb2799c0756b5344b103a258ad27f0be8fe6c60f7e95653c98c858e6acfc6dc5f0a472b2b1d174d71d11c60028dd4036a116dc3d753b5b8fa68b9516011fd0e88ff8200e74cfc200f9c750945803250f82b43f77b0d46da1ea7ae861640782c8ea46bf59fdc6dcefe324cc3076b581a620d1f4292d65e9802b583f31d4af172540489cf93f753e21e565b0ed29253a998d2c3216b7ef27be2365c7e5de5e71672624f11433af76e137f97175734ca69d65b29888784fab1750734e35987bcd008155dee12643bf1bfcb0ad523c287292080a2354cd5aa5ef623491d906af496fda7be4bb37eb70db4ffc17cf173a191eb62878d5130027aa88e075e71993f772682ac5e176172494e28e48dad8f37eea3f6bf64ffe10a4093aee37747c4219e8d3f45974615b130ab39f62c8ee33cc16bba2663f7006b551b123556a324dc751457584dbfe5b834fdda277abe4fee08b16ae298ec9e2875978f513865c653dbf97d401c4865366023ca78e0ce981e68d32323c026edddbe9150b73443e549e41492565b26972c41834cc053e5dbb16050e37cda29c140bc78f5623a882fa0fd71ff4a2c1842d1514a4ffa620d2b4230d51995e11dc01d7397848e0b528aad49f4c76dcef0300901bd139d43ce1798bfd588f9ad8da3d7209e20762da51979fb9c8ef40f5403bdb3af6f48e840fea60e2947c810a4e95c274472a8eb0eb2096de63302ed2fef1f7598c196a2bafda401defc3dcdf30ee01d4378623d7600cc1242f1b3890f2504632f850104313e130f562d4e59a55fa77a86176f3257c8ff8ae4f559bd22ebb0751990483d370ae42d3c40231e515d5f0ebb2d2db1b430f38bba2b07e9eea2d27486d2b4db0be5d23cda66dd37069fb9ffeda858e3b094747e731a4e4fde3d3a4e8fadb0bac218e9b3f682552daedc5026a93c9d2065e2e93a60d3e3642625e15058eeffa8babb7f9828b5f6c53a5f", 0x1000}, {&(0x7f00000017c0)="f9f9d611a28557d0d4400e34bd8b8e1ba5e3489576aba510561309ffa54fc90cb64107bb8ebf89edc45f578da4e185f677fa2f49c0f8c212cd5faf608d477f9fe90ceea6cd2814197179590c4b9c576fa6db89ff20d81cdfc80fbb8a7129a0957dcda5f02a76cdad163cea4f322e009fe84e4d85fffd2aed93e427ff5fb984fb8678a3926f25d410b7147802d85c6d5c7a479461a5f95aeaed6c82abee2566580421efb9d776810aafe89f3a80c3a6ad37a0badb41ec1f96827a8f06cbf9e266236949fc9f2c83607c1ffd234cb7cf6539e3d5e7c6ed55e038997e464f49935560c40354df9e8dfd0a4ecf15136711", 0xef}, {&(0x7f0000000140)="d1", 0x1}], 0x5, r4) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff0400"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="ca41bf60dd3bb8b24029628ff79cf495323c8610dba455844a7af965b3bb8784dcc2fa2a72429cb6e2c03d83e531cbfacf67d454701b1bc5ce86b7d441a33749edcb10cd208d3cea0c739928e2305d61d227ba850e44993ca41801463f774cc94993053f6bef6b46976df0e4fc671f0f6d6c998f5176178e6871e9cf3d4b7bb4109fecad9b05ae4521491b8b0a753526ce7d3ff7a72f78f2a87d01a1a5bf0d38f186971ea03f205c21c3f05297da000000000000000000000000000000000000"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 148.377580] x86/PAT: syz-executor4:18392 map pfn RAM range req write-combining for [mem 0x1ac8e0000-0x1ac8e3fff], got write-back [ 148.393199] x86/PAT: syz-executor3:18398 map pfn RAM range req write-combining for [mem 0x1ac8f0000-0x1ac8f3fff], got write-back 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20000, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x101000) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x70, 0x10000, 0x4, 0x800, 0x10001, 0x0, 0x4, 0x10, 0xb, 0x101, 0x0, 0x4, 0xf55e, 0x80, 0xffffffffffff091f, 0xfff, 0x6, 0x714, 0x5, 0x8, 0x1, 0x3, 0x10000, 0x10001, 0x7fff, 0x0, 0x4, 0x1, 0x20, 0x7, 0x5, 0x101, 0x20, 0x7, 0xfffffffffffffffd, 0xd53, 0xfff, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000200), 0xd}, 0x8400, 0x8b1, 0x3f, 0x1, 0x5, 0x1ff, 0x2}, 0xffffffffffffff9c, 0x6, 0xffffffffffffff9c, 0xb) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000002c0)={r3, r4, 0x5}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r5, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r6, @ANYBLOB="01000000"], 0x48) write$rdma_cm(r5, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x2, 0x0) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0x0, 0xff, 0xfffffffffffffffd, 0x4}, {0x0, 0x2, 0x4b6, 0x3}, {0x3, 0x3, 0x7, 0xebd6}, {0x7, 0x9, 0x9, 0x8}, {0xd4cd, 0x3, 0x401, 0x3}]}, 0x10) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff0400"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r3 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x7f4f8767, 0x80) write$cgroup_pid(r3, &(0x7f0000000600)={[0x31, 0x35, 0x32, 0x36, 0x30, 0x35, 0x32, 0x38, 0x36, 0x38]}, 0xa) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r5 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x28, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r6}, @enter_looper={0x630c}, @request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x4}], 0xc4, 0x0, &(0x7f00000004c0)="120f5acec30799f6de3eddf5c7a426f2b55a2f43db22b11f8c5f4f78bd13497c6454297941a45be055cfea690553990d4e3d323ebee284f829feb75895453144dbaf3dfb4c271d6ad0f7a9aea8668fb0c8ee79e84737cb5d18e6b103bdc38956783314d48201910adbdf1c719c11eed5b62875a92eab1da7f18bea21c1bc38a276b740a4bd96dc6ae92212579a559fc41860b799efa46f7ed9971ad977c259571921a21e40db5b9c9d873eb8c527ebb8be213d82208a18f9f30671dda638f3c7ca68c891"}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000400000fa0a00000000f8ff00000000000000fb000000000000000001000000ff010000000000000000000000000001000400003e6f17771aeaf39554794bd965b186d18d36ac8852", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 2018/03/29 11:59:39 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x4c2b, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000040)={0x101, 0x4, 0x7fff}) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 0: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 148.550226] x86/PAT: syz-executor4:18431 map pfn RAM range req write-combining for [mem 0x197320000-0x197323fff], got write-back [ 148.565201] x86/PAT: syz-executor3:18436 map pfn RAM range req write-combining for [mem 0x197330000-0x197333fff], got write-back 2018/03/29 11:59:39 executing program 0: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x8000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) accept$packet(r6, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x61) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 0: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:39 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff0400"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 148.781240] x86/PAT: syz-executor4:18497 map pfn RAM range req write-combining for [mem 0x199300000-0x199303fff], got write-back [ 148.796810] x86/PAT: syz-executor3:18500 map pfn RAM range req write-combining for [mem 0x199310000-0x199313fff], got write-back 2018/03/29 11:59:40 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) accept$packet(r6, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000100)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x80000, 0x0) bind$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) 2018/03/29 11:59:40 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa90463ba203000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) uname(&(0x7f0000000040)=""/61) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r4, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0x10) 2018/03/29 11:59:40 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) recvfrom(r1, &(0x7f0000000580)=""/4096, 0x1000, 0x100, 0x0, 0x0) getsockopt(r1, 0x8, 0x0, &(0x7f00000004c0)=""/166, &(0x7f0000000040)=0xa6) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000018c5e60df4ebe82e264da1d18c550000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068f83107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc8) 2018/03/29 11:59:40 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 148.907859] x86/PAT: syz-executor4:18526 map pfn RAM range req write-combining for [mem 0x198620000-0x198623fff], got write-back 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) accept$packet(r6, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x2, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=@del={0x128, 0x11, 0x20, 0x70bd2a, 0x25dfdbfd, {{'lrw(serpent)\x00'}, [], [], 0x2400, 0x400}, [{0x8, 0x1, 0xf841}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x1ff}, {0x8, 0x1, 0x100}, {0x8, 0x1, 0x7ff}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x100000000}, {0x8, 0x1, 0x20}, {0x8, 0x1, 0x2b2faf4d}]}, 0x128}, 0x1}, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 148.983428] x86/PAT: syz-executor4:18551 map pfn RAM range req write-combining for [mem 0x198630000-0x198633fff], got write-back 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x8000000000004e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x23f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c8000000800bc32", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000003f00"], 0x20) write$rdma_cm(r0, &(0x7f0000000340)=@join_ip_mcast={0x10, 0x0, 0xfa00, {&(0x7f0000000140), 0x4, {0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x1}, r1}}, 0xfffffffffffffea8) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 149.149227] x86/PAT: syz-executor3:18595 map pfn RAM range req write-combining for [mem 0x197100000-0x197103fff], got write-back [ 149.178308] x86/PAT: syz-executor4:18598 map pfn RAM range req write-combining for [mem 0x197110000-0x197113fff], got write-back 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 149.314474] x86/PAT: syz-executor3:18653 map pfn RAM range req write-combining for [mem 0x1acc80000-0x1acc83fff], got write-back 2018/03/29 11:59:40 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff0400060000000800040001000102000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)={0xffffffffffffffff}) setns(r0, 0x0) accept$packet(r1, 0x0, &(0x7f0000000040)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x80000, 0x0) write$rdma_cm(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000cbd79ba730920a8099e2c205c752a7eaa9e2efc9d50a5166bb98e9b198f3a00cd0b946fca0ad412c805ffbebb1298eabe16a2c61e2caee73f77d7543f5a926469c33487c5000289327eea895e91b5a27a39d24470d27c76ea9919e2579ffb2edb64ec65ad7ee2e6ded59d21836e29db51da9ef65d822bb1d1794fe7ea6bd791b4b30ee0f7132bfd6722194b8a3e5ec28b55d7c05d52ad3bddbff1668e79cb182b9cee838fc087b662362522aed3d14c5a8f3d682b2d1ef5221e3eff3a003"], 0x20) r3 = openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x40000, 0x40) ioctl$TIOCNOTTY(r3, 0x5422) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0xff) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x108) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000240)=0x4, 0x4) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffffff8, 0x402) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000140)={0x400, 0xfffffffffffffff7, 0x40, 0xffff, 0x5}) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r2, @ANYBLOB="9495f3b8c5d6"], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000aee2170000c5f13bf4beac3800000000000000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 149.404325] x86/PAT: syz-executor4:18662 map pfn RAM range req write-combining for [mem 0x1acc90000-0x1acc93fff], got write-back [ 149.410776] x86/PAT: syz-executor3:18671 map pfn RAM range req write-combining for [mem 0x194ea0000-0x194ea3fff], got write-back 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000100)=0x1e) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff0400060000000800040001000102000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 7: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x8000}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r1, 0x5}, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r2, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0xfffffe4c) r4 = fcntl$dupfd(r2, 0x406, r2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x3, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x6}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r5, 0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r5, 0x7}, 0x8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000100)=0x784, 0x4) write$rdma_cm(r2, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0xfffffffffffffd9b) write$rdma_cm(r2, &(0x7f00000004c0)=@connect={0x6, 0x118, 0xfa00, {{0x1, 0x3ff, "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", 0x99, 0x5, 0x7, 0x80, 0x0, 0x7, 0x39}, r3}}, 0x4e) [ 149.529114] x86/PAT: syz-executor3:18698 map pfn RAM range req write-combining for [mem 0x194eb0000-0x194eb3fff], got write-back 2018/03/29 11:59:40 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff0400060000000800040001000102000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x7, r0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf, 0x6, 0x3, 0xf19, 0xe, r1, 0x5}, 0x2c) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000080000fabe4be1bdcfa9ff5f4a4c2ad4e570a2cddb5185a6b43f00742d3b2a547fd90131a273ece46cc3ddb3f3b091cc1f", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x9, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x6, &(0x7f0000000040)=[{0x800, 0x1, 0xda6, 0xcbf}, {0x4, 0x9, 0x0, 0xfff}, {0x1, 0x1, 0x9, 0x8001}, {0x3ff, 0x7, 0xad5, 0x100000000}, {0x7, 0x7, 0x9e3, 0xa00000000000}, {0x5594, 0x3, 0x1f, 0x3f}]}) write$rdma_cm(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000007ccc4afc67ab7"], 0x20) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x2c0002, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x18c) ioctl$TIOCSCTTY(r5, 0x540e, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 149.643974] x86/PAT: syz-executor3:18734 map pfn RAM range req write-combining for [mem 0x1b4d60000-0x1b4d63fff], got write-back [ 149.656165] x86/PAT: syz-executor4:18721 map pfn RAM range req write-combining for [mem 0x1b4d70000-0x1b4d73fff], got write-back 2018/03/29 11:59:40 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) chmod(&(0x7f0000000000)='./file0\x00', 0x22) 2018/03/29 11:59:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:40 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:41 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:41 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9}) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:41 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e55c498f330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc8) 2018/03/29 11:59:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:41 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000000)={0x2, r0, 0x1}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:41 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:41 executing program 5 (fault-call:6 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 149.815602] x86/PAT: syz-executor4:18774 map pfn RAM range req write-combining for [mem 0x196e80000-0x196e83fff], got write-back [ 149.828656] x86/PAT: syz-executor3:18778 map pfn RAM range req write-combining for [mem 0x196e90000-0x196e93fff], got write-back [ 149.844329] FAULT_INJECTION: forcing a failure. [ 149.844329] name failslab, interval 1, probability 0, space 0, times 0 [ 149.855597] CPU: 1 PID: 18786 Comm: syz-executor5 Not tainted 4.16.0-rc7+ #5 [ 149.862772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 149.872102] Call Trace: [ 149.874671] dump_stack+0x194/0x24d [ 149.878280] ? arch_local_irq_restore+0x53/0x53 [ 149.882939] should_fail+0x8c0/0xa40 [ 149.886635] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 149.891714] ? trace_hardirqs_off+0x10/0x10 [ 149.896015] ? print_irqtrace_events+0x270/0x270 [ 149.900748] ? trace_hardirqs_off+0x10/0x10 [ 149.905050] ? trace_hardirqs_off+0x10/0x10 [ 149.909348] ? alloc_set_pte+0xefd/0x1590 [ 149.913474] ? find_held_lock+0x35/0x1d0 [ 149.917521] ? __lock_is_held+0xb6/0x140 [ 149.921597] ? check_same_owner+0x320/0x320 [ 149.925892] ? lock_release+0xa40/0xa40 [ 149.929842] ? rcu_note_context_switch+0x710/0x710 [ 149.934756] should_failslab+0xec/0x120 [ 149.938706] kmem_cache_alloc_trace+0x4b/0x740 [ 149.943265] ? cma_pernet_idr+0x1cb/0x300 [ 149.947390] ? cma_exit_net+0x2c0/0x2c0 [ 149.951345] cma_alloc_port+0x51/0x170 [ 149.955211] rdma_bind_addr+0x11a0/0x1d60 [ 149.959347] ? cma_ndev_work_handler+0x1a0/0x1a0 [ 149.964078] ? __mutex_lock+0x16f/0x1a80 [ 149.968118] ? trace_hardirqs_off+0x10/0x10 [ 149.972423] rdma_resolve_addr+0x39b/0x26c0 [ 149.976728] ? find_held_lock+0x35/0x1d0 [ 149.980772] ? rdma_bind_addr+0x1d60/0x1d60 [ 149.985067] ? lock_downgrade+0x980/0x980 [ 149.989190] ? lock_acquire+0x1d5/0x580 [ 149.993139] ? trace_hardirqs_off+0x10/0x10 [ 149.997432] ? __fdget_pos+0x12b/0x190 [ 150.001295] ? __radix_tree_lookup+0x435/0x5e0 [ 150.005873] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 150.010693] ? wait_for_completion+0x770/0x770 [ 150.015254] ? lock_release+0xa40/0xa40 [ 150.019203] ? check_same_owner+0x320/0x320 [ 150.023499] ? find_held_lock+0x35/0x1d0 [ 150.027567] ucma_resolve_ip+0x178/0x240 [ 150.031602] ? ucma_resolve_ip+0x178/0x240 [ 150.035813] ? ucma_resolve_addr+0x330/0x330 [ 150.040205] ? kasan_check_write+0x14/0x20 [ 150.044418] ucma_write+0x2d6/0x3d0 [ 150.048022] ? ucma_resolve_addr+0x330/0x330 [ 150.052408] ? ucma_close_id+0x60/0x60 [ 150.056272] ? handle_mm_fault+0x35b/0xb10 [ 150.060486] ? ucma_close_id+0x60/0x60 [ 150.064345] __vfs_write+0xef/0x970 [ 150.067950] ? kernel_read+0x120/0x120 [ 150.071812] ? wait_for_completion+0x770/0x770 [ 150.076373] ? __lock_is_held+0xb6/0x140 [ 150.080419] ? security_file_permission+0x89/0x1e0 [ 150.085323] ? rw_verify_area+0xe5/0x2b0 [ 150.089355] ? __fdget_raw+0x20/0x20 [ 150.093047] vfs_write+0x189/0x510 [ 150.096565] SyS_write+0xef/0x220 [ 150.100007] ? SyS_read+0x220/0x220 [ 150.103618] ? do_syscall_64+0xb7/0x940 [ 150.107568] ? SyS_read+0x220/0x220 [ 150.111172] do_syscall_64+0x281/0x940 [ 150.115036] ? __do_page_fault+0xc90/0xc90 [ 150.119245] ? _raw_spin_unlock_irq+0x27/0x70 [ 150.123714] ? finish_task_switch+0x1c1/0x7e0 [ 150.128184] ? syscall_return_slowpath+0x550/0x550 [ 150.133089] ? syscall_return_slowpath+0x2ac/0x550 [ 150.137996] ? prepare_exit_to_usermode+0x350/0x350 [ 150.142993] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 150.148339] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 150.153162] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.158324] RIP: 0033:0x4548b9 2018/03/29 11:59:41 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c000000080000faef4557dea136f2ad01ae4dce7095cfeb55cd7eb57685441c8b576890f8e57a998336162c1b971c64a714f3fd3e4aa51d34049c13feccb5f409e65799a78c14f9c5fd95669ffcd108d11ebb32daff0a91478604d1ec9e429c9da6e2ab4aa3e08fdf6ce490a6bf718d0e8c84e300fb7ca493bb6f9ca836fcf4cd5dd495590610f992dbe31ecd5589de8a865c0d76965d58e0082ce1581b67484acd3d4d1f62286648d551be597658ea0040ab652f938f1c4a7509743210939c04b77b4252", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) 2018/03/29 11:59:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) 2018/03/29 11:59:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:41 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) connect$llc(r0, &(0x7f0000000200)={0x1a, 0xce81d626685c8fa6, 0x69, 0x8, 0x4, 0x8f5, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x13760000000000, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r1, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) ioctl$TCSBRKP(r0, 0x5425, 0x100000001) fcntl$setflags(r1, 0x2, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="cac0feb59b1a8eb8207b6ca8fee77d547797e790c32b8c6f43e25892787221ca745d8ce241d1c00976d1d88b5cfa7c603c7f4c09de1db08afa74c483d035fb3357a3b060afe220cba47d52a2c132498274f43593600d5688c63e88d0cb72d2549c185730697c94f2667cff40714f90dcfafd9b809af4d831609fb2cbf2bc7565189f65484094ccf7d3c1d8a43bac5cb1551817e4b6a48b33e1a824a64325b2c9b56abbd5cbee508e6d291b03aee8c400880dd243916b00bdb428ab824bd0519e7a897418baab1009c4bf85c0b9576ca27c89021505ca56f3beaaf6c5456b67653c2c07284b595a7696b3f3ca1b0c83600946472428b76366dd46c2f1b52abd5aa4984ad6972d1543ebdd89c80ed793475b7c062f6220d329c49a848dda340e09732771b4c7d884180401c5d60dad9c2b11906c4706746bf985e04c1a6f57143adaef3d2cdec25a6344c5165acbc00392aa4f1fea7718a7aaab19c5b8516f1552cdbdb279c6fb69c885733a75ce3cf3d583d72c65e2ca46c7872447c89a095b0a1718307986e68acfc3eeab066ec2e045d0376735af1b1623c7b8c9c9e82ec54de0d30359f25f3fbcf12d8ae176ec64b33de2a5e62a4bc752bf109c08e81aaba2b37bbe630fb0de319c97270acc97fa2684ea2c41f40b30b7bd0e5c4bf7c57c2a0be88ac4355011f9f423db15d5f77321292c1af5d40b35c4390a6546f9fecf33922e37ae4a82473c3ad7f4e7859e463e828a5b58743facc868020ef5f32eb06942ad26141e9f1eb7d7883b165192a3245b43d997baf09ab8782a056f4a42c7df77f720ac4fb898a4a2f3208cde8f4df6645bb185baf212308b594846d3a216ce52a904ba0406d1c82618c1c3a0cec38de9b54e76a4526badaade05b2e8f00768320fba6d37a2d4bc985fb0a3c3166a988a63210e963770844488717b3b6af538e881971618d0e6baa11a5a8afc32b13a421567636748e806fb7afd5554484100cb95130f62bf3d2dcebe510d5778f6a6a04ffc5858e8e23fd04e621ac742fd13c5e9326cd6c003047895b297f85476d24323cc4069c183f3a119c91f3a88c1288ce502e6e32499a2ed550e132ebeff58416472c8194a3ffb64e55940b8d73cc0c8f6a2150384487088eec2c74c5fd12cf344c32bdf7592dc61ce4e8182b9f8e051636c25f11566306c6bf5207ccda2d126be1c4864b21f75eb64e5d6b69be9f28eaf3249b2d036fe0e1521571e67e9724b59d967dbd82f9662aaa69cf8aed737b45b6a154e286b6fae6fb41360841b18f89f57c1e1a29b599de57a20fbd7514588c78f00d1f19bb5495ae33d3b3ffca087076c0f2fc07b91d466d3abfa12847ff7f48f2d5fd0106d7935efcc92481ec4d8f7faf5daa986c4521587eb17b3830ebed1c8833ee3b7a62d7b54d1dca887cd4a2c1ee287ece3cbbc415f9ac6bea156a6467cbe9fa97d75202bfa3f0c9f3bff0a32cb2c31aa7659b38a5df62ed961b3d4ffc88179f77cdc928cf026d7b3fdc0abf4389721343b057fe43aba8cc98add157d09f87bf06e87003ce32479f5da210d6c58403127d9a03bd1b2ee1f4b0135005d6c66caabef594ddf4c6a74fcd96b7de908a6885f989e011c0a1486ced12c20716df706fa8f071f9ec1f72f9cd3327a8ef32506e9e1e399b3dffe5528649210184ca67a7a463d4dbe7158af48cdb6a0394d4af2e421260e92a0b6e0520e4e4a8cc271150088a1aa962a737abd9f6d35466a3480ca7ebb4b7fe8d7bc99b051d493653298ae661e2402b94a02824b0d71e0df5fbbaf67fc2f9ff7903bd2e0704fe14337b36da785e517cc5bcd77f8e36c0daae30788af78ef1e814f884da007941d412eeb6fd845180497b56f25800102d058216a5b364d2af5a6b769d5c6c2aade610e572438b49b317c320e039bce00e1be73baffe30fa0ca5c1eac3a1d67070f523c65cbc9c6f649e5e0ad1fa3429a722686b10aa7533fa61f0442b1bda26220ff0b2bd1d0208dc4e4567457fbc471e39c4c6c99d7f1d66d1f43b0277c2595e7b3e43a6d1a4d4f8fd45bccf8f98a502c60b05999f031a2329427f3993b5c66d382001a28e2303b2feabf1ecac559a823f39d494597eb4c5032222251f553c99f5bb95ceb392c2b0092485cd8b2a8f02b5546d4340703039e22b42254c7d3d501e0b1505664b15612dc33d038736778bbf072f72fff7bebb9c3c66d51f7f0d8fc3b09b418f528aedeea1397a61179ff8f131bd772332a5b9ff0af68f2333ed2cb549604210164c97fc7835ff1a211efc8c1e9fb3beff4f6facc42f0b05a42147ca05e1c3874033a9b0968bee8392899d23c83e7db247c51543f14ba0ed2774263f49f7d2de63ae030cdf7b83f7269969bb7204066d74f05c77e711ffe3410427adc183dda21d72eba9198388b498991ee28e40b130d551f017ef4a6cd2ef9e8bd922a5b48f33d11ee9d0924cd05b8466e790b5fb3c7e34d4643708eeff6e5ca151afa98d94db6890d4861bef68370e1bcc561a33ecfd3df0afee870c06ac2c13dd1cfc11b7254c275f6d2fdf00b680d234cd395727d7343f7c9bd86de87bdf43b2c067380d1aa11152c3d840cbe2c364330bbd432d341a896b6a7ad48f7e50d64c1acc93d90582d14eaf332b300a51fb22b0f466c1e3103c00f02564061f2f232ff7557a2c0d50bc25699bae994c64fbf60a7e6cbb06321bcea92b55eefce46db0028f3bf203c81e809af393a0fd4489a845efab47a103087e836cd7f011c47f8aa0e45781b728081f98d74bbcc35f200ee961720eac2a18ad93ed256f35099e42a8dafd5da049e05e22b13490fc86c0e434435039b33e431f3dfbbe26f68d84679a4dc2fd455a7319cb7c889b467c8666287946fcb2423a950f8893b1b195795a1ffcebd8b1f62b465cae06a4bbbee21ed2a69b14c1487579dea6b394d713b8f2366fc77a3b9a22eb6e7874b382fe0e8d9764c0a6b1dfa44374e8e796088cc92fc8da60d5ffe413adf137f5ff1e81162ab95e0d14194f64fc90c47fa87d6a7ff637c66aa1d7443e0f4e03bc9a8daade3a5f7a4561eab8ecf89c3eab1d96cc38bc915bfdbf45f420ccf8239c6d7ee5d59f7d79a26ea7bdb719871a16d79e2a09c318980fc19448ff70a48277090f1e509e1a54a346d116d4dc4ea3ecffde1b1925e0ace8b24255eabf297260c7e8d22d5681268d4522b58de199c39e5c1522b60adc1721b3d7c63b129ac1e2d4b06038f67ba0bb37ed91c26a3bcb6fd9af6e2a47fa062b546f9deb4418984d2c4ad077f7aac13dc12ab21e0a80b970f633378814c49735cef5e032460c1b771f193dfb59b831ac35bf0ffe69e45d67d310245fbe371509ac0f52a42a6f64511e9424491f39fcb76e13e093f2250d3ea22b225e3326cb15226030aed22c7fc536395f9f3d3f8efe31e616b0c9d7abfc2869c15daea1977750030c1ba0c0ed0a9dd0fb0f3469d47931c9df6f8b47dca31ace5531e06c1152b7e1790c564cb25a2129895cbac77f59e2e1c049ffa618889628323e47e38480b0979d4c4e67fd3d2964da1123944d67fee46e1493ea8f515dac46822fd5bd28910d314628d53d749ba09edb0bfa876ec2c6d034ce8f62b204993feae9eac322626ff5b16b4177883328df7d03b96c14c78e883b7f214df78235d91320c2982ede1b1b0030cbb55a7d7cf42bcc5814c0f8fd390f7031ca427d9cada595977b2ee1902229c9e67cf8be5f969a88277e01bbee49e7b3b2f31602b41d7e590c25d579544f36e0a03ba1fa510d4130e9b1dfe67ad5aa7d88d004ac49f251d59cf70929dc08f22f424c6f7f26784ee513724e293fb74f8099a883131a9a2ac80edaba6925ed7d50b34ddbb19be47feb4e69256c075675ad2acc5ad78ba98f8481322121371fcf980352a30631067c9dc238f66b798485e88d130ad3f59d86a27f920cbde3053b1cb776ecd04371e60fa9782bc05ec45add42fc0502c5aa51f3a40a58f31bb650e941066bb112e9ce054e9e1a037944c2001f2e77565e41f56db0921e572d693764f18215d054533f94575fed4193990c9a045a116fa0330ef7e379d8a8bf385b9a32249ef2ddd594113642b31c83529c55954646982c79ee848e42d26149d99e004c001f50d33c05192a39f6f02b6259b7aa2131e531e92215c81f70d5c6ad2bb6890fef2dda354c0a07493cb839da62e67cba2f7fa3762675fa1d1e5d8bd3d1bee4fac7273763b964c4c638ce59b9dfa26df1eff6e3fa17a6a6639b95aca638921cfff284272ad6bf137f740737f7e9a743ff8b1cd78ea51e2539890977853546c587a0ebdef4c1f076f8c3d68d529072e96a81bb3575624210fc201d396b2aa78fad2d3e8c12652962fded3ac355b5f6f1d99c83f35131b189cf4eb190c58339fd4c57dc206f6599bb189102c531fd11e452efb226e68305417ff0ea82e9c1e1d778f5b20e8b4ef98f524c9f78e3f6eb0ce4293832c8bf8ed468b5231234cddddd1d896f77998da7f0931a50e98548cf5e33825539f66cd7b15918021b2ba3157d04aeaed95db58a3a89087e0ec61d5d80cb7d8bcb7fcae385362accea6394495365687f164e0e4df3fbc90c97738794a1fafd7b34b5ccb58a9a3f9d1d909a8fee0ffc40f4252af158864a067b5713b172219c3c7678f073b61c9940103a172be3a37eb1852663b8906362c8b0b715deff58aacb85f9ccd0db2161e9b40aa353b0b51c2d9fa550b0bb46682763bf084563ea74b8d81b96e65b942f245a92fdc95994dfdd9a6feef3ea803ab83626ae004d08204d69b701e53bb7c68417f05eb498d13323340ce62c7d7d304fbeedb704eddc7bbb5c507ee2f3d8555855d9cd47e168a54c1200ddfe2cee6c3e67e444dd0c5473d7a17cf73e3a1efa47ca20ea4a517413d6a8698ab4379eaabbab27c5a77f8e645ee1e855a8f40321b7b66a605f821fce5b516f9101363852be2f76c9399f9a0d84f904d28c90c66d02d62583d394c15bd0b749def6ff819a5aff674834b11fe52e2a263af300d95c00b3970dacb1614f7671c27307bce2d4d31a831093d613132227ab9c6dc5aeb0ee9c92760ac9c67fe23f3f5e91a713ffcb9393ad0155a0abf017b74c071446dc14cd9c412535666eabd3aecaaa65cfab671c343a31b8d4a1b75c3f8e142d7389a24d6b7d7397fde3ff423bb788ddff9e53d6b863381f1a9c6898a65ef728ad8a79bad98546a20b0b07ddc179e1e0e10318be0bc0bf118dfc989d53b267cd6b900cf3fb1e32295420a4371706a246db11bf89c742de9d31263acd3b7edc2438892d956d099d10754062da30e1d4fb4092aa9bbd456d43ab57f12410ee6569eb6b74f2ed54964718f9852e76acc32fbb2756981ee4e207271695c7142180401783b586a28cc5395fcece7befa0657c09576ad6d0f49e782eed0af64ca5f84de7bfbf36bedc64094e82396035e990599eab585224271805b741a497fbf4e93bd6a10d5c3e238b1141e1a02542a8a48d5e5d476be14db346d1a2e514d41270c70f0fbb9133602dd5378626ddcff81e77803c4a69533a6ccc32b979e91f1c82ba4fe9425e8a0c23fd2b383c0df9670a4d90d4ee28b31ee92126b3e31364a7d57600055dbbabd52a43f15b87087c57ace80823d62391fb6b4a49a18a5b48fc426a1d5f39afd87bdbafc0546a47a367ec496488380b4c61f7799c30acc34923e5ad40a8e87468f526c5e8e76a01f21f1b53d619d35937ba50eabaf0aaf215a4e6e219f2f177726936562b0dcf0f51c8592eeac33eed5c4a0c53adaeb0a6d", 0x1000) write$rdma_cm(r1, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r1, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 150.161489] RSP: 002b:00007f1e0808bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.169170] RAX: ffffffffffffffda RBX: 00007f1e0808c6d4 RCX: 00000000004548b9 [ 150.177282] RDX: 0000000000000048 RSI: 00000000200003c0 RDI: 0000000000000013 [ 150.184528] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.191771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 150.199020] R13: 00000000000006a9 R14: 00000000006fc078 R15: 0000000000000000 2018/03/29 11:59:41 executing program 5 (fault-call:6 fault-nth:1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:41 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000100)=0x4) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:41 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:41 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9}) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 150.305795] FAULT_INJECTION: forcing a failure. [ 150.305795] name failslab, interval 1, probability 0, space 0, times 0 [ 150.317160] CPU: 0 PID: 18813 Comm: syz-executor5 Not tainted 4.16.0-rc7+ #5 [ 150.324349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.333696] Call Trace: [ 150.336271] dump_stack+0x194/0x24d [ 150.339883] ? arch_local_irq_restore+0x53/0x53 [ 150.344549] should_fail+0x8c0/0xa40 [ 150.348246] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 150.353328] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 150.358507] ? perf_trace_lock+0xd6/0x900 [ 150.362638] ? find_held_lock+0x35/0x1d0 [ 150.366686] ? __lock_is_held+0xb6/0x140 [ 150.370754] ? check_same_owner+0x320/0x320 [ 150.375054] ? lock_downgrade+0x980/0x980 [ 150.379178] ? rcu_note_context_switch+0x710/0x710 [ 150.384098] should_failslab+0xec/0x120 [ 150.388050] kmem_cache_alloc+0x47/0x760 [ 150.392089] ? radix_tree_node_alloc.constprop.19+0x2d0/0x2d0 [ 150.397950] ? is_bpf_text_address+0x7b/0x120 [ 150.402431] radix_tree_node_alloc.constprop.19+0x5e/0x2d0 [ 150.408682] idr_get_free+0x9d0/0xfd0 [ 150.412484] ? radix_tree_clear_tags+0xb0/0xb0 [ 150.417043] ? perf_trace_lock+0xd6/0x900 [ 150.421165] ? unwind_get_return_address+0x61/0xa0 [ 150.426070] ? __save_stack_trace+0x7e/0xd0 [ 150.430370] ? trace_event_raw_event_lock+0x340/0x340 [ 150.435551] ? save_stack+0xa3/0xd0 [ 150.439154] ? trace_hardirqs_off+0x10/0x10 [ 150.443447] ? save_stack+0x43/0xd0 [ 150.447063] ? kasan_kmalloc+0xad/0xe0 [ 150.450924] ? kmem_cache_alloc_trace+0x136/0x740 [ 150.455741] ? cma_alloc_port+0x51/0x170 [ 150.459776] ? rdma_bind_addr+0x11a0/0x1d60 [ 150.464072] ? rdma_resolve_addr+0x39b/0x26c0 [ 150.468541] ? ucma_resolve_ip+0x178/0x240 [ 150.472750] ? ucma_write+0x2d6/0x3d0 [ 150.476532] ? __vfs_write+0xef/0x970 [ 150.480309] ? SyS_write+0xef/0x220 [ 150.483916] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.489277] ? find_held_lock+0x35/0x1d0 [ 150.493338] idr_alloc_u32+0x1b2/0x390 [ 150.497207] ? __fprop_inc_percpu_max+0x2a0/0x2a0 [ 150.502032] ? __lock_is_held+0xb6/0x140 [ 150.506082] idr_alloc+0xf5/0x180 [ 150.509518] ? idr_alloc_u32+0x390/0x390 [ 150.513560] ? cma_exit_net+0x2c0/0x2c0 [ 150.517524] cma_alloc_port+0xb0/0x170 [ 150.521392] rdma_bind_addr+0x11a0/0x1d60 [ 150.525549] ? cma_ndev_work_handler+0x1a0/0x1a0 [ 150.530278] ? __mutex_lock+0x16f/0x1a80 [ 150.534322] ? trace_hardirqs_off+0x10/0x10 [ 150.538637] rdma_resolve_addr+0x39b/0x26c0 [ 150.542944] ? find_held_lock+0x35/0x1d0 [ 150.546993] ? rdma_bind_addr+0x1d60/0x1d60 [ 150.551294] ? lock_downgrade+0x980/0x980 [ 150.555422] ? perf_trace_lock+0xd6/0x900 [ 150.559543] ? lock_acquire+0x1d5/0x580 [ 150.563495] ? trace_hardirqs_off+0x10/0x10 [ 150.567789] ? __fdget_pos+0x12b/0x190 [ 150.571655] ? __radix_tree_lookup+0x435/0x5e0 [ 150.576233] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 150.581062] ? wait_for_completion+0x770/0x770 [ 150.585641] ? lock_release+0xa40/0xa40 [ 150.589597] ? check_same_owner+0x320/0x320 [ 150.593911] ? find_held_lock+0x35/0x1d0 [ 150.597983] ucma_resolve_ip+0x178/0x240 [ 150.602023] ? ucma_resolve_ip+0x178/0x240 [ 150.606236] ? ucma_resolve_addr+0x330/0x330 [ 150.610637] ? kasan_check_write+0x14/0x20 [ 150.614854] ucma_write+0x2d6/0x3d0 [ 150.618463] ? ucma_resolve_addr+0x330/0x330 [ 150.622847] ? ucma_close_id+0x60/0x60 [ 150.626714] ? handle_mm_fault+0x35b/0xb10 [ 150.630958] ? ucma_close_id+0x60/0x60 [ 150.634822] __vfs_write+0xef/0x970 [ 150.638434] ? kernel_read+0x120/0x120 [ 150.642302] ? wait_for_completion+0x770/0x770 [ 150.646887] ? security_file_permission+0x89/0x1e0 [ 150.651799] ? rw_verify_area+0xe5/0x2b0 [ 150.655837] ? __fdget_raw+0x20/0x20 [ 150.659552] vfs_write+0x189/0x510 [ 150.663337] SyS_write+0xef/0x220 [ 150.666776] ? SyS_read+0x220/0x220 [ 150.670392] ? do_syscall_64+0xb7/0x940 [ 150.674347] ? SyS_read+0x220/0x220 [ 150.677955] do_syscall_64+0x281/0x940 [ 150.681819] ? __do_page_fault+0xc90/0xc90 [ 150.686032] ? _raw_spin_unlock_irq+0x27/0x70 [ 150.690508] ? finish_task_switch+0x1c1/0x7e0 [ 150.694983] ? syscall_return_slowpath+0x550/0x550 [ 150.699891] ? syscall_return_slowpath+0x2ac/0x550 [ 150.704798] ? prepare_exit_to_usermode+0x350/0x350 [ 150.709795] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 150.715148] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 150.719975] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 150.725140] RIP: 0033:0x4548b9 [ 150.728305] RSP: 002b:00007f1e0808bc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.735989] RAX: ffffffffffffffda RBX: 00007f1e0808c6d4 RCX: 00000000004548b9 [ 150.743235] RDX: 0000000000000048 RSI: 00000000200003c0 RDI: 0000000000000013 [ 150.750485] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 150.757733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 150.764981] R13: 00000000000006a9 R14: 00000000006fc078 R15: 0000000000000001 2018/03/29 11:59:42 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 7: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000d80)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000d40)={0xffffffff}, 0x117, 0x1000}}, 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r0, 0x1}}, 0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xf}, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffff00, 0xffffff00, 'nr0\x00', 'gretap0\x00', {0xff}, {0xff}, 0xbf, 0x2}, 0x0, 0x120, 0x188, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@unspec=@rateest={0x68, 'rateest\x00', 0x0, {'sit0\x00', 'bpq0\x00', 0x2, 0x1, 0xffff, 0x9, 0x9, 0x5, 0x100, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x401, 0x7d48764e, 0xffff, 'netbios-ns\x00', 'syz0\x00', 0x9}}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x388) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES16, @ANYBLOB='U\x00\x00\x00\x00'], 0x47) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000200)=@connect={0x6, 0x0, 0xfa00, {{0x2, 0x20, "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", 0xf2, 0x400, 0x40000000000000, 0x3f, 0x0, 0x1f, 0xb1e7, 0x1}}}, 0x11f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0x28, "b67efbd86767a08419b8e811282f8055346cc686a1f813ad5ccf78836d00cdcf7dce946ab0b0cd8d"}, &(0x7f0000000340)=0x30) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa040000000000000000000000000000000000000000040001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 5 (fault-call:6 fault-nth:2): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) 2018/03/29 11:59:42 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9}) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) 2018/03/29 11:59:42 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000152583c0369ab99f00000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x24) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x10000, 0xffffffff831d443b, 0x5, 0x7, 0x8, 0x3, 0x200, 0xfffffffffffffffb, r4}, 0x20) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000400000fa0a9819bd2556a4fe6c0000000000f9ffffffffffffff0001000000000a00000000000080ff01000004000000000000000000000100000000bbf2", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 150.860104] x86/PAT: syz-executor4:18846 map pfn RAM range req write-combining for [mem 0x18f120000-0x18f123fff], got write-back [ 150.880680] x86/PAT: syz-executor3:18850 map pfn RAM range req write-combining for [mem 0x18fdf0000-0x18fdf3fff], got write-back 2018/03/29 11:59:42 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 151.001867] x86/PAT: syz-executor3:18885 map pfn RAM range req write-combining for [mem 0x194580000-0x194583fff], got write-back 2018/03/29 11:59:42 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff0400060000000800040001000102000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x1, 0x3, 0x7, 0x0, 0xd72f, 0x20, 0x9, 0x1ff, 0x0, 0x800}, 0xb) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000200)=0x68) write$rdma_cm(r0, &(0x7f0000000240)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa1a0000000000000000000000000000000000000000000001230000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) fcntl$notify(r0, 0x402, 0xffffffffffffffff) 2018/03/29 11:59:42 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xff, 0x40002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000200)=0x1000000000100) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x1000, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0xfffffffffffffd86) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000080000fa7d6853e3a0bc1f0a47f049860b605326def1a470900a78681d712db6459a6f187071049f548c7b5d8fb40bb1ed25e0818ffa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 151.110193] x86/PAT: syz-executor3:18912 map pfn RAM range req write-combining for [mem 0x194590000-0x194593fff], got write-back 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc8) 2018/03/29 11:59:42 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0xfffffffffffffffd, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x9, 0x8, 0xfffffffffffffffd, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000dc0)=@join_ip_mcast={0x10, 0x30, 0xfa00, {&(0x7f0000000d80)={0xffffffff}, 0x1, {0xa, 0x4e24, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}}, 0x38) write$rdma_cm(r0, &(0x7f0000000e00)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0xfffffffffffffc9f) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000001000000000a00000000000000ff01aa0000000000000000000000000100000000", @ANYRES32=0xffffffff, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80102, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000100)=0x4) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c001000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x9, 0x408000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x200000, 0x0) r2 = accept4(r1, &(0x7f00000004c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f00000005c0)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000180)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x20dd}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)={r6, 0xffffffffffffff0b, 0x3, [0x3263, 0x7fff, 0x5]}, &(0x7f0000000200)=0xe) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r5, &(0x7f0000000240)=@resolve_route={0x4, 0x8, 0xfa00, {r4, 0x6}}, 0x10) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 151.305250] x86/PAT: syz-executor3:18970 map pfn RAM range req write-combining for [mem 0x1ad410000-0x1ad413fff], got write-back 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r4 = fcntl$getown(r0, 0x9) sched_setaffinity(r4, 0x8, &(0x7f0000000100)=0x3) 2018/03/29 11:59:42 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x20b, 0x1, 0x3, r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r2, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r2, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r2, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x28) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0xdb3}, &(0x7f0000000280)=0x8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) r4 = dup3(r0, r0, 0x80000) readlinkat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)=""/4096, 0x1000) write$rdma_cm(r0, &(0x7f0000000100)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0x10) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000040)=0x9) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x100000001, 0xfffffffffffffffe, 0x8001}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0xfffffffffffffffb}, 0x8) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000240)={0x1000003e, 0xffff, 0x10}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f00000004c0)) munlockall() syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r5}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000380)=0x4) 2018/03/29 11:59:42 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x200, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000100)=""/83) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1f, 0x4) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 151.522702] x86/PAT: syz-executor3:19026 map pfn RAM range req write-combining for [mem 0x18dd60000-0x18dd63fff], got write-back 2018/03/29 11:59:42 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0x10) 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x42, "322ffb75617c2269c13058251f260cfe9fe33932fcb51aa7cdc95936dce998e843127ad174ae8316e16dd82a64610522cc2da33d872b7ab2d280f0454b7b2c1fb6d2"}, &(0x7f0000000200)=0x66) getrandom(&(0x7f00000004c0)=""/248, 0xf8, 0x1) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff0100000000000000000000000000c300000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0xe00, 0x14, 0x3, 0x7, "5225804f5fe3f7e7448f1db35110f29d96d3fb4a4a28beebcb4f1f9628a2024e"}) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x4d) 2018/03/29 11:59:42 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x0, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x3, 0x0) write$rdma_cm(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0cf4ff00080000fa00000000986981de71b2f165509b9f9a7d0b2357d77c3b5a22506f6fa7f9f9af89d7b93cbb23093c99a430729b9bd3cc65e6f8d5199073c252984908f89d38a9260d412dc719aa318bd59e29a0138109e89644a58bceebc4db23646aaca58511b29a6b7007d80600000000000000b79b8b714f3cb6a703c9fb1c2ebe33916811f0fa2d3f334c70b402c8849a4a9e8ae4c4e268801489178e5194353535abe9522d2abc9b1d3b44391d7920f7b0cf75e2921d1f4c3417893a8c95366903c34c9c3eeecfbef11d8d701c68956eb678fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) connect$nfc_raw(r2, &(0x7f0000000200)={0x27, 0x0, 0x0, 0x6}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000140)={r5}) 2018/03/29 11:59:42 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0xf4, 0x25, 0x100, 0x70bd29, 0x25dfdbff, {0x2}, [@generic="a9a3379fd9fe5233c53ef8f99bd5c3dc978f8b4a297613b075c3a6190a93714234bc5f8aef5a06e470204511af800bb60536bd89aaef2f98abf43d79ff7e9e3a1929ca581bcdb69732a3", @typed={0x8, 0x34, @u32=0x400}, @generic="b39517d8dd91f9e1e110fe081d1918be70fd1a64c947404bf3736753d594361e68861b3871e0e452b923d36864d505119df920210735ffdb02cc30be1e63b9adb99a99387f0cd924ad380cdeab7fd8fa4a51d19b9def1dc1d421ff7a330b75f27f3c9ff60dd76361d6b389b9cf49366c9befc0908d63e11f96435b76bea4026435b8a190baede9ea54b862"]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r3) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 151.668740] x86/PAT: syz-executor3:19077 map pfn RAM range req write-combining for [mem 0x196140000-0x196143fff], got write-back 2018/03/29 11:59:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:42 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="03000000000000004fe96533ef833a2a2793a9d43e765129203a092c9b36e1a01301f71bf474efdc9ca27879c0c945957fc96f9dbdd7b97e74610400000000000000dc8efb6b15a34b166e8032feea8f4e71a12fa698e0b0448cb1857ee8097b5d76160b29529a9f8680f1c9f1ccd25a981c438713777fb34dcaa30fab9fccaed820adbdae818941bb162cd00268782bc5243f2e6e538bb0"], 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) accept(r4, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000040)=0x80) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x0, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000007f000000fa1300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000005c0)={@remote, @broadcast, 0x0}, &(0x7f0000000600)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'ipddp0\x00', r2}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x67c601, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="e1000000b37a8baa934f7c7f537eda892386607bdcc271c8fa36ab906403bf62330de78ad3cf2573b10404733184969e36d70aed65b9d88b13d85333a31ea55b1d39c0838d32bdbb4ded587cb0e3868f95f4202df30a4e66473281e2cb181fccf44410fc3dee62c9732a353fdc42504f6eda022601c801efc978d9246de65a1781b89e9ceecfac78b957dc2abf4e2a031e1c1dd52d3813eeb7f7518bab539350a6be31542a7b3a757f7807a54827a957e72e00843181853abadd0aeb00971747257e73fc65254f406c108b249773e03b05664b2031847a6f16b30c63d87084f50736386586784e5d4be0dd8f4f034fb992d5"], &(0x7f0000000040)=0xe9) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={r5, 0x80c, 0x8}, &(0x7f0000000140)=0x8) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, r6, 0x2}, 0xc) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000003680)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003640)={0xffffffff}, 0x13f}}, 0x20) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$cont(0x1f, r4, 0xfffffffffffffff8, 0x1) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03b5bdcdce27982906b2fffa84000000000000fa0a004e223607263215500021000200000000000000ffffe0000002f7ffffff0a004e23040000006c8c000000000000000000000000000000", @ANYRES32=r3, @ANYBLOB="ff030000"], 0xfffffffffffffe6b) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e20, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x7}, {0xa, 0x4e21, 0x100, @mcast1={0xff, 0x1, [], 0x1}}, 0x5, [0x0, 0x100000001, 0x9, 0x6, 0x1, 0x8001, 0x9, 0x3]}, 0x5c) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x0, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x2, 0xfff, 0x6, 0x80, 0x0, 0x4, 0x80200, 0xc, 0x100000000, 0x96, 0x6, 0x8, 0x4, 0x0, 0x10000, 0x101, 0x8, 0xfffffffffffffffa, 0x7f, 0x9, 0x7f, 0x2, 0x4701, 0x4, 0x0, 0x40, 0x4, 0x7, 0x6, 0x2, 0x10000, 0x8, 0x3, 0x8001, 0x6, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x81, 0x80000000}, 0x1, 0x8001, 0x100000000, 0x4, 0x2, 0x3, 0x40}, 0xffffffffffffff9c, 0xf, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000100)=0x4) [ 151.996565] x86/PAT: syz-executor3:19127 map pfn RAM range req write-combining for [mem 0x196140000-0x196143fff], got write-back 2018/03/29 11:59:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000100)=0x80, 0x800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) getrandom(&(0x7f0000000700)=""/119, 0x77, 0x3) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000380)) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000580)=[0x0, 0x0]) chmod(&(0x7f0000000040)='./file0\x00', 0x140) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) r9 = getegid() getgroups(0x6, &(0x7f0000000640)=[r4, r5, r6, r7, r8, r9]) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000140)=0xc) 2018/03/29 11:59:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000006", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x0, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r1, @ANYBLOB="04007b43"], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000100)=""/103) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 5: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r0}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r3, &(0x7f00000008c0)=@join_mcast={0x16, 0x98, 0xfa00, {&(0x7f0000000240)={0xffffffff}, 0x3, r2, 0x30, 0x1, @ib={0x1b, 0x4, 0x0, {"5722bfaf05f3fca1fd7306c947042dd6"}, 0x5f, 0x23, 0x5}}}, 0xa0) write$rdma_cm(r0, &(0x7f0000000340)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) fcntl$setsig(r1, 0xa, 0x16) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)={0xfff}) 2018/03/29 11:59:43 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}}, {0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000001400)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000013c0), 0x106, 0x1}}, 0x20) write$rdma_cm(r0, &(0x7f0000002c40)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002c00)={0xffffffff}, 0x1, 0xf}}, 0x12b) write$rdma_cm(r0, &(0x7f0000001440)=@reject={0x9, 0x108, 0xfa00, {r1, 0xee, "29ce01", "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"}}, 0x110) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup2(r2, r3) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000040)={0x79}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe0002", 0x21) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000a80)={"8a927799b01a029f25061eda96dd379385fc78b28fcbf8eb8455a6fb67a8de46d4d40000a01a47191dc792f414ac8437036bb34b6632c980073c4cdc084a1966c440f15811d016f5b50e90810603f10a2c83eb8c062194269ab67e4bb4b3c5199cadd60d3f6fc72a7eb011b622072532229fbc9d9c4d1e045191ee2b0d584c8fd736ee3e7d73d5267b67a69251b101000000692d30ecfb80632608000a7a24aa58b111193c88181907d958cb00807d63dfb58775215937ae2b62b46c6d5816f2fc52eeab0000000000000003252929e628ad2c34a0ef717fb2504d9bd66eabce002faf0512145c072f3087a5566c38fda729442c3ebd62e970a9a3eb242747993601a1a186b8376d39c69c4ce503cf638feeae79436a3c00000000000000380fa7b4c9c2d674b80ef220109f8fa8200de4794547b4da6430ac512116d358949a298812c5d54017aa2fc8b814ecf28c41d4c83474ba93a8ad32b16371b42359bf984abb465228cfd848e54abc383d21d0a3315f1b8599efa1bf10bd30a1371757b13aed4a19db7c777995fd42ad446d9d2755f8552563c7639ce00da8ee3ece9ded52625aa3f0a1d7b76b32536d39eeae1582710632a79bddf1032b6e6ac794f37ec9d0c3b44923cc7b631c6df64f28d75d99443d665bdb3c6b7961190e8f82a233000001002ce4f47168ef93f01aef51c60000000000000006af34b21ed8437a371c0b427cd8c95f3952ee752b758ea9fa443debf5a2d7cdbaf1a2a23d68cb0886925599fbc1361b8ce27b41d79027894b6c0003cc97a64088edf383a51eef947915369bdd4fc3cced2663d17515838f8fa1a284c5b6ffc5251019eaee59d117d34c73e50fbd33ceb4508cfa0100000000000000114a13542dee77b2651783f6a5d9260036ccc70d695101d1ddb56f1ac26584547d8d5cecb3c672068cc7ab31ddc5ae0a253b587d712c6110acdf49fa0100de0f7b3717280d35b7e70733538a8eec8fb17616d2198d02ba4e7690fab7933b676deddb27755d6a8f29c643dfff0e4bd7c2b13b7a57a3120cb2cbb70200339dc0862dafad481a63e5f90d14c54803d8b100e0ad5cae9a0a7b2f329c3b0000000000000002f4b2eebf781ec7ed16d988d46575a31f81121c13c7cb674ff41cb3c7f6896d41e86bda845164825e28b9fb719e695a9eb9710f924aefde1c96bebe4274594038347691a088f90400000000000000fc24388cc15dffeda1bd610582c5b74fa6c6e789ce440f71871a5e8b85000000005806743e8e075b8624686feb21dbdb9afd74dd0067d82a72c099a2d52a599494388cb56cdb5ef9190980f9128e689e07e98b2ed59e1537fc7de144dc2030374b0f5fcfd8f2ef242803f7bcbc07145f65b8912a4a335b858de8acf080852c49d353a00a5aac3d6a33e0075506a1fd25799f1637b1bafaf09954ef"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000540)="3e0f0d3ec4c289b6955179000065660f3814e90fc75e0bc4c34949cd5eb9800000c00f3235010000000f302e660f38826217c4c38d7f1c3a86b8010000000f01c10f2004", 0x44}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000140)={"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"}) write$rdma_cm(r4, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x5a) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5959ff6000000000000000000000000400000000000000c00000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ec8319040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000111cff6daea0fae21c2e753efab4959da0e67763083cd9bc8c1a7d0974fdd4e5bd03feb26ed3a5ea5688953f30a95d35e35d1b1bafc38df1b135bdce9d91f4a8542597e8"]], 0xc8) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 152.177632] x86/PAT: syz-executor3:19185 map pfn RAM range req write-combining for [mem 0x196150000-0x196153fff], got write-back 2018/03/29 11:59:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x401, 0x50001) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000faf16d224e000000000000000000000000006369c58ec4767f90ae0000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) connect$unix(r2, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0800e6ff070000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000000c0)) write$rdma_cm(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="00000000000000005ecc47a9570d183f4c99280d652d4cd29f6376290eff51eb7951e5de247a43aa1104312767024372e15a99d8709c6870c9335cc88a1810592b2d78d63f928fb7c243f9b2aa87d0c77491e279d81c05b799e0c70ccf62fd2ead3525807b2155c3e3bc80c30d233d33342fa17ef8341e3b"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB="00000000499fdd86717daec72e2cdda33b7b13007f7403000000eb7885c62e697c3e67c27864777d94"], 0x6d) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[], 0x0) 2018/03/29 11:59:43 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x12, 0xa4, &(0x7f00000004c0)="9df88406a1b1db95f64c6b9770ccf7c696ffd8b1dc86473ff70739993f67921e226fefa45d93525f2eb7fa776fe9d90a305c1e1098260bc3e1476d8348cf0dcdbba702d78d3235b4a48747b08ce0912f21a782fa17b746c49f2d0ba9f2ec501352d6b0f3cdc179338de91f68423aaa0b1bdec5eb9342d3fa18ef2d8b3d99e6eb9e903990ad4917c45bb3872ca281c222904c99d0b56badcccb993944f4f0a5c95027bd4c"}) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff040006000000080004000100010200000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0xffffffff, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1, [0x0, 0x1c, 0x3, 0x7, 0x7, 0xff, 0xf442, 0x4]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0xfffffffffffffd21) write$rdma_cm(r0, &(0x7f00000003c0)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r1, 0x1}}, 0x18) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 152.405864] x86/PAT: syz-executor3:19247 map pfn RAM range req write-combining for [mem 0x1af570000-0x1af573fff], got write-back 2018/03/29 11:59:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000200)={0x5, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7a30000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) r4 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x8001) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000500000000000000000000000000000000000000000000000000000001000014000a00000000000000ff01000000000000000000000010000100000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, {0x3ff, 0x0, 0x7, 0x3f, 0x5, 0x2}, 0x1}, 0xa) ioctl$sock_ifreq(r2, 0x893e, &(0x7f0000000100)={'sit0\x00', @ifru_flags=0x5002}) sendfile(r1, r1, 0x0, 0x1f) socket$inet_sctp(0x2, 0x5, 0x84) 2018/03/29 11:59:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 5: getsockname(0xffffffffffffff9c, &(0x7f0000000100)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000200)={{0x6, 0xadc, 0xffffffffffff4b5d, 0x81, 0xffffffffffffff7f, 0x4}, 0xfffffffffffffff8, 0x7fff, 0x6}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) write$rdma_cm(r1, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r1, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r1, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="020100000000e42db7ad27530000"], 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r2 = socket(0x3, 0x6, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0x14) sendmsg$can_raw(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x1d, r3}, 0x10, &(0x7f0000000a00)={&(0x7f0000000980)=@canfd={{0x1, 0x1496, 0xa572, 0x10000}, 0x8, 0x2, 0x0, 0x0, "337ca11a69472a58e6fcc3b1dec376659a12531fcc1d731f1bb2562e3879a6745e92963442d559aceefef0148441d6a7c07310db1245412cc7afafcad5018a18"}, 0x48}, 0x1, 0x0, 0x0, 0x854}, 0x4000001) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f00000000c0)={{0xc6, 0x1}, 'port0\x00', 0x40, 0x80000, 0x40, 0x3ff, 0x5, 0xd4, 0x77, 0x0, 0x5, 0x7}) 2018/03/29 11:59:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x2e8, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="8c000000ba115852336213e38c51e16e79b321d5fbd67485326bfa8d7702ecbfe87e3cb86f093b7d537011c8d9f1f800802ae41fc6698b207d1e8ab178d4b51aac402cc3c61aac3f2c0e65227f34dc5706ca92535dda0c0d1ceabb74ca557d61dfe59e9b9415d9a5a19f9c036537d83cfc5e8f9dfd5851d333a8d045841965445d71afbc68"]) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000180000fa0300001f1f60d6465f06caedd00000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000100)={0x20000000, 0x100000000, 0x3d}) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000200)={0x9, [0x3, 0x0, 0x47e, 0x72, 0x5, 0x8e, 0x2, 0x3, 0x10001]}) write$rdma_cm(r5, &(0x7f0000000cc0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000c80)={0xffffffff}, 0x2, 0x1005}}, 0x20) write$rdma_cm(r3, &(0x7f0000000d00)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0xf}, 0x6}, r6}}, 0x30) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000580)={0x4, 0x0, [{0x80000007, 0x8, 0x6, 0x8, 0x8, 0x9, 0x7ff}, {0x80000001, 0x6, 0x0, 0x20, 0x174, 0xc0e3, 0xfffffffffffff000}, {0x80000000, 0x3, 0x6, 0x8, 0x3ff, 0xcff, 0x1}, {0x6, 0x4, 0x2455e653b122f90f, 0xe64, 0x5, 0x8, 0x8}]}) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 152.618274] x86/PAT: syz-executor3:19309 map pfn RAM range req write-combining for [mem 0x198540000-0x198543fff], got write-back 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="02000000000000006476a468efa9149859041e36bc9cdcebe47a63ccb5938216fa760efe01257b9eb1d29c7f47b1646e00f0ffff14fa71951c7846ff00000000000000d10dee914a122a1993003e6ad71c5e2f0de59748e2fa18a813beb730a03addca24ca2493090187e5176bae9e8a5700"], 0x20) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x1) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB="00001500"], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:43 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000040)={0x3}) write$rdma_cm(r0, &(0x7f0000000540)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0xfffffffffffffebc) write$rdma_cm(r0, &(0x7f00000005c0)=@accept={0x8, 0x120, 0xfa00, {0x0, {0x2715, 0x8, "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", 0x7c, 0x3ff, 0x3, 0x20e, 0x9, 0x0, 0x7fff, 0x4}, r3}}, 0xffffff72) 2018/03/29 11:59:44 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000000)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) write$rdma_cm(r0, &(0x7f0000000200)=@reject={0x9, 0x108, 0xfa00, {r1, 0x8c, "22bcd9", "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"}}, 0x110) 2018/03/29 11:59:44 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @loopback={0x0, 0x1}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000425fed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000540)=""/188) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) r4 = semget$private(0x0, 0x1, 0x80) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000001900)=0x80000400) execve(&(0x7f0000000780)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)='{wlan1eth0posix_acl_access]vmnet1\x00', &(0x7f0000000200)='/dev/sg#\x00', &(0x7f0000000240)='wlan0\x00'], &(0x7f00000006c0)=[&(0x7f00000007c0)='{wlan1eth0posix_acl_access]vmnet1\x00', &(0x7f0000000540)='/dev/sg#\x00', &(0x7f0000000580)='trusted%vboxnet1self{keyring\x00', &(0x7f0000000740)="38f5eacb8200f4da2d5323fa7acd109f1929e2b48769486bb8322a917cf990e17e7c88d80d4a71a5", &(0x7f0000000600)='{wlan1eth0posix_acl_access]vmnet1\x00', &(0x7f0000000700)="e26b657972696e6776626f786e65743100", &(0x7f0000000800)='/dev/infiniband/rdma_cm\x00']) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000100)=0x7ff, 0x8) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) write$rdma_cm(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000fa0300000000007b000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000500)={@dev}, &(0x7f0000000880)=0xfd9e) write$rdma_cm(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a000000e200000000000000000000000000000001000000002500000000000000ff01000000000200000000000000000000400000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x48) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000004c0)={0x3, 0x8}) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) write$rdma_cm(r1, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) fcntl$setownex(r1, 0xf, &(0x7f0000000840)={0x0, r7}) getsockopt$bt_hci(r2, 0x0, 0x0, &(0x7f00000008c0)=""/4096, &(0x7f00000018c0)=0x1000) 2018/03/29 11:59:44 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xea0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80, 0x81, 0x8001, 0x1, 0x80, r4}, 0x20) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) write$rdma_cm(r1, &(0x7f0000001f40)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001f00)={0xffffffff}, 0x2, 0xc}}, 0x20) write$rdma_cm(r1, &(0x7f00000000c0)=@notify={0xf, 0x8, 0xfa00, {r5, 0x7}}, 0x10) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r1, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r1, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x4}], 0x1c) [ 152.877287] x86/PAT: syz-executor3:19372 map pfn RAM range req write-combining for [mem 0x193a70000-0x193a73fff], got write-back 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 7: futex(&(0x7f0000000000)=0x1, 0xb, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)=0x1, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000180000fa0300000003000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="b51c4d976fd6e330a901c5a2b0"], 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000200), 0x8) r3 = semget$private(0x0, 0x9b88b7702de07f72, 0x6c0) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000280)=""/92) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r0, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 153.049210] x86/PAT: syz-executor3:19431 map pfn RAM range req write-combining for [mem 0x1974e0000-0x1974e3fff], got write-back [ 153.095847] x86/PAT: syz-executor4:19436 map pfn RAM range req write-combining for [mem 0x1974f0000-0x1974f3fff], got write-back 2018/03/29 11:59:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) ioctl$void(r0, 0xc0045878) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000100)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r2, 0x2}}, 0x18) 2018/03/29 11:59:44 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xdb5c, 0x10000) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r0, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) fstat(r2, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x6, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x1, 0x100, 0x2, 0x1f, 0x2}, &(0x7f0000000140)=0x98) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x7, 0xc18, [0x200004c0, 0x0, 0x0, 0x200008d8, 0x20000bd8], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xb, 0x9, 0x3, 'teql0\x00', 'bcsf0\x00', 'rose0\x00', 'bpq0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x5383619f0adef2cf], 0x1d0, 0x240, 0x278, [@comment={'comment\x00', 0x100}, @cluster={'cluster\x00', 0x10, {{0x2, 0x2, 0x464}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffe}}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}}, {{{0x15, 0x8, 0xe8f7, 'syzkaller0\x00', 'vlan0\x00', 'yam0\x00', 'lo\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x100, 0x138, 0x170, [@mark_m={'mark_m\x00', 0x18, {{0x4, 0x101, 0x3, 0x1}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv4=@broadcast=0xffffffff, [0x0, 0xff000000, 0xffffff00, 0xffffffff], 0x4e23, 0x3f, 0x7, 0x4e24, 0x2, 0x5}}}]}, [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffe}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="fa6dea28e010", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x1b, 0x41, 0x0, 'ip6gretap0\x00', 'irlan0\x00', 'syz_tun\x00', 'bcsf0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xc0, 0x128, 0x160, [@helper={'helper\x00', 0x28, {{0x0, 'sane-20000\x00'}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="552b2c2bb52d", 0xffffffffffffffff}}}}, {{{0x3, 0x8, 0xd, 'ip6_vti0\x00', 'ipddp0\x00', 'erspan0\x00', 'ip6gre0\x00', @random="52c05f259bd4", [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff], 0xa0, 0x138, 0x170, [@connlabel={'connlabel\x00', 0x8, {{0x9, 0x2}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz1\x00', 0x7fffffff}}}, @common=@ERROR={'ERROR\x00', 0x20, {"720f7294fe90b5c21748cb888e2b51e6430a9ab98b276f968d9f447c088a"}}]}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x20, 0x600, 'bpq0\x00', 'vcan0\x00', 'sit0\x00', 'teql0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0x0, 0xdae51329cb4fad9a, 0xff, 0xff], @random="5ef3f8ca294d", [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xf0, 0x178, 0x1b0, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x1, 0x200}}}, @quota={'quota\x00', 0x18, {{0x1, 0x0, 0x9, 0x8}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00', 0x2}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffe}}}}, {{{0xf, 0x0, 0x19, 'bcsh0\x00', 'ip6gre0\x00', 'syzkaller0\x00', 'dummy0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff], @random="abb252a28644", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x118, 0x118, 0x150, [@rateest={'rateest\x00', 0x48, {{'ip_vti0\x00', 'ip6tnl0\x00', 0x2, 0x0, 0x7, 0x3, 0x6, 0x401, 0x200, 0x4}}}, @cluster={'cluster\x00', 0x10, {{0xd02, 0x100000001, 0x7, 0x1}}}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x6, 0xfffffffffffffffc, 0x1, [{{{0x1b, 0x41, 0x81f7, 'yam0\x00', 'ipddp0\x00', 'eql\x00', 'teql0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xe0, 0x150, 0x1a0, [@mac={'mac\x00', 0x10, {{@empty, 0x1}}}, @realm={'realm\x00', 0x10, {{0x3, 0x8000}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffc}}}, @snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @common=@log={'log\x00', 0x28, {{0x0, "d759af9c1575a729a589cced2ff675d841e10250fb8474c784b61095fc27", 0xa}}}}]}]}, 0xc90) [ 153.285150] x86/PAT: syz-executor3:19458 map pfn RAM range req write-combining for [mem 0x18d420000-0x18d423fff], got write-back [ 153.285428] x86/PAT: syz-executor4:19448 map pfn RAM range req write-combining for [mem 0x18d430000-0x18d433fff], got write-back 2018/03/29 11:59:44 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101100, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000340)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000680)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000640), 0x13f, 0xf}}, 0x20) write$rdma_cm(r0, &(0x7f0000001740)=@create_id={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001700)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000001780)=@join_ip_mcast={0x10, 0x30, 0xfa00, {&(0x7f00000006c0), 0x3, {0xa, 0x4e24, 0x1a3c, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x38) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r4 = getpid() ptrace$setregs(0xf, r4, 0x9, &(0x7f0000000100)="6282632cbff45dd0192f12e71022e58f60a97ea8b78614162a1413912d8580079e5f72b66ca333005deb17c5697f385349e8aedfe04f641f8b2dae49a8a1b6a34dcfc89015cb462e6c95aa8f219243c065ba01a81e7cf7e7e1fb0ea4cdc360") 2018/03/29 11:59:44 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = fcntl$getown(r0, 0x9) syz_open_procfs(r4, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) accept$packet(r7, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x7f, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x2, 0x3f, 0x4, 0x4}, {0x80000001, 0x927, 0x8001, 0x5}]}, 0x10) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 153.450247] x86/PAT: syz-executor4:19498 map pfn RAM range req write-combining for [mem 0x18fc60000-0x18fc63fff], got write-back [ 153.467821] x86/PAT: syz-executor3:19503 map pfn RAM range req write-combining for [mem 0x18fc70000-0x18fc73fff], got write-back 2018/03/29 11:59:44 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r1, @ANYBLOB="05000000"], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x60000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0x2, 0x8}) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000b0", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xc0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xba0a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x80000001, 0x1) write$rdma_cm(r0, &(0x7f0000000180)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES64], 0xfffffffffffffe2f) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x5, 0x4, 0x1, r1}) 2018/03/29 11:59:44 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:44 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e22, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x4, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x7) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000004c0)={{0xa, 0x4e24, 0xff, @empty, 0x3}, {0xa, 0x4e22, 0x9, @loopback={0x0, 0x1}, 0x5}, 0x10001, [0x1, 0x1f, 0x6, 0x101, 0x7ff, 0xa8, 0x2, 0x1000000000000]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) r3 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x6, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x50, r4, 0x2, 0x70bd29, 0x25dfdbfb, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffb}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffffffffffcd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000000) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f00000002c0)=""/151) 2018/03/29 11:59:44 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x5b, 0x80802) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040)=0x7, &(0x7f0000000100)=0x4) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) 2018/03/29 11:59:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:44 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r5 = gettid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f0000000140)={r4, r1}) [ 153.709164] x86/PAT: syz-executor3:19556 map pfn RAM range req write-combining for [mem 0x18fc60000-0x18fc63fff], got write-back [ 153.725656] x86/PAT: syz-executor4:19551 map pfn RAM range req write-combining for [mem 0x1ae480000-0x1ae483fff], got write-back 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 153.824749] x86/PAT: syz-executor4:19597 map pfn RAM range req write-combining for [mem 0x1ae490000-0x1ae493fff], got write-back 2018/03/29 11:59:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x8, 0x3, 0x7, 0x38, 0xffff}, 0x14) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x17c0000000000000}}, 0x900, 0x1ff}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x400}, 0x8) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c000000080000fab2d49b616ff7aa0bc87f501422a3eba5", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0x5d) fcntl$dupfd(r2, 0x406, r1) 2018/03/29 11:59:45 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) read(r0, &(0x7f00000003c0)=""/100, 0x64) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r4, &(0x7f0000000980)=@set_option={0xe, 0x0, 0xfa00, @ib_path={&(0x7f00000007c0)=[{0x2, 0x0, [0x7ff, 0x7, 0x279a, 0x1, 0x80000000, 0x0, 0x7ff, 0x7d18, 0xd1, 0x4, 0x0, 0x0, 0x1f, 0x7fff, 0x9, 0x7]}, {0x23, 0x0, [0xfff, 0x2, 0xff2, 0x9, 0x6, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x6, 0x0, 0xfffffffffffffff8, 0x3, 0x4]}, {0x8, 0x0, [0xfffffffffffffffd, 0x1, 0x3ff, 0x0, 0x7, 0x6, 0x7fffffff, 0x9, 0x3, 0x9, 0x0, 0x7, 0x5, 0x56dc, 0x4, 0x7]}, {0x20, 0x0, [0x3, 0xff, 0x242, 0x0, 0x8, 0x967f, 0x200000000000, 0xc9, 0x85d2, 0x0, 0x1000, 0x5, 0x8000, 0xba90, 0xdb0b, 0x672]}], r3, 0x1, 0x1}}, 0x28) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)=""/87, 0x57}, {&(0x7f00000004c0)=""/116, 0x74}], 0x2, &(0x7f0000000540)=""/203, 0xcb, 0x800}, 0x40000000) 2018/03/29 11:59:45 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) listen(r1, 0x1000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000002c0)=""/129) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000001800559b2f2e43d9a859eb00", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) sendto$packet(r1, &(0x7f00000001c0)="752edaaed279c3400da64e293689f729d264687aae5e536be6167db4b44fc6f46af9cc1d672e89b3b22c9be50fea92ac08d969e8ebe42c74f22ddf5125395fa57454d264a87b696413fce752c2050a8c4d02fcbbb0e0006806bd8cf0f012ff91d6df5ded32a128cdbd02e5e772db1bb2e3c2b0cd7bd33e11923b83f7f6c91fcf66", 0x81, 0x80, 0x0, 0x0) write$rdma_cm(r1, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5c31060d, @dev={0xfe, 0x80, [], 0x12}, 0x8}, 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x3, 0xee3, 0x6, 0x5, 0xffffffff, 0x1, 0x200, 0x3, 0x400, 0x3, 0x4, 0x3}) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000100)=""/8) [ 153.941719] QAT: Invalid ioctl [ 153.946621] QAT: Invalid ioctl [ 153.948183] x86/PAT: syz-executor4:19630 map pfn RAM range req write-combining for [mem 0x1acc20000-0x1acc23fff], got write-back 2018/03/29 11:59:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 153.993918] QAT: Invalid ioctl 2018/03/29 11:59:45 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 154.019414] QAT: Invalid ioctl [ 154.084009] x86/PAT: syz-executor4:19664 map pfn RAM range req write-combining for [mem 0x1acc30000-0x1acc33fff], got write-back 2018/03/29 11:59:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x100) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="02000000000000004a295164a0ae"], 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) accept4(r4, &(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0x80, 0x27a1d9a80d8f73c2) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8ffb13df", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) timerfd_create(0x5, 0x0) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r2 = dup(r0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000000)=0x1) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 6: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x3, 0x2400) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000004c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) connect$packet(r1, &(0x7f0000000140)={0x11, 0x7, r2, 0x1, 0x2a, 0x6, @random="eb505cc70ef5"}, 0x14) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000100ff030000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="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"], 0x20) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x31) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r5}}, 0x48) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000005c0)={r3, 0x174, 0x4, "0411ef29ed900376d1e8e5cbc26e4126f04d375c887f49d7445dbcdc616f8b33c82a00db1a899c2ced92d72764ab603ac3ae1d40a3bdfd2d1b8abb8d5975ce06c355620a044301422386232da37e01c66cb4ad2d25d37fbe83135f361daa91db1a71e12be756ea8cdac65cf33ec3b51479dcd1d70c7b1390402b5d924ff1c9aa79729f6d0a8246c6362a761922"}) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0x10) 2018/03/29 11:59:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) setsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000000040)=0x5, 0x4) [ 154.208845] x86/PAT: syz-executor3:19674 map pfn RAM range req write-combining for [mem 0x193880000-0x193883fff], got write-back [ 154.231333] QAT: Invalid ioctl 2018/03/29 11:59:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r3) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000100)) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 154.285582] QAT: Invalid ioctl 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB='s\x00\x00\x00\x00\x00\x00\x00'], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be8cd0e4c50900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc8) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) socket$rds(0x15, 0x5, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a0000000000ff010000000000000000000000000001000000000000", @ANYRES32=r1, @ANYBLOB], 0x48) fcntl$setflags(r0, 0x2, 0x1) ioctl$void(r0, 0x5450) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 154.511405] x86/PAT: syz-executor3:19757 map pfn RAM range req write-combining for [mem 0x1b6770000-0x1b6773fff], got write-back 2018/03/29 11:59:45 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) write$rdma_cm(r0, &(0x7f0000000100)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r0}}, 0x18) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0xe0000, 0x0) bind$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x81) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r4, 0x2, 0x1, 0x164f66c1c00000, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) write$rdma_cm(r0, &(0x7f0000000100)=@listen={0x7, 0x8, 0xfa00, {r3, 0x6a5}}, 0x10) 2018/03/29 11:59:45 executing program 7: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r0 = socket$inet(0x2, 0x804, 0x5) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x80000) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="9d618df7f0b2c266"], 0x20) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r3) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x0, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r1, @ANYBLOB="00000083"], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="020011a89c9cf67135368c3169eb24b2cd440000b760ff00"], 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x100, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) recvfrom$ax25(r4, &(0x7f0000000100)=""/101, 0x65, 0x40000002, &(0x7f0000000040)={0x3, {"d62b74e973c446"}, 0x1}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000004c0)={'filter\x00', 0xf2, "7d6aad4cb5a1c044fbede939766e698855e1f8e95969f7942945f66b41c655154dd6fa9b3030186818d3c38c9fe22bfa9699a52656e1ad66aa8d7f705d5a19a339ee31b309ecb18d6d12ad343efe61d544629a6b6052f3a2ac7eba2b064a3a13429b132505c1d3755a98184c9b56f47cbffa2af5f80ef95b6f3f8909c992ae552a297b702790ec3d0b639d890c07930714a27ed63e35b5364e53c0187b21e3e4061e15eee7329654373998546241abf9425159e2eca5f70daa48e054a8604eeca62d7b4cb989d07b3da591d4e4869456c3721e2b9f2bdf8bf699db6c97cb201d42f7ba6ec8085e6e3e23863db9cd001e0675"}, &(0x7f0000000200)=0x116) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3e5128a3656659b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000921c8a9d3b0a21940000000000"]], 0xc8) [ 154.699125] x86/PAT: syz-executor3:19778 map pfn RAM range req write-combining for [mem 0x1c9300000-0x1c9303fff], got write-back [ 154.711926] x86/PAT: syz-executor4:19781 map pfn RAM range req write-combining for [mem 0x193890000-0x193893fff], got write-back 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 5: socketpair$inet(0x2, 0x8000a, 0x1e2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={0x0, 0xfff, 0x30}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000500)=@sack_info={r1, 0x100, 0x1}, &(0x7f0000000540)=0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) fcntl$getown(r0, 0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000380)) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000001c0)=0x7f, 0x4) write$rdma_cm(r2, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r2, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r5}}, 0x48) write$rdma_cm(r2, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r1 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x1, 0x20002) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r4, 0x4}, 0x8) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="14001000880000fa157e72baaf2c526c8b28c1b6408b0a881283fbf14ac85ccf11be00974142106aaa51f5badb01d1aa4b67a64fad975820008a064143695185dc5f22019c036e71e1b9f827e87ebfecce22001eb71fc1aceb262e5d7623c0a8db97fc0acb62e01baa970410594ef1471b380a903c73e1ce1eeaacf1cc52041324a803f4b33bb5c0a25600e995b50acef8038d34bbc167f28f544cecc94f15eab6b93d110a1d48a842c71f27eda9b8d74d8d079a5b0e58bf887bdc6bc9573283fc1c9348290d30c059c83c51efd7", @ANYRES32=r2, @ANYBLOB="1000000002004e22ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) write$rdma_cm(r3, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0x10) 2018/03/29 11:59:46 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffffffffff8a, 0x200) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x10000, {{0x2, 0x4e22, @multicast2=0xe0000002}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x108) signalfd4(r0, &(0x7f0000000140)={0x1}, 0x8, 0x80800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x9, {{0xa, 0x4e22, 0x8, @empty, 0x2}}, {{0xa, 0x4e21, 0x5, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x74}}}, 0x108) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000340)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) lseek(r0, 0x0, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x20, 0x10400) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000003c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) setns(r1, 0xc000000) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) mq_notify(r4, &(0x7f0000000040)={0x0, 0x35, 0x2, @thr={&(0x7f00000004c0)="b3ccab87acb75fa82214b83efcff76920c3a36202b4bfdacaa53a0ecbb500c4cc83a579902845ed03da992710e69d1db629b9e1cecc696465f980686e672cd1afa8263d922e6a8f3b5c98dece9a750ca303e97c193c9510eba3414ed08296c23ba931819928aa15bf2235df96f8b96d727032aa36880f331cc17d2a8c383ff7de22deef76dcce929b7c998590e7c428e82106019111f08be56d8cd25339f4ef0157a8859addcce4bc3e4c50fa0147a0b0de8f4134ea649e30eb6302b04ed0d0c9559dba67d70981def44f0f0", &(0x7f0000000100)="7de8c691ea150b7b44dd9dea652f61dedb1bb2acd0c0a9cf804a605811c9d768766574f20b4186f65ecf0afe86a93a21442610e8355c8060fc483a6b90d38b1a734b889242367456f538bda08673ed2952e21d35fbec60"}}) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 154.880682] x86/PAT: syz-executor4:19831 map pfn RAM range req write-combining for [mem 0x18fbc0000-0x18fbc3fff], got write-back 2018/03/29 11:59:46 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x0, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000004c0)=""/4096) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0000000000000000dc5d863befdb4494c87b8e9f4c330f3b7c26c942eeca841fb647e99f47c950c352f75aa4649625551ad56fc2b5d568663c99533eb678b28afdfae06272642bea15fe7da260b08f956dbdd33e0791749cef25184b45dc731030ffeb01a4698fd6049007d5f1ec21079fe95a20cf43a3324c5d7a13ee4ecce170b0e62c1912fcee04a9528c9277f56ad5e61ff21dcf288f5776d74027974bc2dd2b37"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 7: modify_ldt$read(0x0, &(0x7f0000000200)=""/244, 0xf4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x800}, 0x9, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(0xffffffffffffffff, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r3) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 7: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x7, 0x10, 0xffffffffffffffff, 0x62d75d72}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x100000001, 0x8001, 0xfffffffffffffff7, 0x81, 0x34}, &(0x7f0000000300)=0x98) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r0}}, 0x48) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 155.063267] x86/PAT: syz-executor4:19870 map pfn RAM range req write-combining for [mem 0x1b5a20000-0x1b5a23fff], got write-back [ 155.063537] x86/PAT: syz-executor3:19863 map pfn RAM range req write-combining for [mem 0x18fbd0000-0x18fbd3fff], got write-back 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x6042, 0x0) unshare(0x40600) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r4, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000140)={r5, 0x1}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r6}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5183d817, 0x200100) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x80000) socketpair(0x1b, 0x80001, 0x80, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x63, 0x3f, r3}) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x1000, r4, r5, 0x39, 0x1, 0x2000) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r3) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) 2018/03/29 11:59:46 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x0, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 155.314697] x86/PAT: syz-executor3:19907 map pfn RAM range req write-combining for [mem 0x195de0000-0x195de3fff], got write-back [ 155.327135] x86/PAT: syz-executor4:19910 map pfn RAM range req write-combining for [mem 0x195df0000-0x195df3fff], got write-back 2018/03/29 11:59:46 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000200)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x18b000) bind$nfc_llcp(r3, &(0x7f0000000100)={0x27, 0x1, 0x2, 0x5, 0x4, 0x6, "df4e43eebd781aea6e4e20f6b5c5a3830894c3aa32d51d804fbafe240fa3adce0d66e9c130a348304572c99abbe1a06f37fc36f23e0b7cd390ebc606280c20", 0x15}, 0x60) 2018/03/29 11:59:46 executing program 5: chmod(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000039c0)=@create_id={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000003980)={0xffffffff}, 0x0, 0x100f}}, 0x20) write$rdma_cm(r0, &(0x7f00000000c0)=@resolve_route={0x4, 0x0, 0xfa00, {r3, 0x3}}, 0x1c) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x0, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="023feeae9bdf76e5b79e00000000000000"], 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000004c0)={0x3, r4}) fcntl$dupfd(r2, 0x406, r2) r5 = add_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000380)='selinux\x00', r5) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB="00000000a4aed2eb83155cc09432973d2e3fbc65ae39b8e18aa92e68e919bcff41d3a31c771ea2e2511cf5cd772e8eadbfb44bfa7377cf736901755f35519bcc1dc27178b24f5616a4e40e60d21650444d71624ffe8bc334380c73"], 0xffffff5d) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000100)=""/110, &(0x7f0000000040)=0x6e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000380)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) accept$ax25(r4, &(0x7f0000000200), &(0x7f0000000240)=0x10) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r1) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r2 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r2) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r1, @ANYBLOB="00000000d3f14aac965b8c6c9f017e4cafb434c503b57ef4bae3d2582d239e5bd135229d81123be214dcaaa56886822df28009691c765e3bae7ef57a763da38773fdf68fc3072f7d844d756f665d5f6937ba"], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x0, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r3, @ANYBLOB="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"], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000240)=0x80, 0x807ff) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) readahead(r1, 0xfffffffffffffffc, 0x9) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x86, 0x80000) ioctl$TIOCSCTTY(r3, 0x540e, 0x6) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000280)={{0x0, 0x3, 0x101, 0x0, 0x7}, 0x40, 0x7}) ioctl$VT_RELDISP(r3, 0x5605) ioctl$VT_RELDISP(r3, 0x5605) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0xc) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) 2018/03/29 11:59:46 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000040)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000100)) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000000800006ca438c6fa0f49510a9cceea30309b91fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) [ 155.559128] x86/PAT: syz-executor4:19969 map pfn RAM range req write-combining for [mem 0x18fee0000-0x18fee3fff], got write-back [ 155.572924] x86/PAT: syz-executor3:19970 map pfn RAM range req write-combining for [mem 0x1cd3e0000-0x1cd3e3fff], got write-back 2018/03/29 11:59:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x0, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:46 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a00000000001b0000000000090000000000030000000001000000000a00000000000000ff0000ee000000000000c0000000000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 155.711057] x86/PAT: syz-executor4:20015 map pfn RAM range req write-combining for [mem 0x1cd3f0000-0x1cd3f3fff], got write-back [ 155.711301] x86/PAT: syz-executor3:20017 map pfn RAM range req write-combining for [mem 0x18e6c0000-0x18e6c3fff], got write-back 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r3) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x4800) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) prctl$getreaper(0x9, &(0x7f0000000000)) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000100)=@query_route={0x5, 0x0, 0xfa00, {&(0x7f00000004c0), r1, 0xd9f1d2f876c1a0c4}}, 0x108) 2018/03/29 11:59:47 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0xe000, r4, r5, 0xffffffff, 0x1, 0x60) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000600000000000000ff01000000000000000000000000000100000000cbf587d9ccaeab4834cb39fc1b68f9b1f2719e33b8d9e5b0ea136cbd6c5df3d1812d56f2d7c8409bbc4643bd5fce4ecf2f129bb6c5bc00541e798231456c8d19ed61a17f46ec4d24dda1447a36f8448529b30ccf3e2afe443780c0b041e151edf3ab569139c2c743230853546456ec9f6bd0b732a3aa37b7ec8d7eee711bc300f2e1303365850053c889e8319e7caa4683a2fc1c562bb5dac42ba44f", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000000000930b00000000000001000000000000be96c882b3598c02be945fe8260081010000000000000010000000000000ef0b0000000000000200000000000000050b000000000000040000000000000060080000000000000600000003000000000000012000000000000000008cf3d6d76f965800000000000009000000000000000000000000000000071c000000000000b70a000000000000080000000054ea00640a0000000000005e000000000000000000000000e1d935d7"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000180000fa0300000000000000278978cae845ce57574ac463f8ccbab4d616c712a61a99b13306e8c1681b1154a3e723563811c333b0591a77581ad9f4e6a722c44829ff32b2570793490e659f9b962c36f6448e3b1a1e92a93beaa6e5fc3d2530a6eeab8074b1c41835c7ed026908d293", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200008040002000"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x6295, 0x4) 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x0, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 155.854105] x86/PAT: syz-executor4:20043 map pfn RAM range req write-combining for [mem 0x190a10000-0x190a13fff], got write-back [ 155.870977] x86/PAT: syz-executor3:20046 map pfn RAM range req write-combining for [mem 0x18e6d0000-0x18e6d3fff], got write-back 2018/03/29 11:59:47 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000004c0)=@bind_ip={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0xffff}, r1}}, 0x30) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x4000) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000004c0)="0f8f94594b768e58016f579bdd1a02c214f75e58fbb93d5568008e8d789f34084c03b1bd3c03a557ba26808d9698a3b7993ad74853ccdf9e22161999e58ac910ca3f20708156051b3f5642c54f2a2afe8fcbae06192850dafdfaff17e151b89af5f34d569a136e5dfdbccb2b", 0x6c, 0x0) keyctl$setperm(0x5, r4, 0x10000) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) r5 = shmget(0x2, 0x9000, 0x1405, &(0x7f0000ff7000/0x9000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000200)=""/113) shmget(0x1, 0x3000, 0x140, &(0x7f0000ffd000/0x3000)=nil) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="b94bb72123863ba0ca5bf21eb5d29616753d08a5a41d53957346722346ca2e7188c77e2b0ea0e5c17e95e8d1cc8c74205d7bb3addf3a4783770db57cd409d7941de52ed0de45722043b227ae00cd9c43fdf5e9e8237179ac27f4dcb388e9a18bbe96b1b226b35d41e214fca8230e5b4eaa0d09739ee4dc4ec35c122ea9585b2d251543bd57a922de5551a7440d7c756ceba5dd79daeae0676c5046d72932ab2ab978ef704824faaad9dfe4753ddf062b0e859d5f7583bc0c2644e1e903def3cbd6278383ecdeb981c18c775f804517fdd593b8a700e444", 0xd7, 0xfffffffffffffffc) keyctl$describe(0x6, r3, &(0x7f00000005c0)=""/197, 0xc5) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xa97, 0xffffffffffffffff) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 156.007527] x86/PAT: syz-executor4:20087 map pfn RAM range req write-combining for [mem 0x196f20000-0x196f23fff], got write-back 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@remote}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="71696a2533b183ad1702005d0000000000"], 0x20) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="d22566c7a780a116e85b4c147eacb867ae62b240ae9ff3cea48f0dc167258ee7f2906e210251061eb250396bba31a95c9a34f1632a8f1a31e53e68d6eedc37d39ff1ae4bcd04b5a40ef1c30b74900bced8198f5a10122e068dbd2e7710c02e03e596abb5bc9588ce7a75a0c2b41635603138f37b430b4301a4c96aed4de20569cdf95a091d6425879a76bd937a75d2e79584f9b994fe520226d9db", 0x9b}, {&(0x7f0000000680)="4cc66af8af176fbb2fc87f02eae653fb07e169ec9c0cb09a029b1ff5d77fecd12716940a63b7a2b8f76344acc0bfe3d41c5621ffcaa6002dc51fbe1549c79b80d8d296ff445aeba6cac530a2ae21a4a8e8724fc863035b30bddebf0ec946725e541fb9d8f55c2400277253734ed2e18518266f4860fa848a7f1851066a26873a6ab2428170a4aba0b1ed8743beb5472273640c419b798782ca2142a6707a", 0x9e}, {&(0x7f0000000740)="b5e0cebb107605129e66d37d9d608b5c297c022e910f641d631a2be216966728c7267e144b3dd6253e83b7cd0ce93c18f582ac99cd68784230b6e64a2d2280fdfc99ac6ee7b5c7851aa060e7d29a4932c003481cf5a85bd7baa8237c845ee004f421fadb713881a235891199d78c0243fc8da87ef4583b7e177e738d0b5e8538d756a4c6", 0x84}], 0x3, 0x0, 0x0, 0x20000000}, 0x24000880) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) ioprio_get$pid(0x2, r1) fstatfs(r0, &(0x7f0000000200)=""/107) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x80, 0x4) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x3) 2018/03/29 11:59:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) splice(r4, &(0x7f0000000380), r4, &(0x7f00000004c0), 0x0, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x73, "aa03527502a0a2088f4d6aadf8a3f89635399002d1ef0d1a496ce99883f670e4c8eade20480556b3d84455f79a9a0f38f3ec16997697b608ad2885f512bfb1566610911c167d4e9fdc0b85e391a35f5f7aba8ba1b06a67c23fea41fe6a3aa6bc9847f4244e191cdce7aac9a5a02f373b65a223"}, &(0x7f0000000180)=0x7b) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000200)={r5, 0xa1}, &(0x7f0000000240)=0x8) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0x32d) 2018/03/29 11:59:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r3) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sco\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f00000001c0)={0x2, r4}) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) eventfd2(0x0, 0x80000) write$rdma_cm(r0, &(0x7f00000003c0)=@disconnect={0xa, 0x4, 0xfa00, {r5}}, 0xc) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000380)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000040)=0x9b, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f0000000100)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0xfffffe07) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 156.157964] x86/PAT: syz-executor4:20116 map pfn RAM range req write-combining for [mem 0x18e6d0000-0x18e6d3fff], got write-back [ 156.172367] x86/PAT: syz-executor3:20113 map pfn RAM range req write-combining for [mem 0x19a100000-0x19a103fff], got write-back 2018/03/29 11:59:47 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) select(0x40, &(0x7f0000000000)={0x8, 0x7ff, 0xffffffffffff7fff, 0x200, 0xeb3, 0x5, 0xaee, 0x2}, &(0x7f0000000040)={0x19, 0x9, 0x81, 0x100000001, 0x5, 0x9, 0x52}, &(0x7f0000000100)={0x8, 0x5, 0x4, 0x4, 0x3, 0x8, 0x7fffffff, 0x80}, &(0x7f0000000140)={0x0, 0x7530}) dup2(r0, r0) 2018/03/29 11:59:47 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) connect$ax25(r4, &(0x7f0000000040)={0x3, {"89b4e7924c3251"}, 0x5}, 0x10) 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x0, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup(r0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x400, 0x80200) r2 = accept4(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x2c0, 0x807ff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000001700)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000016c0), 0x0, 0x8}}, 0x20) write$rdma_cm(r0, &(0x7f0000002640)=@join_mcast={0x16, 0x98, 0xfa00, {&(0x7f0000002600)={0xffffffff}, 0x4, 0xffffffff, 0x30, 0x1, @ib={0x1b, 0x8, 0x6, {"e40e39f42aa20be7cec8bd555e0795ae"}, 0x0, 0x2, 0xfffffffffffffc00}}}, 0xa0) write$rdma_cm(r0, &(0x7f0000002780)=@leave_mcast={0x11, 0x10, 0xfa00, {&(0x7f0000001800), r4}}, 0xfffffffffffffe6c) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x1) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 156.333588] x86/PAT: syz-executor4:20162 map pfn RAM range req write-combining for [mem 0x18fe20000-0x18fe23fff], got write-back 2018/03/29 11:59:47 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000180000fa0300000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="02e8000000000000"], 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff01140000000000000000000000000100000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000200)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0x287) 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f0000000040)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0xffffff44) r4 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0xeeffb2b85c0a1163) r5 = gettid() ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380)=0x0) tgkill(r5, r6, 0x2e) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x4080, 0x0) renameat(r4, &(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000240)='./file0\x00') syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x440c0) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']], 0xc8) 2018/03/29 11:59:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000040)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000100)={'teql0\x00', 0xfffffffffffffffd}) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r3 = shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) shmdt(r3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086d63050772a424386f67337b17a"]], 0xc8) 2018/03/29 11:59:47 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) fallocate(r2, 0x2, 0x91a, 0x80000000) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 156.504430] x86/PAT: syz-executor3:20187 map pfn RAM range req write-combining for [mem 0x1bdb70000-0x1bdb73fff], got write-back [ 156.522280] x86/PAT: syz-executor4:20194 map pfn RAM range req write-combining for [mem 0x1cd3f0000-0x1cd3f3fff], got write-back 2018/03/29 11:59:47 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[], 0xac1) socketpair$inet6_sctp(0xa, 0x3d7cd67e90836d60, 0x84, &(0x7f0000000000)) 2018/03/29 11:59:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:47 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:47 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 156.674176] x86/PAT: syz-executor4:20232 map pfn RAM range req write-combining for [mem 0x1d16a0000-0x1d16a3fff], got write-back [ 156.691524] x86/PAT: syz-executor3:20237 map pfn RAM range req write-combining for [mem 0x1c9b50000-0x1c9b53fff], got write-back 2018/03/29 11:59:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) recvmsg(r1, &(0x7f0000001680)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000001600)=[{&(0x7f0000000200)}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/146, 0x92}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000380)=""/30, 0x1e}, {&(0x7f0000001580)=""/77, 0x4d}], 0x6, 0x0, 0x0, 0x9}, 0x10000) write$rdma_cm(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0016cc00", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:48 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:48 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000040)=0xffff, 0x4) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) 2018/03/29 11:59:48 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200201, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000640)=""/178) lookup_dcookie(0x3, &(0x7f0000000200)=""/128, 0x80) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r3, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r4}}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x78, &(0x7f00000004c0)=[@in6={0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x3f}, @in6={0xa, 0x4e23, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e24, @multicast2=0xe0000002}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={r6, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0x16}, 0xfffffffffffffffd}}, 0x800, 0x158, 0x100, 0xc1f, 0x60}, 0x98) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]], 0xc8) 2018/03/29 11:59:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f00004d8000/0x3000)=nil, 0x0) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 156.831118] x86/PAT: syz-executor3:20258 map pfn RAM range req write-combining for [mem 0x18fe20000-0x18fe23fff], got write-back [ 156.831537] x86/PAT: syz-executor4:20252 map pfn RAM range req write-combining for [mem 0x1d16a0000-0x1d16a3fff], got write-back 2018/03/29 11:59:48 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r3 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x4710af1922cff872, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x64, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20, &(0x7f0000000040)=[@flat={0x77622a85, 0xa, r2, 0x3}, @flat={0x73682a85, 0x101, r3, 0x2}], &(0x7f0000000100)=[0x28, 0x18, 0x28, 0x28]}, 0x3}}, @increfs={0x40046304}, @request_death={0x400c630e, 0x2, 0x2}], 0x1000, 0x0, &(0x7f00000004c0)="0e38388113f376082d52a50050fd891004aa7b2f50e16abc5033f23a9c131ff27fd8244b7a732ec289bfc8d59950e8e2904a75037e669c9da7dc0d60b820642a6c37f96fb446d3b9bacb11434eabf4e108195159d0ff392abb679cfad152493555bf7702dd454349cc50e9cbb056ba313749ade5f09cf951844c10d051a427796b317d344eaaf28ee2ab7ba9509909c13f80d393453bc028d0fb094ba81e14b882af92cde2fe872d9add3e3a8bbd5a7ce749e11e437a92b64f93e1500940c33d33e952c562ce5fe726e5d310eb5eaaad8946dc23f62682153eec4f759d23ff1abc039e1916d99613788449562fcc85029951a9cca4d7db8c270803030635fbd7f2e6cc89816cd0ae85439ce939766ac80258e0733703af92ba462dbbda9f86aa4f758a5b9a31d1788b19a9a74fcc2c8b3e291fba1a80cd699c62fb5f768e51e95b7fb9d012f61d7da630caebd8b6d84649baf925cb8a71a520727cbdc258bcdd9a2e279932a40287c7a5c3cc64bd507c13cc76cd454d659592ca0ab731592ead6a1755952a39b8038a35059e03884a6d98e77d82811708a7daaa24751a4eca003c1bef6a6d837abcaf999dee5536e31b8e6dd27b6373e70779b106ba117e6a6280d13170ff94222efede871ca4b74d1f546ac03a1bc835240429de21e70284a83600399a98562b0297bd30370ec5d4b2fd5850b328ffe2c2ed91766bcdbbe435d72b0004727f0477bfbf88f7bb7056710b6e5d616da03076c9aa747ba0ca5183ffb6308902757a22190787b74b2cc39e1ada27ba0abdcc8e5a5b38a4a1d01041f5f8fb3c513bcff83f0c0ea5aa78c4085d5c337c642b03b523505cb7d054dae77e823c0c1842939ef7c673ccbb4b68c188155e777b9d6052bbb9df5fe084b0d0543717f1417310ee555b9fa4081a3bbff7e01ad4fbc7d660e09896bdbe68b2b6a5915732c855d0c372ebee72210e30d2198d75c06aa6ad35244b936e409e6c38da0670afc1a7bdb357637db610ccafa1ac2eb6210cf9e6a77a0eaed8c0cc31b850d19f0ee40e5618cf7fd22fbbf1c4c42809937fd5597efcfea108d855237d56618f2633b1b02c7da02ccb02282837cc7fb84a447e0535540aa11091387fae895a5e34c02fcd88575b9dbb60da4b77dbcadbda27af848ab80e687c25db4b467fa2b9f33d94a1d14413a3b2687026d3aa929ec49f132dc7f701421014daa64fb7ef2ae6b4e935da88f9bf3a962e3b1ddc405ef5730fc7d44ee524814d6c42f6b8371270f8a94c15ec6c64602f2c0d0feefa74f132710fddad5150ba16325a03973fb1b12dca18447d91ab846e7497aefc709eb622bd3afaf036efa9b0caddecca014027a7646d2d74dae718f82c901a7f0450d4b5fc263c507d621bae103f7a1ab801c3e05ac5fd71dd7fadb2610a39c9a0ce532026edb631c2f3f5ed7d85f100e0187301024f162e969b8f5d0f383e0cc4340b89a798b7a62fa7e6dd80928ab79eb0284ad8a133333392bdb449859f02f41a98508865f18c8039bfa2625ff3addb0476737edb8722763f9f8beaaffd43d8f36c1c3d7663bfd58a0e7f23555caad693a2371f18a487b6893acc8530175b254c8b535519aba4336e3bda6080be1d9270e8f8e88ae9ed556ddccd7a2fe110925ecc7bb675db7048a40802ff3c4e05e7f5b0426e41071cb95ff5658ef76360f4722e1558cdce67cded6354c34e7e2d7eacaacf6551d9f2b7a9bc64fc339e74e05fb7a245c5c0e82eba46f87cdd616fb61c4215290d1592ab1d0623c84cff71fad3d6bea73026de09733d6c1a13c0df5bf7011c76f6b1281cb06516fbae580a8d55d8dea7af853a7a290acffc7b71181235e3cd30644c0f0aac5df7aa303437e554d23544be48ae42e26b7d817a3eefd393297d5edf7dc00c53687b9327231cb66f834bccfdd885c37e18f5ae68065fd3fe271ecc6af404eca18c37a85a22db6220d7213c556dae29c61b724b33ba71ba5a0dbb20dd700641eece1626d75b89f86c98987c7342f856d192b819c1ae83c9869b611c88baef14fa0d7929d2e6e0a4ab94c4703638095fca74cf0bdeae528ada27174a3256c7270883918fe02abf8c7420ba96399fbe1639f728a6f2ebd587505760ef5ab12c4c8ee973058ccb5be4a84fb32506ba66e26633387ecbe33e22ab00a0d7ecadb7898de2b103c80f307d121abe5771e6e718c66130f4e878594ab4fd3d4bd5245f219222376017fa7669e6ebe0f46db5c971255a6e36244aed38a9352cfa412f262df094cc88bb44debe27b44f6b151040b30140e600852703352a70869be22b6e2152dc272dec74cb93df88ceb6841023abd27e0dc93312c08c8b6ab0c26f89a040e67b65f7ea35ae8b52aa9520126af13f019131751984368e6fe016740395b938f65c7c671604877736a3d9d880478f79237a30ce857cbc7346e3b4dd14beef939996f900223ad49e162e7c30f5d6893563e2e3114efdbd2f746c09448027f42bf306725787037e3454cc0ed6cbcbfad15591e9af5391b35194ebbef52d2274c6d7cbc130e12cd7b151c1596ea5547ba4ece2a50082f68edd28e17f0f30639d91d42a5d63935d58b9025742030bbe521a688b9e14c186b192acfc14ee090060e6774922ba359544c00e68dc5d201f399a6a5cafdf489a9fd5bf442b451c3d2df119183c95598fb5580e081836201ca5982b22d9a29f05860077acb93303931bcf09ca283efd6af8155ec0af6e0b1dcb83ab64fcdf36da0842b5d009759ed27645a87c255898363ba612baac134c89593750eb0ae46e76d8859e546f43cc853331065a238bf161dfdd4b6820094ac3e7b5ae0be12cba93f42eacd14f5aa1fc1877037909bb6dd8f62ac80de97c87797dc6beab1f33060bcd05d0b5e99690badff4decebabb9634355fe5595bf42d36813e3aa7d69fde33b7b2d9680b8cc46d7b83277e72862b428203fde277b8afee7ad689fdd1504f69e4a91163479db5370be103db902ae01d6a5ae25f211aa870e2c619b0c7ee9d74b8f0c1af3fc90ad8a9c77c1c6077ef7917b1ef7e9b9c2c0456f352490d250eb3da6a564b53ed5a803e38ba6382f09d156f6deb58a027e8cc04402977014d89eaa3a14a8bbbf09e324bbb1778ecb723149830f6043b1e85df8678858f7daa809b6b661798568f3fbbaaac147719f759390ab80e6d0bf354ef3006af1423569eb1ed6a48fb2a8f92eb04ce311303cb61691f46d841f161c4933c1a0934ee2340a466650ade81ed1240b173233a1336388d8203a8a98d6ade2033026f0f9d3f3853a87c429a3770b21cc91ad433a7f9d9b2d2cde0559901634da2de660b90c083e872f66f0627f8e0a41a6eddfb555853cd9d39761f391268af086072ec8be4bc936eff45a0554e3c1c36ba92dbe0a91a752509b11b1de51d867c95a9221de36d7e563f926e8ecb00ca962b1eb0ada182666ddcc2984e5eabad9aa6c3597744764fa81b6aff46aa2749b37c8a4c3137e3ceabb20927e8dc10d7ccb618c6573451c3ea5874224a585cb3d09f90c224d73a35f4796e2fce76abe554d6ceed1ab8fde03a8165c8a00e876fbf39d1d85221c096c74c2bf76a35ad5e6eb0322df339a56aabd517e1b690343bd8e5962e8c87597b4a7820b6f2ce766b78015f2e1f81ac1013215717ec5aef12513a5d929b8ea01830f3e462a381339ad27825b55f628dcee07e9e2fb03bfd7cc5a6586fc6fd997a123a035983af715e6ad81afd2e5b6420d26dee5fb6c9cc48a4e72e2da82219f1f25459a1948285bd5b7061697bbfddd227fe72bda7e1539809a4131ca84825f08153220a273dba7aa01f28ef00fc0a67107e3f09350396b68f9e8254845761e1a98a7b8c19ee1a090fcd2d523bcfab9bbe6c6149f0f3b4b99f48d3783e47ad6974d9d70fbe765cb2a723e99de7328a149f4ac5c21c29f6ea1d0f3951deb8cd6c4d25d906ef88db8cb0e9b1d225dc0c633711d7e6e80868f91a86281ee5174e3e9aa2da52003c6fbab35e7414d80d22c5e161117645318921178d79782578bbb7c9218e630b41491f19014e80e839408e8279ef0ff2366d3868038b2981c1cbad14b9c0909175ce3a96ceda469206a1ffdf1c18854696ef22d18d132d3366e8e7237a177cc995e9004b13f6cc6ce075c16e35ee9011479f4ed72fa309625571af9f08540bbe0b2ff57770b0a3dc2b3097e6f15a490207e1d5e87e1a7d4753c9a8a0879e791b9eb29f16028a0d3940ebd0e0ee2ad0db560b50c4a2a80dfb5645d1a570877e2f0d79304f496af05bacc604a8064865dabe40f3ddc5d3963e6999f7f062e31320c8d69190e168b19554077588b82520b016d18e083a35e20909aab7154138bfc2f8e034b0324c805337da38970ec424ab5cf03f5a442099eb1242173f5091dfedf116ddf8e67b94302258f5382ee92f7293b00859eadaa1a2a9cf08daae705945a094dbe89a317f62262b76822c9b7721c5b1a71f2dfc67cdec82ec7800d30b53bd02682430bc33afe077fc087b9203d6b8a83b3aa8a5925b0df8a6b55298921144e272c7fde5036bf023522e3e370546bc87f59bcfdf77a176a542d1ea4addf874654cae027b49d9ac749c168fe65542e8e65686452f32305232de243a8fbf53601366c0250b24ccd8286cd0172d2f6082a683d563651338809c4757ca116fa29539e11206b4d39349d1aa76306b1817b77e662f1336ec08f736b00003443f0fcb20e15c358d71b1b5a46924768b29b276b27f7d83aa8bc801a04e126f1e829b080e976344e207cc7627e2620412ad09e4db34ec3137594cfd8fa61a1235d9b84d1f60f20abd007dae0c0719b1955862ad9aae6110b91696b065c6185d7f9bb3907f64059441d574f0b1644e8976183cdcde1af59ea9e1ab6a97401e97df9e4420d8c13c88298ecb9c9b7b1fa4628bc87f7d4a75532766c4379d380ceecec97a14f61dc37616727d4376855fea6f9173e89737dac130aeafc29398162d0bb0ea2ce8326a7d129b13a513a01312caa107f2afeb95642f6e793e88c8752523eb3a8f781ef38507423e68178339b2141476846a225f2d83fc275df2723114a987b7ca569568ba216f2cf3c8179f2bd41f951a1ce483054388c7f6864ad9abf5ba372ca702c9e87306378e0549555ad4f841dcfbec5c36da2171656d174445183375df756c1655e2cdae5473175e4033e6f089dc289b27edc709276622495271585143e14ae1ae910d4d71e9fdd4dd822af7a4d0d9a9252d2ce7b708f1b4df69630a53bad6007032d904045fd06f07c75131f52932ac1729cb379aa4762a90fea72b5c5a65e5a7d2898df0ae2064a765ef8e2cbb164ac0dee45e002fee8532f5c34e7551bc6896f4df8f27be9c13a931e269926722da100f6da90c4cc9f3aca5dce6ea6576e97b679b5e9d91b606ad2a69a8c18413eed2fca8b8e4abe96e84900d88dcd01825db765da89bf908011869ec6f9e21dcdb97ed51c25ed1ec512feb277fa981dd0a8f291061ef63576206db553cdeaf7c652efbac86d4d65d1367c9778e7bbe0df211096e6a4310e448b05d2feaf445a57f4d41ebc5e405731ba27f42b1116b385d28999f7cae908a99d47b24ce04c35fcd8c3a590eedbffb6cf2601d32063b331d8b2df9a30e9a6af5c68d7247e588a70838ca7fd794ab7ae3a5e17f9e50561b3d6a17a77a44a2bd28bfe96154c50bbc769fbd693af3b6c77de34219800d90c1aa8c9653d510647d78fc4b32a02d8f465a1177a04a2768dc33f34776024254a4aa049eda0945876b6e"}) 2018/03/29 11:59:48 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:48 executing program 5: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x156, 0x0) getpeername$netlink(r0, &(0x7f0000000140), &(0x7f0000000380)=0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x4) r4 = request_key(&(0x7f00000004c0)='id_legacy\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000540)='#\\vmnet1vboxnet1$keyring\x00', 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, r4, r5) write$rdma_cm(r1, &(0x7f0000000700)=ANY=[], 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r1, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x70, 0xfffffffffffffff7, 0xc00000000000000, 0x20, 0x2, 0x0, 0x5, 0x10000, 0x2, 0xbf6, 0x4, 0x7ff, 0xff, 0x9, 0x9, 0x7f, 0x6, 0x81, 0x7f, 0x5, 0x0, 0x9, 0x200, 0x0, 0xfff, 0x2, 0xfffffffffffff07a, 0x4, 0xfffffffffffffffc, 0x2, 0x3, 0x8, 0x6, 0x7, 0x8000000000000000, 0x2, 0x7, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x14108, 0x8, 0x3, 0x1, 0x3, 0x1f, 0xffffffff}, r7, 0x9, r6, 0x0) write$rdma_cm(r1, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x600) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000100)=0x7) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000000)=@disconnect={0xa, 0x4, 0xfa00, {r1}}, 0xc) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:48 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/03/29 11:59:48 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03010000400007b9031d22cbe0f5ad94e001566300fa0a0000000000000000000000000000000000000000000001000000000a0000000000b200ff0137000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 156.977606] x86/PAT: syz-executor4:20292 map pfn RAM range req write-combining for [mem 0x190a10000-0x190a13fff], got write-back 2018/03/29 11:59:48 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4200, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r1, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r1, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r1, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0x6c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 2018/03/29 11:59:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2018/03/29 11:59:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) [ 157.065232] x86/PAT: syz-executor3:20309 map pfn RAM range req write-combining for [mem 0x1accd0000-0x1accd3fff], got write-back 2018/03/29 11:59:48 executing program 4: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2018/03/29 11:59:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 2: r0 = memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0x0, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fcntl$getown(r1, 0x9) syz_open_procfs(r5, &(0x7f0000000000)='net/ip6_flowlabel\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r7, 0xaeb7) accept$packet(r8, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2018/03/29 11:59:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x0, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007be32266b7721c04c201041c0ad752b258e245417ed8eb118355a4b40ffa1177283e0a99f167f42444c17bbe274bd48ac57ea6eae73ded1aaf8d46e57c66d6433cb1c3596e92dc670c5596c4e14cd876c2343a8affe7c03bacca057d8c8b6f3dcdfb926444684dc62d1945db0b0da431c5520f0ca7550ad14196a358b6ff09589982e00973b9a8abe8a846e87342dd2dc1fbc0b0c448e242e2e00c1155b546e4e8e574baed984a75caf9abe14222bcca3ccc7d5275de0634266bcb9d0dcb36ee405020fe3d881fcf208982b7071eb7fac08a5879"]], 0xc8) 2018/03/29 11:59:48 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x1, 0xfffffffffffffff8, 0x22, 0xc74, 0xa448, 0x100000001, 0x8, 0x2000000, 0x81, 0x8000, 0xff}, 0xb) write$rdma_cm(r0, &(0x7f0000000140)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x3}}, 0x18) 2018/03/29 11:59:48 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000280)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000300)=0x80, 0x80800) syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x1000, 0x2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r3}}, 0x48) r5 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="58544c8c3a25dc31be8388e7a2ae", 0xe, 0xfffffffffffffffd) r6 = request_key(&(0x7f0000000840)='blacklist\x00', &(0x7f0000000880)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000008c0)='/dev/sg#\x00', 0x0) keyctl$instantiate_iov(0x14, r5, &(0x7f00000007c0)=[{&(0x7f00000004c0)="63c9912aa43c6d0c8e932d63e82e89ae1a2074af09549e9ae33bd6344b6aef180201ef061caa6bf315f594d8fa52589919053502a030fc01a7188d1ded42425f4d78dc3a4377f194578c01141e547d3e70f8c0bd99ca6e6e9ed03db60a943fcfe5f108660e6eba5ba02f116c3594f124b3bee86074686afb05b973d79f76e94d2e4fad0dc335611e440984fc1fe0897b7213f6fa306c2aafe255c88073a76f673d3ddbd849555d6e8d1bc89ada733eefe7d230be39187d8a4e5b1118afd60e2017de02f9af6e333ad24eb5", 0xcb}, {&(0x7f0000000380)}, {&(0x7f00000005c0)="e1ed77f64f7d1a8a27c78d89a63bc7d6f50ea5e7d17d939fd33d0d4c317d74091ba14151cf86f7b325aeb33c56617ea468983ca1e24f", 0x36}, {&(0x7f0000000600)="0b7eb6c397ee47527b727293804690841f130fa5fecdac3a5e135154147b4329ba6b02d6f3bd9ad92ab157c5cb5c97597238670b3000457e8fefaf8f0ee5dca55ce85eecea48d179151db253d1bfef85a1b6706f37112fd4eaec265e4084bc7bb4f310fdd919aae525cb08e1cd2dc18dca1130a04757c08acad5f2db7bf2ea7db0536916f29412400d4d09555faf", 0x8e}, {&(0x7f00000006c0)="966873685f76d72256261acc9192be436f0024465098fbb1931f41a46c1d67ee9d1630090d23c8a364fa969e3ff454beed1ece5b3b7b5cb6b545ff37a4b894e8fc486fe136bebc23b90476989f7f179114a7b42ff5fed33dc434237d3cbbadf70f8707dfd978842e0c38c30d31c4348c932704161a91f7f65c89d750b24224e121f940c7ffce0a8eacbdb24f11f326ed1273eac490bf10a74bed88480238f2f3e290d5eb1e05199e8872e1d4ee9d4ba5b2c785f34655dd763d12789632bcab5d6a11ac80d76bbb9ddcdfafdcf70d2cfc1435e4d457659addef0b60d6679422575fefca45484408c2e726ba0efe7898b5a2c0a5089b99af", 0xf7}], 0x5, r6) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000900)="8428a7b3dbd7c28fcd289c3ea214ed5722e2f613a85f50c3a691a6fbb265aae504f20cfad91ab32c05cd6b0117473895cdfb70c90ba9c774697035a39d6e3b7a010ffbc691181c852b50a2ba4cb67416de6981474a42bfdaee381dc5f19f180d3a8cd1ff21755eb36faf2c1cf004eb7c24b302cd2c7d4db59ffd9000589506b5f1d459c696d7c631efdc0769930e353fc9c3b05be550") write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) write$rdma_cm(r4, &(0x7f0000000100)=@destroy_id={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) 2018/03/29 11:59:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) write$rdma_cm(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000310000fa0300000000000000b895665c0a9538c73f61a1b4c80b0e2e205d3f0472a41a0fa7919f836eb7e6785a3f97e54ef41c2b92ecee6ac2e0947e04f61946cab35f319f67e653e9a8def3f819281a4bb97f17b365ebc046eedf7b", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc, 0x2, &(0x7f0000000180)={0x0, 0x1c9c380}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r2) shmat(0xffffffffffffffff, &(0x7f00000d0000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(0x0) socketpair$ax25(0x3, 0x5, 0xce, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x4800) mkdir(&(0x7f0000fb3000)='./file0\x00', 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r1}}, 0x48) write$rdma_cm(r0, &(0x7f0000000180)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000001b80)}}, 0xc8) 2018/03/29 11:59:48 executing program 3: memfd_create(&(0x7f0000002000)="2f7b06003170707031253a656d30f9", 0x0) fanotify_init(0x0, 0x8001) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x9, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd2(0x0, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r5, 0xaeb7) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="08052508000000080004003f000000f0ff04000600000008000400010001020000000000"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x15) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 157.230819] kasan: CONFIG_KASAN_INLINE enabled [ 157.235764] kasan: GPF could be caused by NULL-ptr deref or user memory access