tl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={{0x41c, 0x80000000, 0xffff, 0x80000001, 0x2f3ddd7a, 0x5}, 0x8, 0x1, 0x8}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 7: r0 = socket$inet6(0xa, 0x801, 0x0) getsockopt$inet6_int(r0, 0x29, 0x400000000000004, &(0x7f0000000080), &(0x7f0000000100)=0xffffffffffffff72) 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, &(0x7f00000006c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, &(0x7f00000006c0)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={{0x41c, 0x80000000, 0xffff, 0x80000001, 0x2f3ddd7a, 0x5}, 0x8, 0x1, 0x8}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 3: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 7: r0 = socket(0x18, 0x0, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/77, &(0x7f0000000100)=0x1e) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000040)=""/4, &(0x7f0000000140)=0x4) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 3: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x57, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={{0x41c, 0x80000000, 0xffff, 0x80000001, 0x2f3ddd7a, 0x5}, 0x8, 0x1, 0x8}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 3: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x57, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xfffffffffffffd77) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2000, 0x0) r3 = socket$key(0xf, 0x3, 0x2) fchdir(r3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x6, 0x7, 0x0, 0x0, 0x7, 0x0, 0x7, 0x5, 0x1, 0x9}) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0x3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000040)="2db52627657468312c00") r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0xd624}) r5 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000280)={0xf8a, 0x3f, 0x4, 0x7, 0x8, 0x7fff}) ptrace$setopts(0x4206, r5, 0x3, 0x2) 2018/03/30 09:56:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x57, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2000000000000002, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x82, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x1, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x3, 0x7bc5569b, 0x0, 0x80000001, 0x0, 0x6, 0x0, 0x1, 0x2, 0x4, 0x3ff, 0x1, 0x5, 0x81, 0x2, 0xc954, 0x80000000, 0xffffffff, 0x20, 0xfffffffffffffffa, 0x0, 0x40, 0xfcd, 0x100, 0x7ff, 0x38, 0x3f, 0x1, 0x40, 0x9, 0x4, 0x5, 0x591, 0x81, 0xceeb, 0xd830, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x6, 0x8}, 0x40, 0x8, 0xfff, 0x5, 0x7, 0x3, 0x1}, r2, 0x10, r0, 0x3) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/rt_cache\x00') pread64(r4, &(0x7f0000000080)=""/26, 0x1a, 0x4) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000100)=0x1000) 2018/03/30 09:56:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x82, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x82, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x98, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x98, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0x98, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:50 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:50 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xa3, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cd"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:50 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:50 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 2018/03/30 09:56:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xa3, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cd"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xa3, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cd"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xa8, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(0xffffffffffffffff, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xa8, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xa8, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xab, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435f"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xab, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435f"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 7: r0 = userfaultfd(0x0) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xab, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435f"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 7: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r0 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xac, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 7: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r0 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xac, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:51 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r7, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:51 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r0 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 7: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r0 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:51 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xac, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:51 executing program 3 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:51 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r0 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) [ 56.822088] FAULT_INJECTION: forcing a failure. [ 56.822088] name failslab, interval 1, probability 0, space 0, times 1 [ 56.833451] CPU: 0 PID: 6624 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #281 [ 56.840742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.850110] Call Trace: [ 56.852726] dump_stack+0x194/0x24d [ 56.856387] ? arch_local_irq_restore+0x53/0x53 [ 56.861120] should_fail+0x8c0/0xa40 [ 56.864866] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 56.869975] ? find_held_lock+0x35/0x1d0 [ 56.874054] ? tracing_generic_entry_update+0x15a/0x1d0 [ 56.879439] ? perf_trace_buf_update+0x66/0xb0 [ 56.884053] ? find_held_lock+0x35/0x1d0 [ 56.888203] ? check_same_owner+0x320/0x320 [ 56.892524] ? __asan_poison_stack_memory+0x37/0x40 [ 56.897536] ? rcu_note_context_switch+0x710/0x710 [ 56.902451] ? __lock_acquire+0x664/0x3e00 [ 56.906678] ? __lock_acquire+0x664/0x3e00 [ 56.910914] should_failslab+0xec/0x120 [ 56.914885] kmem_cache_alloc_node_trace+0x5a/0x760 [ 56.919909] __get_vm_area_node+0xae/0x340 [ 56.924135] __vmalloc_node_range+0xa3/0x650 [ 56.928524] ? bpf_prog_alloc+0xaa/0x350 [ 56.932564] ? usercopy_abort+0xd0/0xd0 [ 56.936535] ? print_irqtrace_events+0x270/0x270 [ 56.941307] __vmalloc+0x45/0x50 [ 56.944662] ? bpf_prog_alloc+0xaa/0x350 [ 56.948725] bpf_prog_alloc+0xaa/0x350 [ 56.952604] ? bpf_prog_kallsyms_find+0x440/0x440 [ 56.957462] ? mpi_resize+0x200/0x200 [ 56.961256] ? perf_trace_lock+0x900/0x900 [ 56.965528] bpf_prog_load+0x2e3/0x1bb0 [ 56.969507] ? perf_trace_run_bpf_submit+0x131/0x330 [ 56.974615] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 56.979730] ? bpf_prog_new_fd+0x50/0x50 [ 56.983799] ? perf_tp_event+0xae0/0xae0 [ 56.987865] ? trace_hardirqs_off+0x10/0x10 [ 56.992216] ? find_held_lock+0x35/0x1d0 [ 56.996318] ? __might_fault+0x110/0x1d0 [ 56.996337] ? lock_downgrade+0x980/0x980 [ 57.004534] ? lock_release+0xa40/0xa40 [ 57.008531] ? __check_object_size+0x8b/0x530 [ 57.013065] ? __might_sleep+0x95/0x190 [ 57.017079] ? security_bpf+0x89/0xb0 [ 57.020904] SyS_bpf+0xe0f/0x4830 [ 57.024391] ? bpf_prog_get+0x20/0x20 [ 57.028219] ? finish_task_switch+0x1c1/0x7e0 [ 57.032715] ? lock_downgrade+0x980/0x980 [ 57.036864] ? lock_release+0xa40/0xa40 [ 57.040842] ? do_raw_spin_trylock+0x190/0x190 [ 57.045418] ? compat_start_thread+0x80/0x80 [ 57.049815] ? _raw_spin_unlock_irq+0x27/0x70 [ 57.054311] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 57.059322] ? trace_hardirqs_on+0xd/0x10 [ 57.063454] ? _raw_spin_unlock_irq+0x27/0x70 [ 57.067938] ? finish_task_switch+0x1c1/0x7e0 [ 57.072416] ? finish_task_switch+0x182/0x7e0 [ 57.076904] ? copy_overflow+0x20/0x20 [ 57.080810] ? __schedule+0x903/0x1ec0 [ 57.084712] ? __sched_text_start+0x8/0x8 [ 57.088860] ? get_pid_task+0xbc/0x140 [ 57.092752] ? proc_fail_nth_write+0x9b/0x1d0 [ 57.097235] ? map_files_get_link+0x3a0/0x3a0 [ 57.101752] ? find_held_lock+0x35/0x1d0 [ 57.105809] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 57.110644] ? vfs_write+0x374/0x510 [ 57.114342] ? wait_for_completion+0x770/0x770 [ 57.118931] ? schedule+0xf5/0x430 [ 57.122479] ? __schedule+0x1ec0/0x1ec0 [ 57.126492] ? __sb_end_write+0xa0/0xd0 [ 57.130460] ? exit_to_usermode_loop+0x8c/0x2f0 [ 57.135149] ? trace_hardirqs_off+0xd/0x10 [ 57.139388] ? do_fast_syscall_32+0x156/0xf9f [ 57.143903] ? bpf_prog_get+0x20/0x20 [ 57.147701] do_fast_syscall_32+0x3ec/0xf9f [ 57.152037] ? do_int80_syscall_32+0x9c0/0x9c0 [ 57.156606] ? _raw_spin_unlock_irq+0x27/0x70 [ 57.161087] ? finish_task_switch+0x1c1/0x7e0 [ 57.165578] ? syscall_return_slowpath+0x2ac/0x550 [ 57.170496] ? prepare_exit_to_usermode+0x350/0x350 [ 57.175499] ? sysret32_from_system_call+0x5/0x3c [ 57.180343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.185182] entry_SYSENTER_compat+0x70/0x7f [ 57.189570] RIP: 0023:0xf7f17c99 [ 57.192911] RSP: 002b:00000000f771309c EFLAGS: 00000286 ORIG_RAX: 0000000000000165 [ 57.200600] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000002000e000 [ 57.207854] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.215106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.222363] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 57.229627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.237748] syz-executor3: vmalloc: allocation failure: 4096 bytes, mode:0x14280c0(GFP_USER|__GFP_ZERO), nodemask=(null) [ 57.248804] syz-executor3 cpuset=syz3 mems_allowed=0 [ 57.254188] CPU: 0 PID: 6624 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #281 [ 57.261459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.270794] Call Trace: [ 57.273367] dump_stack+0x194/0x24d [ 57.276988] ? arch_local_irq_restore+0x53/0x53 [ 57.281638] ? idr_get_free+0xfd0/0xfd0 [ 57.285599] ? rcu_pm_notify+0xc0/0xc0 [ 57.289482] warn_alloc+0x19a/0x2b0 [ 57.293097] ? zone_watermark_ok_safe+0x400/0x400 [ 57.297926] ? kmem_cache_alloc_node_trace+0x36f/0x760 [ 57.303210] ? __get_vm_area_node+0x234/0x340 [ 57.307710] __vmalloc_node_range+0x4f0/0x650 [ 57.312192] ? usercopy_abort+0xd0/0xd0 [ 57.316151] ? print_irqtrace_events+0x270/0x270 [ 57.320898] __vmalloc+0x45/0x50 [ 57.324247] ? bpf_prog_alloc+0xaa/0x350 [ 57.328304] bpf_prog_alloc+0xaa/0x350 [ 57.332186] ? bpf_prog_kallsyms_find+0x440/0x440 [ 57.337033] ? mpi_resize+0x200/0x200 [ 57.340813] ? perf_trace_lock+0x900/0x900 [ 57.345057] bpf_prog_load+0x2e3/0x1bb0 [ 57.349014] ? perf_trace_run_bpf_submit+0x131/0x330 [ 57.354101] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 57.359189] ? bpf_prog_new_fd+0x50/0x50 [ 57.363233] ? perf_tp_event+0xae0/0xae0 [ 57.367271] ? trace_hardirqs_off+0x10/0x10 [ 57.371580] ? find_held_lock+0x35/0x1d0 [ 57.375634] ? __might_fault+0x110/0x1d0 [ 57.379675] ? lock_downgrade+0x980/0x980 [ 57.383806] ? lock_release+0xa40/0xa40 [ 57.387773] ? __check_object_size+0x8b/0x530 [ 57.392271] ? __might_sleep+0x95/0x190 [ 57.396242] ? security_bpf+0x89/0xb0 [ 57.400042] SyS_bpf+0xe0f/0x4830 [ 57.403488] ? bpf_prog_get+0x20/0x20 [ 57.407299] ? finish_task_switch+0x1c1/0x7e0 [ 57.411787] ? lock_downgrade+0x980/0x980 [ 57.415927] ? lock_release+0xa40/0xa40 [ 57.419884] ? do_raw_spin_trylock+0x190/0x190 [ 57.424448] ? compat_start_thread+0x80/0x80 [ 57.428857] ? _raw_spin_unlock_irq+0x27/0x70 [ 57.433346] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 57.438343] ? trace_hardirqs_on+0xd/0x10 [ 57.442472] ? _raw_spin_unlock_irq+0x27/0x70 [ 57.446948] ? finish_task_switch+0x1c1/0x7e0 [ 57.451431] ? finish_task_switch+0x182/0x7e0 [ 57.455911] ? copy_overflow+0x20/0x20 [ 57.459853] ? __schedule+0x903/0x1ec0 [ 57.463737] ? __sched_text_start+0x8/0x8 [ 57.467865] ? get_pid_task+0xbc/0x140 [ 57.471746] ? proc_fail_nth_write+0x9b/0x1d0 [ 57.476242] ? map_files_get_link+0x3a0/0x3a0 [ 57.480739] ? find_held_lock+0x35/0x1d0 [ 57.484790] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 57.489616] ? vfs_write+0x374/0x510 [ 57.493309] ? wait_for_completion+0x770/0x770 [ 57.497879] ? schedule+0xf5/0x430 [ 57.501411] ? __schedule+0x1ec0/0x1ec0 [ 57.505391] ? __sb_end_write+0xa0/0xd0 [ 57.509350] ? exit_to_usermode_loop+0x8c/0x2f0 [ 57.514036] ? trace_hardirqs_off+0xd/0x10 [ 57.518275] ? do_fast_syscall_32+0x156/0xf9f [ 57.522767] ? bpf_prog_get+0x20/0x20 [ 57.526553] do_fast_syscall_32+0x3ec/0xf9f [ 57.530869] ? do_int80_syscall_32+0x9c0/0x9c0 [ 57.535431] ? _raw_spin_unlock_irq+0x27/0x70 [ 57.539908] ? finish_task_switch+0x1c1/0x7e0 [ 57.544392] ? syscall_return_slowpath+0x2ac/0x550 [ 57.549302] ? prepare_exit_to_usermode+0x350/0x350 [ 57.554322] ? sysret32_from_system_call+0x5/0x3c [ 57.559163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 57.563997] entry_SYSENTER_compat+0x70/0x7f [ 57.568389] RIP: 0023:0xf7f17c99 [ 57.571741] RSP: 002b:00000000f771309c EFLAGS: 00000286 ORIG_RAX: 0000000000000165 [ 57.579427] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000002000e000 [ 57.586673] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.593917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.601162] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 57.608406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.616068] Mem-Info: [ 57.618533] active_anon:149291 inactive_anon:81 isolated_anon:0 [ 57.618533] active_file:3457 inactive_file:8019 isolated_file:0 [ 57.618533] unevictable:0 dirty:102 writeback:0 unstable:0 [ 57.618533] slab_reclaimable:8112 slab_unreclaimable:98312 [ 57.618533] mapped:23929 shmem:88 pagetables:768 bounce:0 [ 57.618533] free:1326448 free_pcp:380 free_cma:0 [ 57.652151] Node 0 active_anon:597164kB inactive_anon:324kB active_file:13828kB inactive_file:32076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95716kB dirty:408kB writeback:0kB shmem:352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 243712kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 57.680332] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 57.706498] lowmem_reserve[]: 0 2851 6358 6358 [ 57.711128] Node 0 DMA32 free:2921372kB min:30224kB low:37780kB high:45336kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2922084kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:712kB local_pcp:52kB free_cma:0kB [ 57.738768] lowmem_reserve[]: 0 0 3507 3507 [ 57.743143] Node 0 Normal free:2368512kB min:37188kB low:46484kB high:55780kB active_anon:597164kB inactive_anon:324kB active_file:13828kB inactive_file:32076kB unevictable:0kB writepending:408kB present:4718592kB managed:3592080kB mlocked:0kB kernel_stack:4576kB pagetables:3072kB bounce:0kB free_pcp:796kB local_pcp:368kB free_cma:0kB [ 57.772956] lowmem_reserve[]: 0 0 0 0 [ 57.776813] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 57.790521] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 0*64kB 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 711*4096kB (M) = 2921372kB [ 57.805408] Node 0 Normal: 1304*4kB (UM) 103*8kB (UME) 1810*16kB (UM) 316*32kB (UM) 329*64kB (UM) 5*128kB (UME) 19*256kB (UME) 4*512kB (UM) 5*1024kB (UME) 2*2048kB (ME) 558*4096kB (M) = 2368504kB 2018/03/30 09:56:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33842bef0218f7ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:52 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r0 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:52 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:52 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:52 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:52 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:52 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r7, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) [ 57.823119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 57.831718] 11581 total pagecache pages [ 57.835718] 0 pages in swap cache [ 57.839195] Swap cache stats: add 0, delete 0, find 0/0 [ 57.844573] Free swap = 0kB [ 57.847606] Total swap = 0kB [ 57.850636] 1965969 pages RAM [ 57.853929] 0 pages HighMem/MovableOnly [ 57.857910] 333451 pages reserved 2018/03/30 09:56:52 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:52 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:52 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:52 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r7, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:53 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:53 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x58c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x321000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000000080)="73797a6b616c3022a600856c657200", 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4990100000000000700000000000000070000000026df6b00000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:53 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:53 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:53 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:53 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:53 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:53 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:53 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x0, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101a00, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x1, 0x0, 0xfff, 0x5, 0x4153, 0x9, 0x1f, {0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x100, 0x1, 0x8, 0x17}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x5, 0x17}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x2c, @broadcast=0xffffffff, 0x4e23, 0x3, 'ovf\x00', 0x6, 0x3, 0x36}, {@rand_addr=0x9, 0x4e22, 0x0, 0x0, 0x5}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0x6, 0x7, 0x4, 0x13, r0, 0x7}, 0x2c) 2018/03/30 09:56:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa}, 0x1c) 2018/03/30 09:56:53 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:53 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x18, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 3: r0 = getpgrp(0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000180)={0x1, 0xffffffffffffff9c, 0x1}) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x5, 0x3, 0x4, 0x8, 0x0, 0x80000001, 0x20, 0x5, 0x4, 0x7, 0x0, 0xbd7, 0x9, 0x3, 0x2, 0x8001, 0x0, 0x5, 0xff, 0x71740777, 0x100, 0x7fff, 0xfffffffffffffff9, 0x400, 0x10000, 0x40, 0x7, 0x200, 0xc0, 0x6d, 0x1c0000, 0xdf, 0x5, 0x4, 0x9, 0x3, 0x0, 0x7f, 0x5, @perf_bp, 0x4, 0x1, 0x1, 0x5, 0x3c, 0x81, 0x1f}, r0, 0x4, r1, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f00000000c0)={0x20000000000001cc, &(0x7f0000000200)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000040)={r2}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:53 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:53 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x32, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f3384551b0207f6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') [ 58.411030] FAULT_INJECTION: forcing a failure. [ 58.411030] name failslab, interval 1, probability 0, space 0, times 0 [ 58.422612] CPU: 1 PID: 6757 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #281 [ 58.429897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 58.439258] Call Trace: [ 58.441877] dump_stack+0x194/0x24d [ 58.445514] ? arch_local_irq_restore+0x53/0x53 [ 58.450202] ? ipv6_dev_get_saddr+0x4e2/0xdc0 [ 58.454688] should_fail+0x8c0/0xa40 [ 58.458386] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 58.463470] ? print_irqtrace_events+0x270/0x270 [ 58.468203] ? perf_trace_lock+0xd6/0x900 [ 58.472333] ? trace_hardirqs_off+0x10/0x10 [ 58.476639] ? trace_event_raw_event_lock+0x340/0x340 [ 58.481815] ? inet6_dump_ifaddr+0x30/0x30 [ 58.486041] ? print_irqtrace_events+0x270/0x270 [ 58.490784] ? lock_downgrade+0x980/0x980 [ 58.494915] ? lock_release+0xa40/0xa40 [ 58.498877] should_failslab+0xec/0x120 [ 58.502831] kmem_cache_alloc+0x47/0x760 [ 58.506875] ? lock_release+0xa40/0xa40 [ 58.510836] ? trace_hardirqs_on+0xd/0x10 [ 58.514966] inet_bind_bucket_create+0x7a/0x350 [ 58.519612] ? inet_unhash+0xa80/0xa80 [ 58.523480] ? __inet_hash_connect+0x5f1/0xed0 [ 58.528047] __inet_hash_connect+0x670/0xed0 [ 58.532437] ? inet6_lookup+0xd0/0xd0 [ 58.536219] ? dst_output+0x140/0x140 [ 58.540025] ? inet_hash+0x90/0x90 [ 58.543549] ? __lock_is_held+0xb6/0x140 [ 58.547595] ? __siphash_aligned+0x1b9/0x330 [ 58.551994] ? secure_ipv6_port_ephemeral+0x1f3/0x300 [ 58.557164] ? secure_tcpv6_seq+0x350/0x350 [ 58.561467] ? inet_sock_destruct+0x950/0x950 [ 58.565952] ? __lock_is_held+0xb6/0x140 [ 58.570000] inet6_hash_connect+0x62/0xc0 [ 58.574136] dccp_v6_connect+0xd68/0x1bf0 [ 58.578272] ? dccp_v6_init_sock+0x90/0x90 [ 58.582488] ? perf_trace_lock+0xd6/0x900 [ 58.586626] ? trace_event_raw_event_lock+0x340/0x340 [ 58.591807] ? trace_hardirqs_off+0x10/0x10 [ 58.596137] __inet_stream_connect+0x2d4/0xf00 [ 58.600697] ? __inet_stream_connect+0x2d4/0xf00 [ 58.605428] ? lock_acquire+0x1d5/0x580 [ 58.609376] ? lock_sock_nested+0xa3/0x110 [ 58.613585] ? lock_acquire+0x1d5/0x580 [ 58.617546] ? inet_bind+0x930/0x930 [ 58.621246] ? mark_held_locks+0xaf/0x100 [ 58.625369] ? do_raw_spin_trylock+0x190/0x190 [ 58.629928] ? __local_bh_enable_ip+0x121/0x230 [ 58.634578] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 58.639568] ? lock_sock_nested+0x91/0x110 [ 58.643779] ? trace_hardirqs_on+0xd/0x10 [ 58.647904] ? __local_bh_enable_ip+0x121/0x230 [ 58.652559] inet_stream_connect+0x58/0xa0 [ 58.656775] SYSC_connect+0x213/0x4a0 [ 58.660556] ? SYSC_bind+0x410/0x410 [ 58.664269] ? __sb_end_write+0xa0/0xd0 [ 58.668226] ? fput+0xd2/0x140 [ 58.671397] ? SyS_write+0x184/0x220 [ 58.675086] ? __do_page_fault+0x3d6/0xc90 [ 58.679302] ? SyS_read+0x220/0x220 [ 58.682917] SyS_connect+0x24/0x30 [ 58.686438] ? SyS_accept+0x30/0x30 [ 58.690049] do_fast_syscall_32+0x3ec/0xf9f [ 58.694372] ? do_int80_syscall_32+0x9c0/0x9c0 [ 58.698930] ? _raw_spin_unlock_irq+0x27/0x70 [ 58.703402] ? finish_task_switch+0x1c1/0x7e0 [ 58.707882] ? syscall_return_slowpath+0x2ac/0x550 [ 58.712790] ? prepare_exit_to_usermode+0x350/0x350 [ 58.717796] ? sysret32_from_system_call+0x5/0x3c [ 58.722626] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 58.727454] entry_SYSENTER_compat+0x70/0x7f [ 58.731842] RIP: 0023:0xf7f47c99 [ 58.735182] RSP: 002b:00000000f774309c EFLAGS: 00000286 ORIG_RAX: 000000000000016a [ 58.742866] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000000 [ 58.750111] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 2018/03/30 09:56:53 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x32, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000100)=""/3, 0x3}], 0x2, &(0x7f0000000400)=[@cswp={0x58, 0x114, 0x7, {{0x5479, 0x1f}, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x7, 0x3, 0x5, 0x6, 0x5, 0x7a, 0x2}}, @fadd={0x58, 0x114, 0x6, {{0xff, 0x3}, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240)=0x57e, 0x9, 0x7, 0x4, 0xfffffffffffffffa, 0x1, 0x8001}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000280)=""/43, 0x2b}, &(0x7f00000002c0), 0x4}}, @rdma_dest={0x18, 0x114, 0x2, {0x3ff, 0x1de}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x7ff}, &(0x7f0000000300)=0x31, &(0x7f0000000340)=0xed1, 0x101, 0xfffffffffffffffc, 0x7, 0x99cb, 0x2, 0x9}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000380)=""/45, 0x2d}, &(0x7f00000003c0), 0x8}}], 0x180, 0x40001}, 0x810) 2018/03/30 09:56:53 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) [ 58.757530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.764775] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 58.772027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/03/30 09:56:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:53 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x32, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:53 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000016c0)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f00000017c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x2, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd30}, @call={0x85, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbec8, 0x0, 0x0, 0x0, 0x2}, @generic={0x10000000000000, 0x6, 0x9, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7ff}, @jmp={0x5, 0x1, 0xf, 0x9, 0x7, 0x18, 0x1}, @map={0x18, 0x5, 0x1, 0x0, r0}], {0x95}}, &(0x7f0000000140)='syzkaller\x00', 0x2d8, 0x2e, &(0x7f0000000180)=""/46, 0x41f00, 0x1, [], r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:53 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:53 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3f, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:53 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x8) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3f, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x9, 0x200) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, &(0x7f0000000040)=0x1f) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x24080) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x84001) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 6: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r0 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3f, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) fsync(r0) listen(r0, 0xffffffff80000000) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:54 executing program 6: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r0 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) r1 = memfd_create(&(0x7f00000000c0)='GPL\x00', 0x1) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)="1215e23d", 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0xfffffffffffffffe, 0x1}, 0xffffffffffffffd2) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x84800) openat$cgroup_int(r1, &(0x7f0000000400)='cpuset.mem_exclusive\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x18c, 0x10, 0x100, 0x70bd29, 0x25dfdbfc, {0x12}, [@nested={0x58, 0x6a, [@typed={0x8, 0x8b, @uid=r4}, @generic="02c2670ddffbe986b16a2eb1ada83c52b83a3f7ff0205f27d3e14ddcf7fb67b2ff0de64c5224a701ab583f8718e591e67225966f4634751fd26efa1f5810a9b9", @typed={0x8, 0x5a, @fd=r0}, @typed={0x4, 0x39}]}, @typed={0x8, 0x3a, @ipv4=@multicast1=0xe0000001}, @generic="8f7c786014ab3621cd5a4b580d5366d506c9b70af8f869492279bb27259c1f24a9f13bba8652237c5386", @nested={0xec, 0x35, [@typed={0x8, 0x88, @fd=r0}, @typed={0xc0, 0x24, @binary="7a52ce618c34f89566797a76b688001dd62c3ed4da3547464f03cb3c88883f3779dbad92968a399c430ea50fa4f9785dc92ec7b5953b1a24e45dceef7e050ea036fd3d1a4ace06ac5e98cd09a63d7a9c52d802fcc68e24fb9420722a8a4e879d75c877ccfbd8402901be4583398642928eb9ac1a90bc10ca0e526cde161a5d31fe2ff2de817b6b8012634303d13f969eed4c49d59bacff5b1315397a5a2498ea3baa8ddfbd5ca675a034ef4d284fb9114ecd3da6c1cce44bbd"}, @typed={0x4, 0x24}, @typed={0x14, 0x5e, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @typed={0x8, 0x2e, @str='\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000380)) 2018/03/30 09:56:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x101200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{}, {r1, r2/1000+30000}}, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:54 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:54 executing program 6: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r0 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x40000001b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x46, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@local={0xfe, 0x80, [], 0xaa}, 0x7, r2}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x401, 0x400200) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x10000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) r1 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40042406, &(0x7f0000000040)='posix_acl_accesssecurity\x00') 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x49, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x204002) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000080)={0x77359400}, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'ip6gretap0\x00', 0x4000}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x49, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) r1 = dup3(r0, r0, 0x80000) getpeername$netrom(r1, &(0x7f0000000000)=@full, &(0x7f0000000080)=0x48) renameat(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x4ef, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x49, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/03/30 09:56:54 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = memfd_create(&(0x7f0000000000)='GPL\x00', 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000080)={r1, 0x2}) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x37a, 0xff, 0x4}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4, 0xf2cc, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, &(0x7f0000000200)=0x84) listen(r0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x410000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)="0001245d06514ef719", 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x0, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x3c}, 0x1c) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4b, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000", @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x0, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4040, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, r3, 0x200}) listen(r0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:54 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x0, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80, 0x2) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000140)={0x3, 0xa2, &(0x7f0000000080)="f8cbfdc26b29c4668481ceab5e915bb06b566ac11cfe00168de46a5ed7045caeefba716594714ae08f85111aaaadaf7143e7434b0724c9bfafe9def6c0c2b024227a8748a07924917d07987b89c52a265da74c832c5c8bb7d31286291ea684a59105c9ea8cdfd25840847d27a7addbf91b0e91b7932520cb63829fa2c357a6a164cb0e73ffe247eb6c8e9c273d621ac576a39d78a7ac3a5e8a7c7cac69c6fc19ceca"}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x6c, "2ae5db2771411d4ed8fd7a168376995ab3afe3ac32c592277aebfcd2a2b32a54e904588dc10e64272ab739253855a34f1d0dcb84cc1e445b042a45f45243203e23900d8c633f643810f99a76d67f1caa07209ea53f48519624a264afe0b766346a3c82e1b54f0ae05d33b7e2"}, &(0x7f0000000200)=0x74) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8) 2018/03/30 09:56:54 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:54 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bcsf0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnetconf={0x54, 0x52, 0x800, 0x70bd29, 0x25dfdbfc, {0xa}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6dcf}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_FORWARDING={0x8, 0x2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xe00000000000000}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xc726}, @NETCONFA_RP_FILTER={0x8, 0x3}]}, 0x54}, 0x1}, 0x10) 2018/03/30 09:56:54 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x0, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:54 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:54 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000140)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r2 = syz_open_dev$mice(&(0x7f00000007c0)='/dev/input/mice\x00', 0x0, 0x400000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e21, @rand_addr=0xffffffff80000001}}}, &(0x7f00000008c0)=0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000900)=@sack_info={r3, 0x4106, 0x9}, 0xc) r4 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x80000000, 0x10000) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000240)={0x84, @loopback=0x7f000001, 0x4e24, 0x4, 'wlc\x00', 0x3, 0x2, 0x45}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b6000000000000002500003f00000000000000000000640700000000009500000000000000000000007fda3bc225e9158b0bd8fa0934c538415f596167593db92e1e560ea9f82d3670d34c0e02f4ab"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$netlink(r5, 0x10e, 0x9, &(0x7f0000000280)=""/126, &(0x7f0000000100)=0x7e) ioctl$VT_WAITACTIVE(r4, 0x5607) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x109240, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000140)={0x6, 0xb280}) listen(r0, 0x100000000005) r2 = socket$inet6(0xa, 0x2006, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="2e0000000d00ecb2ee6330ce6f31502ccd21d1032ad80ccb8f922232eb5482b93fdeee9e038835f80b7f00b5d52002b15d66"], &(0x7f0000000080)=0x36) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0x101}, 0x8) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0x7, 0x6, 0xfff, 0xfffffffffffffffc, "8d66fa4f2bd943d7e830cf6ff0fe4412e28160c6a31dd35a050cb1dcdd20e40b7cd4a20597fbc00171aeab87", 0x1}, 0x0, 0x0, 0x5520, r4, 0x5, 0x2, "ce393bc9622feff6d3a170908bb4bea61818ff9fd7bf5b99a01bb9801755020cacf23084b807d81e8f6f56b2c535cb05a9523d83a489944ea9d5672ab697fa27", &(0x7f0000000180)='\x00', 0x1, [], [0x79c5, 0x9, 0xfff, 0x400]}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001300), &(0x7f0000001340)=0xb) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000300)=""/4096, 0x1000) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x0, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x8) r1 = dup(r0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000000)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @multicast1}, &(0x7f0000000080)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@rand_addr=0x8, 0x4e20, 0x2, 0x4e23, 0x9, 0x2, 0x20, 0x0, 0x0, r2, r3}, {0x2, 0xe9, 0x7fff, 0x0, 0x9, 0x91, 0xf8000000000000}, {0x7, 0x380000000000000, 0x4, 0x7}, 0x1, 0x6e6bba, 0x2, 0x0, 0x2}, {{@in=@multicast1=0xe0000001, 0x4d2, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3506, 0x3, 0x0, 0x80, 0x4, 0x2, 0x1}}, 0xe8) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) 2018/03/30 09:56:55 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r1 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000000)={0x9, 0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40086437, &(0x7f0000000040)={r2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x0, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)="211e8468616c6c657200", 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xfffffffffffffffc, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0xfffffffffffffc88, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000080)='--user:\x00') ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) ioctl$int_out(r0, 0x5462, &(0x7f00000000c0)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[{0x3, 0x9}, {0x3, 0x1001}, {0x7, 0x7}, {0x8, 0x9}, {0xc, 0xa3}], 0x5) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x6) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x7, 0x8, [0xfff, 0x2c5e, 0x9, 0x401, 0x10000, 0xfffffffffffffff8, 0xa0c8, 0x101]}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={r1, 0x8, 0x93, "813a7f8cb8fb3dfd573ef572681348640db7b92ccf037ea006a45525cd67e298f037144e5cd2acabf0fb858878c20068b141a50ab95f9b04773a2baf322ad22d4594a1423ec9c75984efcacb0ccd6931064fb432f3d0e3ddb453aaf1613e77096a76e962978e5a865b7595c1b5c5b4d09f21ef2479b39c9f8a42440d6180bc62c59f0d5da3e49b95a7a6808e089beca98c9b96"}, 0x9b) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000300)="1e2b73d79633d06f39fcdc3dd7e198244262e654b252e79dcb679a3246c61b40f207208c5b66e58d769d74e816717ad77913bd426bce3499e9b0fe5fb2f37374d4855aa3062a56176cb7327edbdeee7194d628c5aa2b02438643e49f5ca98acbb47bac5caba95714b913bef3d83b5372e149a2e3b9509f837f73bb", &(0x7f0000000380)="9e07812e90f588853f4df7c0fcfc41fe4e8574ec127a4c399a3deea39e9e554522d2b2d691cf35362c090925d39de12080063d5a2ad1f5ef3d0fac5325e3b55424806902f79fdcf9d2133ebb8bcd8d0ec1effe57e8125f4527fc71f3f7cc30bd69f602bdbcb9171a6f99bfe7a99cfdb2d98d0123e74df66a6e3f832717acbf7e7a490d3270d4330a0d247c5718611ffcf192438cde73c7aaf129dd1be8635fa9ecdb23bfec573c59b99399956ccdaa1b48a95ddd173c3584475c5d2199de93a31967b9ba0a1e8f996275ae69da", 0x7b, 0xcd}) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x18000, 0x0) connect$pptp(r4, &(0x7f00000002c0)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x1e) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) fcntl$setstatus(r3, 0x4, 0x40000) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000080)={0x3a, @loopback=0x7f000001, 0x4e24, 0x4, 'lblcr\x00', 0x1, 0x1d, 0x4}, 0x2c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getitimer(0x3, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f00000000c0)={0x742}) getpeername$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={@empty, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, 0xcc1, 0x8, 0x2e, 0x400, 0x7, 0x20048, r6}) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$unix(0x1, 0x7, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x800, 0x4) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000000c0)={0x33, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x4, 'lc\x00', 0xd, 0x9, 0x77}, 0x2c) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x6, r0, 0x1}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x2, 0x3, 0xa038}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) recvfrom$ipx(r1, &(0x7f0000000180)=""/121, 0x79, 0x100, &(0x7f0000000200)={0x4, 0x1, 0x1, "0260d2b4d733", 0x101}, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000280)={0x7, &(0x7f0000000240)=[{0x7, 0x8, 0x40, 0x1}, {0x5, 0x401, 0x80000000, 0x4}, {0x41edeb48, 0x19e9, 0x1, 0x6}, {0x400, 0x800, 0xb4a1, 0xf4c}, {0xfff, 0x7, 0x6, 0x7}, {0x800, 0x0, 0x1, 0x7ff}, {0x2, 0x1, 0x9, 0x7b}]}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={r3}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) [ 60.354361] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 lblcr [ 60.392544] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 lblcr 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) r1 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r3 = dup(r0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r3, r0, 0x81}) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e20, 0xfff, @empty, 0x7f}, {0xa, 0x4e21, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, 0x1, [0x9, 0x9, 0x81, 0x7e, 0xfffffffffffffff7, 0x4, 0x65, 0x7]}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@raw=[@ldst={0x3, 0x2, 0x3, 0x0, 0x7, 0xfffffffc, 0x10}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000003ff6)='GPL\x00', 0x800, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0xfffffffffffffffe}, 0x48) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000300)=0x80, 0x80000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @multicast2}, &(0x7f0000000140)=0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffd1, 0x2000) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000240)='/dev/snd/pcmC#D#p\x00') 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20}}, 0x0, 0xfffffffffffffffc, 0x8, 0x95, 0x12}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000004c0)={r2, 0x38, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0xff}, @in6={0xa, 0x4e24, 0xfffffffffffff654, @mcast1={0xff, 0x1, [], 0x1}, 0x9}]}, &(0x7f0000000500)=0xc) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000040)=0x6, 0x4) listen(r0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3, 0x7, 0x69, &(0x7f0000ffc000/0x1000)=nil, 0x80}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b40000000000000025000000000057000700000049b36d59d11028400000000000070000000b0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000000000)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) arch_prctl(0x1003, &(0x7f0000000040)="5994805fbacfdbf7de21cfc240ffc7b6e25f2ebe8bde5f3a980a60ec3d98fc965e66eb0c79b7e546e32323c530cacff1c2b0c903470e63832a9e3d0bc88fbfb1b9f7142ddbfff532175d5c3345c5c0bf0395c51b207680199ce7d62de1e07cea551343d3415987aadac9c065bca7c44ae5") bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80007, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x80800) getsockname(r0, &(0x7f0000000040)=@alg, &(0x7f0000000140)=0x1c) accept4$ipx(0xffffffffffffff9c, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x80000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e62d"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x40, 0x0) connect$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x2, 0x1, 0x10000, 0x800, "cc003e17f777df1cb0e38376f3950343ef0540dc834160f5aadb0ae04bde8d1d9dc5586a81ce6c17cabec7c080f6510dc88c6402ab7d1f7814d916a637f8a9"}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000002500000000000000000000000000000000000000009500000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000240), 0x4) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000250000000000000007000000008d82e6b3d000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:55 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:55 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:55 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@ipx, &(0x7f00000005c0)=0x80, 0x80000) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x634c, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000000)=""/58, &(0x7f0000000740)=0x3a) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffff, 0x1f, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x28, &(0x7f0000000200)}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x24600, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000003c0)={0x2b, 0x7a, 0x3, 0x4}) ppoll(&(0x7f0000000300)=[{r0, 0x10}, {r1, 0x2024}, {r2, 0x8010}, {r3, 0x10}], 0x4, &(0x7f0000000340), &(0x7f0000000380)={0x7c}, 0x8) r4 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_in(r0, 0x5473, &(0x7f0000000640)=0x53) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000004c0), &(0x7f0000000500)=0xfffffffffffffcfd) listen(r1, 0x2) r5 = socket$inet6(0xa, 0x1, 0x4) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000880)="80400971d4126525b95476f9b3a8880c3e2b7f75c59f27b7e1de1c0d4ba9fd3c1cb665e2665713076dd64c6796ec24889e3542f5897c92888433dde3a760f1944c21c459cfd4b98441e3ef6e205d67a54510ce4e1e4afecb6d4524f06a1f785aedb4e3392ef64a224579d8d9295f476b92eb5ac8a3a41242000d8c5ccc783491c3b20e24a06504f381baccec1a7601b1b41aaa6b58733b9cea94f9c7b41c45843feba2a381dee6e28d2ee4ee657f3c516d378d25ab2c23ba9ae48ab2a391f16e0da2de3f8f1ecb57325d669f0948a0fdd5d7ca64b6f1a9612898abdf5aab38c2846458fb1167cf6dca32f55e93e47830b97e32e2d73c656810084c105ae8ba45db6a48821306dcd089d6f304906fef33d4d072aa1cddc4a6b7f09f46a7bb83dc6d36970b71ebe1e0075b1be0b923ddf950fb56a0fe5b40ee6f3fd27210d9c20a3175a8c0c965c82998a3731cba9fb451bc410b81abb1bacda1b3ecbc2d6c37d77df68c87ba881636410d2d3c7e0dd34d4d6989ad9a43762b6163d86c24f313cc4df313cbdb485c8dd49bff8d31577dea85240a418847393219c6c58faade16e12b44896f165e3530c334bcd9cfa9deae7a2c4ed479064bd9ae417346b5f0fbc241de60d43854316d029e961791de0f25476cbd070a1477dcfe949897a429bf3e7287b21f768aa030de311e861b9b8b885c2c0e31317e76ec6378f3ed8ef760f5f8565d0f79a5a63576e6d6da980d72fac615921b78ef09f5c24fa56a1b8ce7efe6731c3aab2ed28261000c30f979e7246198fef45a1eda27e16538dbcf043a1dbff49aa995126457a4d70800b0157acc349f0dda4133052fe01e42cbf7786e3591c5b2df9311d7732218ac9f65b6797603fc6b5226e140f8145e1a79e67b49ef03b24cf004ad4ae302adcb6f59487cb2028fe99c486dd1e0c1b17fa6ee23ebca0c4a7dda1642cb7b160834e6ed12845cf1fa93a7b91529a376e72527f94803cb625e657ccbc4289153871a9da6fd5c8dae9ba604784a96327b8ffb638fc66fd3d756905e6c0e07f997ca81b30ea6db73591df20b93b2278ac4d7f8d3a3601fca73fed08f101860041a4867586dca48ce2d857c083b9c60411a0198796b8a7c7f9ca554223a43473c5328efaeb3bc89bcc6b1d7d22c5490fa1b0cdf66dc323b6b88b9940f5b2a8ca459d7c4ccc04835f39bf1d672e5fa7a745ff1e762e96a5b56367d2120e01d048f05d322d33be6ab42050470cebd58b88e64c15e545be992e7ad9a08dd3d08c148542f3fd39cc4759aeb5a534b4c449bba23d420db491c53ad27aa50b3011096698334cd3946a274a80b17cb298cd00f6d2e02c5625325e902527d814d30d04b6bb0a324a334cc965134eb0bffc041ef89f42bf43e91b9c9a981c166824dd4d76ace7a1c2cba0db1f5f7e29719a5a64121bf5d5a2b92258707b8e28c0969c8e2eabe81b1c87c810e9af6c1d349955bf10f458e8e1c49688d89ac8e5ab45c6d0a62dfb0182a587bafc3ec5aac5f36b22045d0ebc093d873fafc4479d14d5ccd856e2c3993fa0267ba989896ebc68dd116ef1d4dc452c3203e2d49f8014f188c2ff15b36cb80705b64226bc9989910ea13c6dfaa3e3e5f23d592b6213f1bfd8fdb1a8f71f258cd430df47fab8e62fb1730a3ae8c0b0fd8d6e1348e8604e95db09c40912cd5d0f1c3e8874d358491e6073f7788c600c5b2b4d8066ebdf65e3a63443185dba22a18cd9becffbdcfa82e71c85fcacb1c0a1e7ebc9a0481dc0fac0b25f137c09b4d870d6bcb396a5eafef1fb5981c4d210b50a6d8bd3f74bdae5c7122572af443473d168178014b89461e936c58d2e3a8aa11804c71f85c3e9e0dbeec4497602b3419a5f63b255292d2fef3a085f1db13a8f1c74e87197cb8186d3eabb710519fce3ab4e75419368464ff83574a46250d365b21312e966826fbdeeed6303784a6311d0cee6bb2c5013dec78ce4af2f3b0370aecdb01c7c0ebd3dd572666efce59f1fbe9e09c438df46c708e8af6276ed7ce8a09af95ad14bbea8d87bc8a7a7259cb570dca7c2564f9eae4d725fc31798ebe3b4c191e046e5665afeb96454bab993bab5df7de0bde8cb4b7f3f2a8f3e42ffd14abb44987079a0db1f0b91c8f099fb9cf9318a7f557cc285448c549c6589be469daba9375891d60bf868939cde98767adc44ee3d40a9d497e6cdf515af056976d2618d4f68399b9166afe1dfcf686dd77a7d1815d035bfee0fc48e1708b9fbceee34f77fd8cd5e0a7d65d6eff0e08ceb5a2bc456ab1965ebfaf606a146a7c31f4c1bb9f36a540ee2ce26e16ccf8ed89b86abc28ef6ab2bb57d0fe1bbec6a0f09aab969af90c795eaaf6daadfa0b1d08b2bab0c75b731f2285fd9cf752af613265f6e5241514da5039f5fdb62fba69da3645a1472c99da49bba377d9d83fc51dec953b137527b4117714c98032fdfaff1aa06f85e89d086650c2b175f089eaf95f81f0adff4afa8a43920d811ae63cfc40219f33f5166a9624e19368a99a197790b1c7a72df94029d9f08857759b288ca7516207c9fa1b0468fefd11ffcdae391c86cabca1cb69d8adc39d642cfc1b6f6409131892c62cc72adec9c8e81901a55b3342d5033913080905ee80a10bd826c95aae89e25b3bc4005d6f79bc201958748d5ffbba275ff2d0e1068a5e58b2b947763abcebbfeb5f81993b40fa75a2ff0904dbb4842e09bf7a4315957ceafbba9690e6bbed8cdf78514b7ccc890eb30ed00141ca44148c8d6130b4ac48f17e9be64c4afe5b9a78dad4914043db3cf0c4fc687338b05294b83792d3ae5d7f70e329da00edd97764a189455ebc74e23404ecf5a13645d370e5be7729a144497be5e23f1d343af3b76a18cd8834f0f2b5c706f0b74d48b000f71ee16b0edb036670855a2eed0b26e42401ffedbad1045a63d9c17067761f60cbefff4348bc99095a971364d69b2e7f20cca06c91495bf92f1a18529a202dd3ddb7e4fb59d287d3d13874db372ccf626850cf4fb4d83df0420184ee241300bbfa4b8a963c634487c71cc27134065871de5eaf32607bb5f01fe0604a3040847902c97fb6373681521aa6da8638b7e02de9bcc22586201ba7ea9de508e447c36d874eafb97bdb91dc69b18d47ab7cda734b3cc19bc917c522735da1eb80a49b88a5bd42a80c3bc9c6a82fb89062a3620eeb8935ae9275fe6f0b8ec075fafa53d60f9764f258c792ebe7be9cbdfcaa65f6f6e35a6e7b51a57be0dbc86333481544f0601583b8ef59cceb0ca737e3e622f9bc9b95ba444da0205206c06ea314c0385b38cb801fb7cb037403484658057f85b08ea17433d2a69268db88c1642095b8c3b2da22867885583a50ba4c47b18ac3f7bf4b4ca4f4ebff6382001b09316df93c58d927c54f00c99794648cb71e2f0423f9489c9609127ea44de77f13ff6f311fa2fc145f5c96245428f379dcf66c4ba3e193489e513826ae4ee9b08972cbe836efaa42c792f94271444b6fea3f82876de4bd29769cf5e951f7118801d3dccc432d434cfa22c97f6ae9975ed73f90fa093ff883a381dec8d0ad0a6c1591ac21882f9ecb2a7d70b8059b757b6386dacb285a14317c677aa1bbe90067011137f257269807b76dd041622d25c7becdc1f01882a1595ff5e01ec8537fe0e7367bdb314e6f4417c3be834a2d07ae471b7961c1a09787f402ecd0f06aa57f8b2c76654328b743b87d4d8c75a7f9bcfb58d700d1903b0f13782d4c5f2a070894f7b182e1d92b5927a85a5b84beb0ee27301592fa3b4693f8c9aa64a25804cc03d67ffaf4223d91592f126d15b7b2bd1a427f8ffdc00e8d5dbb56c53f6d7b8e9909ca4a0388dcec1a2624095e232920dd58d43339063f5f1a04823b43f5337082eafb7dd2f87bfa8dba24bd051369458e5a45ba2af35fa4c7af12e95fcb34c89e5bb993c389f530b924d3f96faa344324f5be96de4a5425ec45245a56eba359c226f3611ad7148f0c0d43e4524830ace3db84822f19c2611e7d8f439e0319a56c5a5667ae5b2bad9528bb884e80e4e2834944676466fc02b91632c9110aa301a89af188f92693ef4e87edd38f8d27a22af1236c489e9633945ef92e673d0a2d05119cc861e714f3fe6c4419580662ebefb6f16e1e77936fa7c8c8ad62442c5403e76870cbc5bc654ac4cd1e68eb9f5dd1825c308996977163ffc27b499e7816deaffb4242d8e29505e3139115fabac23f24cdc2094ed481e10525888b5f3e32514a52118c122d04af1bcd1acfa882ea8fb2ef1f761b941204a039c80bed937d45fe8b645d2608be005dd46712534410bf0ba75c7456d29482f24a8247585abdb5efddf585898c1cb7e587959fa15a8d9945ae6146d7018a2b01f694db63d1317fbfa7c8af7365bc83e8fcfa2c3662f0e5fd5460a7a6dece2f74f18b3659ecf9732f6bcc960332277f29ce386586850688826619e20d570f56c928a9bc90f428b361e47a93e0a64ea0649f5b5b8d04c9fac701b54b024173e9de8b0c6dd8e74a216a9122bd8dbbab32654b12da69f2746f7c482911624cb1673694be890d6b2b8a47e8a05841da50eeb08c3722435a746eb6b0cdd37ee7f50d332f73bc1d024ebaf1a7ae9b34a8fc293b61a9473c4d666267dd4d4dd2a526ce59807072d47485c10eace442b3aced41170d4f7fbdabadbfc58e89246bb46579572313d48de1dd1a8955aae45043ecbaa7fba9a5707937168a2217fbc5e8a7203921cb8bd212dd7894c28159c1d28e454fbffca844a9608cc57ad2bb0f172d6b96d25bc560fe014b9e9018e99cd798f2036d60366a9c11ef31c54a17eb281e6ca484242309e0482d7be480f1f79c641c9aad7bf1ec3cd80437e414935542c5cb30a83e5f75327023512eb01076b0d69ca467da8c51bb6a9465d2f689ba8f74c1652f5d1d7d6b9b0f61044150a4529b38550a244bb1af951cadb4313fef746eafe7dff3742d705f850b7f11b4e772e562524c887a1f08f105ac60c5252ea44fc4f2e9c3ee7491504dcad7a9120937f0ea9c78e85c123245081e3e357bd9240fed039257edf8d3895dba07d0610701ba498de9380d8f502101e74b5ef9b9d224f2df2f8709e4a3ca82689bae2929c997c2ee53f1730ebda18f67b3389cedd3d62f7e18caea3bc1ee5e1729d7f9c3ce188b3ffde4ae0971bd0cf2fb046fbb30598a3d85b5b991285100cc264bd3a307df04f43924c67e97798edbdd2a58f281c866132f88dfc31ebc98ab009487f911c6adc72ad474c165186d78b1d656ee44df4b8d309d33794b2e99003268f9bbe10e9e909d94e4a384f31e757ae74fa7b3a96461fec6b43fda63f700284712e53d15d34f433b8079f66a2687c0ca14f65b5bc3ee5fb9616169295c97ce1d52e0dad7b51004c32de1e901cc96f4e80c5fba9f267f5a01f6c73dbc8df1bf9676552a13c0793bb49a476c423f0d88db4f48fd0fee7901a5550fde0b12a896e693a1b5fb60548977c3564a053160b5e881cf4f98f1435ec6c5e7947faf3c4bf6ec49db15ed3ccd978795e881b3eda04e43ad29486fae53d27290e78b47629de054b2a8eb0086e72b2532c93fdb23e42211bb4b281925bfc5f7d85b0f0d515d36eb2a81c7182510d7cd8824ab81137ebba49e277d5c7f23f03573c3b1b7fd909b722e8737e2b9ee6708cf8a3a605f4a495421da4db223b5c09dc4ebb16e02f66cdeeb0bd04412dcf0b3f018de9bdc14bc9c54aa09457b8da2b0b3ea1abb5537d141c4ccf7002ac8ec0b1ccbfd8f2e8e58d7e1559c3ce46d2241987cf862") getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000540), &(0x7f0000000580)=0x4) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000040)={0xfffffffffffff800, {{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x5e}}, {{0xa, 0x4e24, 0x3, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x104) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000800)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000840)={r6, 0x80000, r1}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000780)={@mcast1={0xff, 0x1, [], 0x1}, 0x2, 0x1, 0x2, 0x8, 0x81, 0x3, 0x5}, &(0x7f00000007c0)=0x20) socket$nl_crypto(0x10, 0x3, 0x15) connect$inet6(r5, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @empty, 0x7ff}, 0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x10001}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000480)={0x3f, 0x7ff, 0x5, 0x0, 0x4, 0x2, 0xecd, 0x0, r7}, 0x20) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000100)=""/22) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x1a00000000000000, @dev={0xfe, 0x80, [], 0x16}, 0xffffffffffffff44}, {0xa, 0x4e22, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x2}, 0x2, [0x3000000, 0x7fff, 0x5, 0x1, 0x1355, 0x47d, 0x7ff, 0x21ecfd40]}, 0x5c) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$amidi(&(0x7f0000000880)='/dev/amidi#\x00', 0x0, 0x8080) sendto$ipx(r2, &(0x7f00000008c0)="b471e4739abbb3d2acb18a9b709cb5ae1a58d17050026416cc58936d2b8ebf86a4188431c8fc65564b65fdc1978714b8f0f32cda7952c5c58b9b6eddb927ec41085f54f3f757e58d095459928934e4c30097293edbee29d875cd7a0d8a33321e", 0x60, 0x20000000, &(0x7f0000000940)={0x4, 0x0, 0x1, "f00fa789f20d", 0x7}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000001c0)=""/239, 0xef) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:56 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) fcntl$getown(r0, 0x9) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0xee9f, 0x0, 0x3, 0x3, 0x14, "b721003cfd1d59262656bf89cc663bc7789cce659699e463eae1d8c3d60c3c5e044d15081c3b74c0e7ad0cdb04d2f81798f0fb01715d536f81920eae849c975d", "e1b9bcd8e6e5b74460fe86bbf63947b871368fe7ac55938a8b67ee4ae0ed79e14ef4045bdfa817729bc802ccd0c4e0bdcbd3e21dc49c099d79b7d5e0b479b644", "f79bea1242d3c4d33fcd476c8259860b758b05b66c9408c2e21b71bd15df838d", [0x7f, 0x689]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000025000000000000000700000000000000000000000000f3ff950000000000000077bce324ccfe4882d18782056653b69527c603223a774a50aec61f2f768d48e041c7c89e152647bb2535be048946b5d6bf8b9430f40a52908d77929a38cb81f3bbac7c43fdf1cc0feb363559cc9acd43c496ad3082d8e1541dc561cfc0ffc0571f57d7601550ec90695fc28d0d74ddc3e97815aeb4cafa894143797730e0981c3ec17f000000000000008eae10830cd89a2ee34447780fa2040e006c4b9a14d900fe703e85d6aef5169df6c5bfb675ffba2793b46ee882068e0d9983c06d1292"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bf"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bf"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bf"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f33844b1b5499266c62fc806d6132cacc155ede7177205b092c76a4fb88688d94c77faf7a82f5720f806090964af15d34464a474e532bd2d80c7d010000000002000000900006dcfb2f721d5bd13b646e8286ba228892e0fa2b414836df7507717db7429208cd9304a51e5a98ed91afc7110f5c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x3c0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xe, &(0x7f0000000200)=0xffffffff, 0x4) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) connect(r1, &(0x7f0000000000)=@in6={0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x7}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f00000000000000ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000140)=0x7, 0x8) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x0) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$llc(r2, &(0x7f0000000040)="17fc2b52b44050b7085d2dd6b8ef7988d490c5f0a81477b45a429b58515a5183a8cda873c3f839fa429e465491287dfcc8cb3c45c9be07a47d46b54245dd5554e47ac7631ef8a753d724c2ae85252ecb09923c110c0c09d1d7ca5c7b1903ce8b93bd23e6d38296515da2f9f0e0db857f0324584890d44a8d4e3b7c5aead812a45cf6131f7a", 0x85, 0x40050, &(0x7f0000000140)={0x1a, 0x302, 0x8, 0x80000000, 0x5, 0x7, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}}, 0x10) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6, &(0x7f0000001300)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f00000012c0)=ANY=[@ANYRES64=r3, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="7568c0118a7fc3961e8eb8c76769", @ANYPTR], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="cddd1bdcda314bbf78cfe9483e86e670ec4413af40b06f726dcce0df31193610b456d2f10aff7340d957186bb9bea25dbd9e21f75034c9da913eb61fff3c2751c53ee5eb2f6c25986542efa12a50958691a3b1953d84", @ANYPTR, @ANYRES32=r1, @ANYPTR, @ANYBLOB="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", @ANYRES64=r3, @ANYRES16, @ANYPTR64], @ANYRES16=r2], @ANYRES64=r0, @ANYRES64=r1, @ANYRES16=r1, @ANYRES16=r1, @ANYPTR, @ANYRES16=r0, @ANYRES64=r1, @ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0xfffffc80) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x7fd, 0x1000004001) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x0, 0x0, &(0x7f0000000580)}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet_buf(r2, 0x0, 0x2e, &(0x7f0000000080)="79e028cd96f44b6844d77d2ec40856153add2b77d8f46086", 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(0xffffffffffffffff, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x0, 0x0, &(0x7f0000000580)}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) uselib(&(0x7f0000000080)='./file0\x00') setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000100)=@hopopts={0x7a, 0x0, [], [@enc_lim={0x4, 0x1, 0x7b5c}, @ra={0x5, 0x2, 0xcc}]}, 0x10) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000000c0)={@loopback={0x0, 0x1}, r2}, 0x14) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x0, 0x0, &(0x7f0000000580)}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x353, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000000140)='syzkaller\x00', 0x1000000000000002, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2, 0x420040) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={r1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="8853692eea3600c913ba90364b"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="b400000000000000250000000000000040000000000000000000e7c88aa58a0000000000009500000000000000348ca77b0fb1baa56777900f1d94449609a9c6c2d84d7f5485ef4b2a14e3ef8d483154a261017942ded1c056d45e8b7d5f5babaab2b9c65937f4fa1841bb75a77f2c5aea336c9917ae8fb0c6bd40c8549bc63958c0d8aac4ca1eedd1c2c80269dd5c0728d9e12a6aad00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x5, 0x0, &(0x7f0000000580)="4701fbca15"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f330000"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x1) r1 = socket$inet6(0xa, 0x8006, 0xfc) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000040)=""/127, 0x7f, 0x23, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback={0x0, 0x1}, 0x8}, 0x1c) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x5, 0x0, &(0x7f0000000580)="4701fbca15"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000002500000000000aec950000000000000000000000000000000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xa600, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:56 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x5, 0x0, &(0x7f0000000580)="4701fbca15"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:56 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x82000) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x6, 0x3}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f33844b1b0207e6ad613ff1c710d4d35a9d2d213e7d33a7132bc4f54e2f94e6c7ba596ca3a89d7403251a358fe6952cf0eae1b8da"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:56 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x7, 0x0, &(0x7f0000000580)="4701fbca154c84"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000000000251afdf19c37caa512000000009500510000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f000089b000)=0xffefffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x7, 0x0, &(0x7f0000000580)="4701fbca154c84"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000002500000000000000070000000000000020000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195}, 0x48) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x14001) ioctl$TIOCSTI(r0, 0x5412, 0x4a7d80d6) 2018/03/30 09:56:57 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x4000000006, 0x3) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xdf, &(0x7f0000000040)=0xfff, 0x4) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x7, 0x0, &(0x7f0000000580)="4701fbca154c84"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:57 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100, 0x101000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000080)={0x2, "9e4f"}, 0x3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={r2, 0x3}) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000040)={0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x8, 0x0, &(0x7f0000000580)="4701fbca154c840d"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xfff, 0x20000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r6, 0x0, 0x70bd2d, 0x25dfdbfb, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa87}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x7, 0x20, 0x3, {r4, r5/1000+10000}, {r7, r8/1000+10000}, {0x2, 0x8, 0x5, 0x80000000}, 0x1, @canfd={{0x0, 0xffffffffffffffc1, 0x4, 0x17}, 0x1c, 0x1, 0x0, 0x0, "6e0e95107d3bafa4c8e306697f85e2ce67d85dae8547107da0bf8aad607794fd2c07bb76d1d5d6920a709810baf84eef27f7ad7cc5cb27a7ad697f82c5fc7f5b"}}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x8, 0x0, &(0x7f0000000580)="4701fbca154c840d"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 7: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x8, 0x0, &(0x7f0000000580)="4701fbca154c840d"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7fdeb35cdb33844b"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x8080, 0x0) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x4080) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x7ff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400d51661ffa29854b8172f8cda000000000000250000000000040000ff50c79f0000950000000000000043ea75b4975e7bab6595acda95f59c927bac56b5f6241cc9c9d459985a68af7a3f268a2a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:57 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000004c40)={@rand_addr, @dev, 0x0}, &(0x7f0000004c80)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@mcast2={0xff, 0x2, [], 0x1}, r2}, 0x14) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:57 executing program 7: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x7ff, 0x658801) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000002c0)) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x1, &(0x7f0000000140)=""/234, 0xea, 0x8744}, 0x40000101) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 7: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r1, r3, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000140)={0x0, 0x5, 0x0, 'queue0\x00', 0x40}) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000002c00000000000000070000000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:57 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:57 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f33844b1b008e32ad489d0300fffff40525cf2ff3d25a32ae5e22ee79591f844f9e09c06700ca97a1d7ee47f2acb51198757d99c89fbaeadf095404732580ab6d3e0b79af6089468c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'gre0\x00', r1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x3fd, 0x3) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@dstopts={0x0, 0x8, [], [@enc_lim={0x4, 0x1, 0x3f}, @calipso={0x7, 0x30, {0x100000000, 0xa, 0x7, 0x3, [0x7fff, 0x3, 0x3, 0x9a, 0xffff]}}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x66ac}, @ra={0x5, 0x2, 0x6}]}, 0x48) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='user:,eth0,\x00') r1 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) getsockopt$inet6_buf(r2, 0x29, 0xff, &(0x7f0000000040)=""/232, &(0x7f0000000140)=0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:57 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) mq_unlink(&(0x7f0000000040)='\x00') setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:57 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000200)=@req3={0x1, 0xf0, 0x5, 0x4, 0x294427a1, 0x5, 0x6}, 0x1c) accept4$bt_l2cap(r1, &(0x7f0000000240), &(0x7f0000000280)=0xe, 0x80000) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x7ff, 0x4, 0x4, 0xbf98, 0x0, 0xffff, 0x200, 0x1, 0x5, 0xfffffffffffffff9, 0x3, 0x80, 0x101, 0x3ff, 0x3, 0x4e2, 0x0, 0x8, 0x3, 0x7, 0x7, 0x8001, 0x1ff, 0x5, 0x8, 0x1, 0x101, 0x118, 0x80000000, 0xe000000000000000, 0xfff, 0x100000001, 0x9, 0xfffffffffffffff7, 0x7, 0xe6, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x2000, 0xffff, 0x5, 0x7, 0x2, 0x8413, 0x4}, r2, 0xe, r0, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @rand_addr=0x8}], 0x40) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r3, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bcsh0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195, 0x0, 0x0, [], r4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:57 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000001c0)={0x4, {{0xa, 0x4e22, 0x9, @loopback={0x0, 0x1}, 0xfffffffffffffff7}}}, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') fanotify_mark(r2, 0x2, 0x10000, r2, &(0x7f0000000280)='./file0\x00') statx(r2, &(0x7f0000000080)='./file0\x00', 0x7000, 0x30, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="3933844b4a5670da6530863a922a134073fb6122cf4ef18a7093fd3a563f86706d567d4380e0e519c75aa1a100000000005b000001001a000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1d, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$KDMKTONE(r0, 0x4b30, 0x100) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x3) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:58 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(0xffffffffffffffff) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 5 (fault-call:5 fault-nth:0): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 2: socket$inet6(0xa, 0x100040000080806, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x76a1, 0x80000) connect$rds(r1, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200)={0x2}, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@mcast2={0xff, 0x2, [], 0x1}, 0x34, r3}) 2018/03/30 09:56:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="81576d6c3303074e5bfcd0d99e09aa7236069f85"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000025000000000000000000000000000000000095000000000000000000000000002ceef6b450a3fb09"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x800) connect$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host=0x2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xbc, 0xba, &(0x7f0000000140)="d77cefefbbc3b078d979b31d707d0e5680862328e2bab7359f0626da81550a198bc48e294c156e509228b6882ef7016820d0b24137b6c99f1eeb4e8d3aefbf7681fd9fad164831f2574c8df225851c3815542d819b587da36150b3a197a421305c4cf42241a9259b6ddea010ecd91697dacc1af4a3c937641531c58c9b1b2419657480424cec111b2eaf5832eb2c471bf0a39cefc6ed36b0e11c0dd71110776cd6629f341055578c20fed9d65b4583dc03d2a26a9b188cdd3ec1824a", &(0x7f0000000200)=""/186, 0x3, 0x1}, 0x28) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x404002, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x6, 0x0, &(0x7f0000000140)="4701fbca154c840defa3b9c011edf021a4e1ec109ccee96c35d2f3cd64ed38fe872a52649965577843d7f02aa030feb33bc263ec552845c8862ebba1ce741d94d6527ff38a5f6f20b8b1ae41927e3939bf0c1bdaf6c78c4900a138c9149af62a4222f2942732bf68bfbbab58e6959ca1fd615d0e77af939ac69046d11dfa612d60a4b1562055aa333c22ea8f019f2c7ed33d23063a9d1d682d8862a102de8c617c69cfa3c483985a9d3fc0de748c52"}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)=ANY=[@ANYBLOB="2dc0fc465add805057f72e2833c1d8f5852e2743a2fac10fc5956c68cc8b26e31ab50f20a6ccd5b814661a2553fbe6327f4e8e5ae64605030e52ececc45a2ab3d851ec3163c8c7ebab375c4afe6b6a9c2d6d782f2ac55e384a5f29484a14325e02745886eb0513cd023092d7eaf060946be5d7fe1616", @ANYRES64=r1, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="4b871397122c711684dd0f667bfbf563de733ed6680a850ddcb22b46a1413dd926ba1762c023e1ea5569c61d78162d4da0068771e9577bdbbb5db5706382589c15c08f4f42897ac68bd0222324581f453a39e4f8682fdb359f9df98ae611ea762ae41bea92086508aa9aa266af7a8cb62df6ea6989b62c520ab94aaf0decf24f836bdb2f592de35605c0", @ANYRES32=r0], @ANYRES16=r0, @ANYRES32=r0]) close(r0) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 4: mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns/mnt\x00') setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1d, &(0x7f000089b000)=0xffffffffffffffff, 0xffffffffffffffec) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea2"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x301000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x3}}, 0x5, 0x3, 0x4, 0x4}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={r3, 0x3}, &(0x7f00000001c0)=0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 4: mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x0, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000025000000602b5db6138cde97624238cd5df85c00000000070000000000000000e21176f52fb2788b41d08ae04c5d470af7b7251d10f7bb10747c58d2d5eafea58ce9cbee14584d3e151d368451f8fedeed9372c9ed62b3b753f455ac6d82b2288a48"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea2"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x12000) recvmmsg(r2, &(0x7f0000005440)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000001380)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/208, 0xd0}, {&(0x7f0000001240)=""/28, 0x1c}, {&(0x7f0000001280)=""/207, 0xcf}], 0x5, &(0x7f00000013c0)=""/4096, 0x1000, 0x6}, 0x9}, {{&(0x7f00000023c0)=@ipx, 0x80, &(0x7f0000002600)=[{&(0x7f0000002440)=""/194, 0xc2}, {&(0x7f0000002540)=""/90, 0x5a}, {&(0x7f00000025c0)=""/6, 0x6}], 0x3, &(0x7f0000002640)=""/2, 0x2, 0x8}, 0x7}, {{&(0x7f0000002680)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002700)=""/142, 0x8e}, {&(0x7f00000027c0)=""/231, 0xe7}, {&(0x7f00000028c0)=""/88, 0x58}, {&(0x7f0000002940)=""/141, 0x8d}], 0x4, 0x0, 0x0, 0x100}, 0x7ff}, {{&(0x7f0000002a40)=@l2, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002ac0)=""/186, 0xba}, {&(0x7f0000002b80)=""/131, 0x83}, {&(0x7f0000002c40)=""/7, 0x7}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4, 0x4}, {&(0x7f0000003cc0)=""/123, 0x7b}, {&(0x7f0000003d40)=""/248, 0xf8}], 0x7, &(0x7f0000003e80)=""/69, 0x45, 0x2}, 0x7fff}, {{&(0x7f0000003f00)=@nfc, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003f80)=""/223, 0xdf}, {&(0x7f0000004080)=""/26, 0x1a}], 0x2, &(0x7f0000004100)=""/67, 0x43, 0xe2}, 0x4}, {{&(0x7f0000004180)=@hci={0x0, 0x0}, 0x80, &(0x7f0000005380)=[{&(0x7f0000004200)=""/91, 0x5b}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/202, 0xca}], 0x3, &(0x7f00000053c0)=""/80, 0x50, 0x7}, 0x9}], 0x6, 0x40002063, &(0x7f0000005500)={0x77359400}) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000005540)={@local={0xfe, 0x80, [], 0xaa}, r3}, 0x14) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt(r1, 0x10000, 0x6, &(0x7f0000005580)="4f057868b5488b21d698b2895917234a60a3212b11863733522f81edaf05efa9e1a54d15e1076221ff08453dffd4fe8bc717616802964beb2ca550adbca2f332330b92019282dda5b6331f340494e527a0242ed2a109017dde0cf6bc955e3e3d20d102de56954e6d1d437ef953588212f3c2d2dd538e", 0x76) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 4: mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) close(r0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffff, 0x8000) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r2) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x0, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea2"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x0, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) socketpair$inet(0x2, 0x4, 0x7a77, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x400, 0x80000000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000040)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x8}}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x56c) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x7, 0xc1}, {0x3f, 0x7}, 0x9, 0x7, 0x4}) r1 = socket$inet6(0xa, 0x6, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0xc) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@mcast2}, &(0x7f0000000300)=0xffffff48) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000280)=0x100000001, 0x10c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x0, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), 0xfffffffffffffd3b, 0x0, &(0x7f00000001c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348440000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a16c3c72c09ec38bf4e4a875d2c551f9aef44f55b4852717cad8b73", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="d888f67185abf8d2b1cee930000000029f2f2bded11a02a96522bf0000aa70842468ebec34c12f27b78e9c967d05fc49c69b936c"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0xfffffffffffff8dd, 0x1}, &(0x7f0000000100)=0x88) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x309d}, &(0x7f0000000180)=0xc) listen(r0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1e}, 0x1c) 2018/03/30 09:56:58 executing program 3: ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) socketpair(0x0, 0x800, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2ac, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002, 0xff, 0xffffffff, 'syzkaller1\x00', 'gre0\x00', {}, {0xff}, 0x7d, 0x3, 0x4}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={0x24, 'connlabel\x00', 0x0, {0xf495, 0x1}}, @common=@ttl={0x24, 'ttl\x00', 0x0, {0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "6789fd15b0f757fa0d2871a0537b4314b4e33a5771bf48c3e1006844fea2"}}, {{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, 0xff, 0x0, 'bond0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x88, 0x2, 0x34}, 0x0, 0x98, 0xf8}, @unspec=@CT2={0x60, 'CT\x00', 0x2, {0x10, 0x80, 0xffffffff, 0x5, 'netbios-ns\x00', 'syz1\x00', 0xd9e}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x308) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000840)={0x0, @loopback, @local}, &(0x7f0000000880)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000008c0)={@ipv4={[], [0xff, 0xff], @rand_addr=0x5ae162bc}, r2}, 0x14) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x0, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x100) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80000, 0x4) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x0, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0186404, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x15, &(0x7f0000ff1000/0xc000)=nil, 0x3b}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) mq_timedsend(r0, &(0x7f0000000140)="6cdcec484307be6a6da85e9f76f71715c2d824d43e14411cda97361b30cecacb35e20eefb4c7ce50a39a2577c7c3ae5d29ade3a1da8e180295f5e0b48e3b6170e05ce5990cb7160eb0fcf67bf9150c88c5ef8cff1d7aaa355ba103deb3b6bf27486e1b9ee36bcfa078eff45a64a6171283f6e6cbd75893ed597e9d95a84386d96cd26a977e13d96fcedc4fb1d49320", 0x8f, 0x1800000000000000, &(0x7f00000000c0)={0x77359400}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='syzkaller0\x00') 2018/03/30 09:56:58 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3a, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32, @ANYPTR, @ANYRES16, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="d819d85eb6dd848ae088484fd6a8c5378ed9cc80a3b995836baa633d4efb56a9738c3c3328", @ANYBLOB="bf6297f1431ca25c4d0809cbb56cdb035c0f584c81a0a7fbf19c90f9e19bc329a62f23bd6c08196fb9ef96a7219aa1d79285e72e222dbec633955fa4a8ccf620a1e994ae55d4468bed024d432cf16a9557588ab0f87cc09e43919805ba1cbd44b2085d0a492e31b310d16be3bed81ca6b14712fdf36f429a438f0be90d0671f42f986a9589c58a2254b4072c9f6bd7c04697abb8209b1baaa456be", @ANYRES32, @ANYRES16], @ANYPTR64=&(0x7f0000000280)=ANY=[], @ANYRES64, @ANYRES32, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES32], @ANYRES16, @ANYRES32, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16], @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYPTR, @ANYPTR]], @ANYRES64], 0x9, 0x0, &(0x7f0000000140)="470300000000000000"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x6, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:58 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:58 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000100)=0xc) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x7, 0x10, 0x6, {0x0, 0x7530}, {}, {0x2, 0x7, 0x7ff, 0x2}, 0x1, @canfd={{0x4, 0x3, 0x7, 0x100000001}, 0x0, 0x1, 0x0, 0x0, "47522063a7781cb0c0a0232a711ab7733934fd1b2be0bc6933fb6536937e9600a0848fb07d2ebfd168051888a23631507c7080290f0b32460e7b223a3f07495d"}}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000080) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0086418, &(0x7f0000000080)={0x4, 0x31, 0x800, 0x7fffffff, 0xc, 0x3}) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000040)=@req) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="7eb8f998d38d0b8815d73f2fc320e3edd1a5685131988788b7078756066260f6f530beb693240c69e9a4fc72698515202ba6d20c75854a8f20f8e8a0b0328370e7e8171eda8d4b4e5f2b7f8f8718cb52f430b7658f7472a6a40548bb4ccf6537b61752701f3e0885947c1a430ea360ceaddc589b638ea5eab7ee9c758f", 0x7d, 0xffffffffffffffff) keyctl$revoke(0x3, r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r1) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x4, 0x7ff) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d885eb1a9ba4500d1c46dc81a742ec000000"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1e, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x1, 0x6, 0x9, 0x9, 0xfffffffc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}, @map={0x18, 0xb, 0x1, 0x0, r0}, @exit={0x95}, @jmp={0x5, 0xdb, 0x9, 0xf, 0xf, 0xffffffff, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x0, 0x3, 0x4, 0xc, 0xffffffffffffffff}], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa0, &(0x7f0000000140)=""/160, 0x41f00, 0x1, [], r1}, 0x48) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000540)={0x10001, 0x0, &(0x7f0000ffd000/0x2000)=nil}) name_to_handle_at(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0xf4, 0x9, "fb96e3a13c97c9d156608f612e7ccb6d93b047ad659dff751ba6cd3c6a0de2ff9ca1b64f8e85ecc9c86eb34b8cadbc7998b478d3b5422a6336efc68892afb38f76bad574dcfee315d4cc5b27d522a3534a98d9312b602e39b2c4b4811b4cb12f4d5d9ff69a6ed1b8d35c1e5cad807db191fd653ce3a4d4792c632a2b1de81c86da9a9b5da859e1789da9061bd67ffdc318ea140e8a4a68f1f8afc40efa20b79c8f20bb132ab9b8aebc83bd4b71e47a765df7b2083d8a7e36aed6d7dcf1aceb4372b0095cda35e17c958226a56dc350b943510562f07ca9dca2ce6e2a21c10e43935cc3c6e187f9e00d50feb9"}, &(0x7f0000000500), 0x1400) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x30) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x0, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) capget(&(0x7f00000000c0)={0x0, r1}, &(0x7f0000000140)={0x1, 0xfedf, 0x6, 0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x103041, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000001c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1}, 0x48) 2018/03/30 09:56:59 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x5) setsockopt$inet6_int(r0, 0x29, 0xe10ab1faafab5f2e, &(0x7f0000000080)=0xfffffffffffffffe, 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = dup2(r0, r0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0xce0, 0x3, 0x40e7aed7}, {{0x0, 0x2710}, 0x100000001, 0x4, 0xb8}, {{r2, r3/1000+30000}, 0x7, 0x800000000000, 0x67}, {{}, 0x8, 0x9, 0x7}, {{0x0, 0x2710}, 0xb46, 0x200, 0xfff}, {{0x0, 0x7530}, 0x40, 0x8000, 0x78}], 0x60) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f09000000f8739871f853773cc19220e48f0d21fa135efd8b2019de770261ff594c0961f2ae9edff46b04c810ad9fb0c4"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x4000) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[0x7, 0xbc9, 0x6, 0x100, 0x8001, 0x7]}) clock_adjtime(0x3, &(0x7f0000000000)={0xffff, 0x8d77, 0xffff, 0x8, 0x1ff, 0x5a, 0x5, 0xb, 0x8001, 0x7ff, 0x3, 0x5, 0xfff, 0x3, 0x6, 0xffffffffffff0000, 0x3, 0x7a, 0x80000000, 0xffffffff, 0x0, 0x8, 0x1ff, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000000000250000000000000007000000000000000006fc000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x0, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x3d) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x0, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x2000) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00005e3caaaaaaaaaa0bffffffffffff9100270081000f00000c01000020020200000742ff044f07d2c769ed67893fce9af922959604fd10be7b3a0333d5b0558433f03ccd0474b57b85537171d5491bdede43bdc18a14f7a400e9bd405e4ac537cc2903fcc5397ebd88e94e61bc7463d753bf5f47"], 0x2a) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:59 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x0, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) iopl(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = getpgid(0x0) prctl$setptracer(0x59616d61, r0) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x0, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xd25}, 0xfffffffffffffee3) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x400, 0x0) sendto$unix(r2, &(0x7f0000000080)="e020c3a37fae3962f261c98d9ecece7dec9ed07722eaf4cb4d616c7409e1296c2afca20506755475204fd1beb17e15e02bb8134c07e1482566f9cb329d19864a7495dee11f641a0d923ddf77837722a54449b2ed0e61988c24019bebf45f396ed6b6bc0cc8c5a9be5c41454572655d1737e5e1503c8938e7dfb13cee42add15853c60b505a6568ad2ad5ae326e36e4f28509dcab160247cef77f00e027d33d4b05cc", 0xa2, 0x8010, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) socket(0x13, 0x5, 0x5) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfba"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) r1 = memfd_create(&(0x7f0000000100)='/dev/input/mice\x00', 0x1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x71a, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x240000}, {0xa, 0x4e23, 0x3, @empty, 0x4}, 0xc82, [0xf8, 0x2, 0x9, 0xce, 0x34117a25, 0x5, 0x9]}, 0x5c) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000140)=@dstopts={0x3b, 0x18, [], [@calipso={0x7, 0x10, {0x8, 0x2, 0x3, 0x7, [0xed25]}}, @jumbo={0xc2, 0x4, 0x3ff}, @ra={0x5, 0x2, 0x1f}, @calipso={0x7, 0x20, {0x7, 0x6, 0x1, 0x0, [0x5, 0x7, 0xfffffffffffffff7]}}, @calipso={0x7, 0x40, {0x5, 0xe, 0xffffffffffffff81, 0xfffffffffffffff9, [0x8, 0x0, 0x8, 0x7fff, 0x1, 0xc6, 0x7]}}, @generic={0x0, 0x12, "40f2a6aaf01b04bd7f00b6ab17142356dd57"}, @generic={0x3, 0x27, "53948167161bc4b6da77bd6cbfa5e9233a5ca36abb7fff6cd8b2bd565862ad2065b3ee23acfc79"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0xd0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x1) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfba"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x0, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bdeca1a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="393d56da4bfc8fa7c9027c7c82446c742a53fd32bf90ee27877bf0f7f9d2b4a12d88ec29d343680120f01544e1aa851d3b179066f8e4d6f43933fcb9", @ANYRES64=r0, @ANYPTR, @ANYRES32=r0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES32=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYPTR64, @ANYPTR64], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="302f7b002680088ae384ed0a31c66272872ac288ca17e4b851e7bf0b260141557ded567278eeef31e3d43ec5963f2ba09521f8c27ff290f75f86c9c2e71cfefe0648658ab04eadf032fa2c64b60bd993d6a9e79f2e09295a7a802e05ff723dc75497e04fd863ea221ca43dba91bc6e005aee1325d370eadfbafd59902100aee79c61848ccd36b0a18a19a9f711d1d7c7210c5c0d4bf3dd5e9a3c45d14fbee77485c96ab63783b6d369e0d90a2a2a182fc8a8b8595be4cb17d45f18cc15a89808c6ba7b86301f5d7d78f07e6dd04c31b7243625991c73bb586dc18be6558435a95240", @ANYRES32, @ANYPTR64, @ANYPTR, @ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES64], @ANYRES32=r0], @ANYRES64=r0]) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x62bb, 0x8, 0x8000, 0x8, 0x9, 0x80000001, 0xffffffffffffffff, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r2, 0x20, 0x20}, 0xc) close(r0) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfba"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae4"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x4002) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000080)) listen(r0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2200fe, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000080000000000000ffffffe50000000000000000000000000000000000000800050000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x101000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r1) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae4"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6, 0x800) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f33844b1b0224e278d2712c2b9479c36f28808bb4b0253a1902463d2e44e3e8d554eb97582808ef386741cf926736908fadf06089535294e1d04b732f3f7ba5398b3643c53657a0ecd6e1dc"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x181000, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x0, 0x100000000, 0x81, 0x5, 0xa979, 0x14000000000000}, 0xd4fb}, 0xa) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae4"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x21, 0xffffffff80000000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff87f4b5061c478fd2042c721b532b548b6ba248d01d0867806f6fbca4b528653b5adeb55651cfd5138e4667912d24950"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:56:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00ddffffffffffffff"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:56:59 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xfffc) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:56:59 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x81, 0x40, 0x10000, 0x4, [], [], [], 0x6, 0x8c, 0x8001, 0x3f, "66c8461739f40fdc34e16ac6f1415850"}) 2018/03/30 09:56:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:56:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:56:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000004565aea559ca43a4ef5fcbf2501e00000000000000000000cc144d8fdfdbffe7ae4fec3aa600a317abf736e452308583a077f7f2cd7b0a236509970e9c22ab0945b04d0083f7819ce1a3fcb7b7455d45", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x28e45573ec71a656) r2 = accept4$inet6(r1, &(0x7f0000000100), &(0x7f0000000140)=0x1c, 0x800) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$sock_proto_private(r2, 0x89e5, &(0x7f00000001c0)="fc703b5363535875c745a3967628923f8139b0044e16c9cd6e53bf4cdb88c3") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) flistxattr(r0, &(0x7f0000000040)=""/111, 0x6f) 2018/03/30 09:57:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80000, 0xffffffffffffd348, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={r1, 0x2}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) fcntl$setpipe(r2, 0x407, 0x80000000) 2018/03/30 09:57:00 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002580)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000002680)=0xe8) sendmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f00000026c0)=@hci={0x1f, r2}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002740)="dba5964bb016e6c878c62a66198012c02807f1fc04948aaa662f70bbcea25f3b9cb0da1c10b4a9938aa9e57981bde2bb7780cb8fcd1f24b7df1bee6fba539c082a51e2fa666841a64609c36c051a65ebe4e0f09388ce357fa80b2f550c", 0x5d}, {&(0x7f00000027c0)="6fcc469e13d2ec16d78f3cc2d81e5f200d6477afd30beb0d11df74c806eb0769fa04b3c872a8c46c19f639bbc6d90b55b785ddda4ca05c3298ff6a3db877d1b323bd78a24486d16213de5b4b2f7f6edbf51babd3122d5218218e643643f45635854a6d76", 0x64}, {&(0x7f0000002840)="39b8c99da82d931a9251cacda01298e53fbf1dc6ba10c1c47beadb18e0422c6f56ae77846c533f2daffce781368bb7c52b311b2be544020aced5cbe79b0e5c01e0607116918a0e442de07f4ef6a953cbb1cc92df8ce980447051a2e359d7642357290c127d4b3471a81a1da85c55c4404a104cfe4628e5e65a6f9f11cfe379af33d312da8c1868dae8a8a5699f7e6120aed99576f02e0043eb108585c3fffde5b5f8ebff35dcb244c0c3c26cb67f9ef63b31efd8c1111c15b036db491d82c3051430", 0xc2}, {&(0x7f0000002940)="670cd45a851bde3a001fc5fc224070632fd88e468d03786355d84d9a1c630b16dce694b4b601212d63ed2baac958c61e7eee4ae8c63a99627c5ef85bf1d5ac", 0x3f}], 0x4, &(0x7f00000029c0)=[{0x100c, 0x10e, 0x0, "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"}, {0xa0, 0x84, 0x1, "a918dc044cc7f1cf3dba46828e10a51b31313e735d0f8d4d0fb064fd5c015602dd58d2f3d06c0790256cd7ca5cc34ffb346a17c485cbbe9ef38212690fa7709f82c255d7eb4a35b71cf0889c6236c5c920e763e70926d6b5cb96eaddfe89845bfd578fcc97c266b106c94e0be5ee0dd17ad88601ccb2ab54848d91a4557a6b85bc4c148e6e5a992c840b8d2d8ef5e81389"}], 0x10ac, 0x20000000}, 0x3}, {{&(0x7f0000003a80)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003b00)="18e0b12f50ee9a102e79fb3c5cfad6a115906593d71f51c30c54c09e5eed0734ac2b5ad5eaf9f8351e6bf1d7a070a1e98d7833a6c7ed766374ac3853a1245d5f38d47d2291c0091ee166960fddfa", 0x4e}, {&(0x7f0000003b80)="5ff09b19143fef71c7aba209674e79829b42b255e7070a7ea0f3b8f3871f8a00e7723af2a0a81544361cffa57eb71b7a14322542a9853820aa5682d2a8a57fe717", 0x41}], 0x2, 0x0, 0x0, 0xc000}, 0xc5ac}, {{&(0x7f0000003c40)=@rc={0x1f, {0x1, 0xfffffffffffffff8, 0x5, 0xedf7, 0x7, 0x4e668562}, 0x2}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000003cc0)="66560ab68a4c5e0a883798309d74affb751f67f044e75e267c5f37cd30053e3e49a94fd6c66777912f8a9cc63bc4202a520130997c5679bb0dd1bce1051213807cfb7cf44bdb145b00128218f28e8566a8f1163e7d4c7476a71c30d0b50c4fd725ea852d96cb62198fb3ba137b6b5420be0126cea944", 0x76}, {&(0x7f0000003d40)="5ab1b83aee1e01fc09d29de754c080688f187373c757a1a0", 0x18}, {&(0x7f0000003d80)="545ee648bc299722ef3fbc2057a95bf361ccfd6d552c44e36073faad6fd88bcc3f19b2fa73090559eed3fea48f2c4e445d4fa8c025e3e3d7e9d71cad24c23266d6154bcf2e8d15b8825a30cab25f8ddb8e4f9859644e732c910710c444abecda004fb06935128656ec24087df1304989b7dcf70ec65be7ba83cedb0a41ce6a36c31147b0b936d5e5fbe72cd2dfc7bffaeb268e376a708f8b07a86cb3c7931535f3848de358ff2d92c1628f5bab84125b27074e48ed64980c5b403c036aa34d13bee3a652a46367e5018fea6c660c6775a3c29202da051afd979b567159646594441f591bd7f0471ea9a22604c4c5bd8f2264bbf9411d1b32c8c7ac883e9e5b58aa67b8a3d96119bf68620ed8851b9c7e184e35885e4d8f2afa0f907f2cab6afa514ed3321a818719ce596c2fccdbca626dafbb9b88ec3cab21db4a61193c65a2e581ad08f8fa610668aae03b8e8b594244d1238c2e1e282eccc14aa1925e019642ddc81af5a701c91499128e643863df6120d9b150a84c78f7953a4db30e2fef086ef87222f9802a630906fbb598503ddf68902fc8ba4427f22fb661571e8158177e81efc2ff58c90a22d43b9b55cd73151fff59e721dbac7f0d228131d72b6005261d46334ae60fe4872a3979d0fa57ca482f055d2d9bff169f049a67db2bce66e8aaf128566452cac8a194afa30db46a0b87d1ac067be3e4e566472f16c6ed289fba35b44fefd814cedac008ba99d84cf642cdfed9739bd85af1933e2e0db2bd969ba9fe056abffbaf1cdf575296ef27e81a364ba935422d4ac5c0508adcf13016f4a6b4e29df5e60ffa4b5d220e02893a422d708712d579300181dcd047ada12a1ae0b5c641186d88e2a14bee526363404b1e47398a613c0e468167ef04a2f9131a4dba55013a4cf539c97902538c3eb12e1e5506d06a0180b62bbee7ff27522b38bfbcdd72c78123f969c1e4f910a8afd7e63d352cead01ae718e68730cec2c688346b6d77c7d1878a14b27b61e23dfd34e4a11b046addbf916c07e407bd6911f9e83b321297e64371e36127d616f5f5201461b8e26cfa377c6928c5d80039f8efe0d0da993d45744112cb4171eef577e8a7994c5b4a1951d1446356ce58bbf349e63165bf752bc2c6589fa6a4b1754f9875af1802025b52217643bce6db0e8004f12793c7dee4544f89860d1aff55ec0f36c3cf1566bd939838eab97ab96942dd1b8e89477a378809879c784f60fcd7b2782e45f13c27fe070e4db5e8a4b13773659fcf5359bba93e135d31527152b5afa33af701221696575306dfa4380debba2618b60d3914e2bc44b6172a43f875b867dee40c3f88ccc48cc7c37b3ced70cacc8d3eff4083e3a94b51496791ee9c77d9dcb8e56e5c0cd43e22e16a6951356f57de22456874e3bb47055821e726fa41c1a3805904c69da4c902e27fee9477e4e214ba81ec8ece7317bef538ee1f3852d601ab87184a67f672e9f7a2771413be1bf27f5b40d2438a4b145dae99a1ebf8a613cd65d5142f5c2e34cb750a991f40c0cc136acdcbfce6d119507151e79551b1f8a376abc34b9b7ea04dfb429f1021c386b3a729359753a0f38492c7b0ab10dcf402251fd4291b48b6a92b0cf69780b07d9804edec44dd5f60e3a50f8ccc6dbf0fd41181a3806a8f9e39238288475b6385d7ece83210e2b57615e12d734f182aae2a8b876a16639915fec4cb6d12566e2d1ffc7ac76a6d107a1a26de7c398f1105189f3c4fca64113b56ec61a509e9322fddf2326496d64e40756da81b8053c55eaf8d47e92b0f792f048074135eb9fd9f1647db27c00666adfbf3279e6b5d221740a5520775e75a9fefc3fab4a86cbd447972599fd47ba8ed4ad9df7449f86036f7ea390064b0922f1c1b17ab9ad434d926644b188613be550ae26affb934a278ae7f650447650e96f251ab4ad675228b92e0bc20045d67c0113cf1ba87b8ba10e1fdc07b06dbb7f7c1dc4ebbfa924142b37750e29b81bbee5a5aa05c8f0d2fc9809b5f3f0dba211b47beb39091be9552d6b3f5d5f20af19db839786f987d1f329b3eaa7cca49cc6ff1ce4b70516aa7b4f5a4c30f749e0011645ec0a3208b84b31e5c2478cf79bac563bed815f09f2ee059715be58dddc2438ec73f1654ac2429310009c8bbeadc2de4ae7b93d5a76b7c6be8a229a670c690594779e9cbc597e2ac55d0a7ec4ccd292937e1986838eb6017812835b1c138a40780b2972c8149752ae8cf6574139e8958b42b15e3a1d6827c5f5e1dbbabb5eb51044111ec5c78b4332a2be8bd4f15a1d4f876e1e49b485dfa9b0e34785f2403cfe071e39cad77ce13aa2a241677465e6388500578a3aa3a6b22cf040552f015a55a7d39b3a0a60fa7898b7f3fc9b5866365f4c09d4fd943334d665c25ded3728d99a549e242b738c98276417171aa3e99fbd989905c03d2dac57341d06b3c5001b97ff7802d5fa9d91578ec2abc54aa3d71555823d1091db70c4868562eda9d6b734ba483afae02f1da14db501d7bfc6611508671b732fc16193219aa7160f10e1222caacff559607f253b88d3f85c45525b58c4039f3b7df271d3b15fdc7e74f07b41a27793e030053d0f39ac2fd8e906826bc805eb127685c4c653bc25314f700cfab68a9ff860fc349892c35daba6bc517a0cbe9fc8efb0f52ecee23fd1194fc96e23f06b389034ca2841bd2fe13c7ca95195059f1f0416c49ffa0be65913842fc9afdd8daa124a52233b498810c30bd05170de87acc74f2a21193fd1ebf68ce64aef440c887c39852adc13475c5c338e37cbf04cd491985a27b9ed831bc7a8ab561414a6ce5d09a407a1c8762fe2c4f747989c270132029f8136de5abaf05decde465539a89b8174b5622784a225b1f04dc62190185b5e7b007e541ba3335df80e90491eacd3ac096fc6277e052c05a83733553b44b3acb01c7578d51ea2315c8d617c4ed121303a0edb4cfc32ba6281da4b9555a97745b385ed05c058b56d07e7a68a587e2277124084f17ef38c27394a552d4256a6fb2edeff9f2c53301e4afe26562cca8e4cbb63f39bc4d26497595fe1a2a66ca0a2c825445547606947961c19b99cf1bd810d1bd123e48bd456358e03bd45b560183c3dedf6a83d31171cff274869cadf69fdb6060a99ef3b7dfaf484a3d9dc322d2ccca0de63744a6351c802936d2e0f344aab9f3e5379545cb902e04eb85d8089f9f46cc0d9c0859a989281a2fd2179daca937dd236c0e14f99e6b343e97ced71e737134f6ead8bb0168e61e1a51ca082c292178907f542e0f6810450864c493ae0266679fc7e20c3f5104a195fc8d61b3b82b84ac378e5b796eeca720e1a41e5b6cf61b8f6c2e9ff1cca15467584c718937887b4c586b9ca757f0329ba19efc598bcf79b009fe4be53d41a4a86a2d5cc26a7a2e7fb71a59b770ef1c591aabd00206cb3d01a49d2efd8fbc78582d671eda1f1c1643e3076eba35e21f4cc0387825750c80665340be150fc18a3a5a6b1a4a0cef13b924ee9828119adb701498bc498cca845eba33f04ec2ef4efec6a00fc556e89c0cfaff0f3b4f6cda1a27144d3d434a7759766fd842668d07de8da97d2bd353de4d1accc65fc1971094fc460a3fbd3d34fbe2d4dc78a793abfdc65b6729cc35a5aabcae109f7d28eaeb636b50aba8c7faaa4cfadee470a95bb1ee345fd3281eeec99df43181b9dbc611a81db759c726112f5b3c6c295dd34042aa99bc69b18f6e65b1c84da3cd2fba55ed0e3421901dca36808e4b1c905b821c69db5e9255ee465a02c959ce59739559f4a5f85e8ac2077f69da30218d88b3096b2daf70efbb9b002c4ac54ca24912d3f0a2c35639f0781ccf3ad7ed359e87a72fe8aa9d2ec524709f16b353ba6295afa5c91d073906e2d9ed26d3470b77fda719f9637389c587d18403a8854ddd19b5c9d1cc92199c3d13128e7970fdea06a93600241efb5689c016bbd33022a16262358f2c4009b2bd61202b3e9551361dad42f2e6e69f1ee6d3ef9ab38cc1f2d048c0e82d34f3d91bdcef62e32d1fa65ebdcc56affb649cac313f91c66e137495e08af6d3fe19f42c8bd2f69dbba9d30b992945c96190a4497d3e6f360b949212d81181b830dae686593d6ccab689eb490c20f53b5d4309ad4a8aaf9db32dd664e6e1fc8960f8bc8e0e3c0e09aad2fa0892e65558b0890f6e3f0ec4539e0d35a995ae89891b660a4a082ecc3b92edf6b16b1f612bfadfb53cd1876be12fde673928452b41356ca8752e6feafbf1945f0a00dc028c8881688599f446dd443628d01853e9fc6a3fc6c62b6fb3013841c536471de7acecae30df201a8149ae521c37c7e2ae259a2b7bbddc00d5d1e2f1acdcbcce4fd939301d6ce250b95450302ca73245ff3c72b0247ca006dfe9767b10f097e9d0ae841d90e615dcfe9d329afac185d11a93f245dcf523a117d32cfc1a53238a0821a752f842465898565f52ba6807df3385879ec5a02b521be8dd9e3f90d93379ab85657f9142074e0c47de74d7ac7771a0e4243db3f94469930d5d8888521a40cfb27fe6862b026e8fc386990cb1af9eae20d69b3ec97b7aedb1724e78532f6bf33babd570fbd07c6f08c1a74c9e7a5383bc17aaebbc5fd388728a6083a304a4bd9724b30278f7c8b954642ab8fea6d460164a88e8ee7424676bccea313c46025aeb26dac6f37634ffa381549826e9e03ee5dc274cae5af26e7e4dd9c466af8c4b535f50eb5cf3b3298b45865c8186eb56133f13f6590823005fc72ed4c02ba972c63737f501a4af64365395c6b969b662c8205aa3f8a4556e9a1da0a4f885f6398e49cf9c0bdf7547f6ce5e7d88b2b6482b5a10596371962da7956f68abfac51925a6849990c606a7a9cf6f8850c261ae9f5f805c80a4eb7c2cee3c32a403266c0580d16ff38b0bd8a782f2681248ee3fe9a6ab725922a0293996923236f779ff3fc51f187d38b185814385268ad4e79bcd22312fae689a32f9f40bb36c94b5b1c6c5c5f4766bfd86b548ee46649f8d04b654b2c13e8701738c4f6dbc9e54ff85ea26b9c7f6b2c7c375a1757fe0c5cf1ec1f670e3f5bfb2c6ec9a32bfb88815db1e9a18f9d41a3c214ce587020992f1c2b8fbd57e5b47eea4beea4f8738831274d77bc5acea9fe6683787984627aa2814b28cfe6364b4a5e7a6fc89dce3a015a211f8007bbe79ee04c1b7556886a6ab90650a06ac9ce1b05839a3ab1b4cd78cf07948c6f2a91cc5e65ed43da1adaa3737ca492325a070af7c23bac007712170e5cb2f4596397e421e1626afc203be9619b2e175f4110a5f38d5c2d516f21a6a9691e1e8f2caf178ff7bf4ff9912697d019e05654b6b98208f24c1d45f5903806c004db37336fd74e2106dcbb72ade3499d50478be39dfff0ae33ed04161a56f40849ddadec3ad17c4fa265c1f6b3c021f5c8564824370a07836c41ac9ae4bb90bc996676cb3712fba8893e6d1390c0bd1f3c886d559a7a3aeacac692a06ad5088e66bfe4d7623004309e8a24e2d0de429be6063b3210f07523522b9d48c2a04143a8c53f1da99b44968fa94afc5c4defb7f3944afd5b0e86d519a7cbc1812f2fff0b5f6629f500a3b9dc0ff2ca2372d9f308c3f1ffbcd1d25ae8ca8fdcd561cfd6f023f25c94fd4e6cfb88079702884380625d33e3b8eecdd3bb7caa748faf72562817d81d48652550734405ec8a96395f0a13b4b63601f1f95ea5caa94d783a2a7239ef6127140ca5f94492421bbb11fcb81aa33182279a0d04da06fbb514a391aa7746b4a44b8a68dd6", 0x1000}, {&(0x7f0000004d80)="894fe458e62f0f340163d6505b8c599217e53c42e47b9ee2bbf5f622bcbceaa49e96e7872dfac616d44ea328ae93475365efbdd297b8bcfc40562e58f69bf3cdc994b206dc992d3dd477978d9277a441a32c92ce4f77285966e8d37df3aaa29a9a5c48c50bab6f48b18c5fa0e39bba4d37dba0fc96983219c911d23452d99c864e09d5abfbc53451aa8ef5c826ed4737b0b4ac051bf5392abfe13554ad46d3d0a8f56bce896d65a3da6f367be25895641986cb953006a191b72992ad95901f504ef48a5c2f692e1a6384de8bf8b24f8c35549addddb794e56829477ef4d28b0955cb", 0xe2}, {&(0x7f0000004e80)="eccb483e66c2ed63841f9bbb4691a17c4e1118e3b15a408fc6800fa42d526afd1b8f9c8576a97d8d6962ec99fdf3e5753acf22d9257a6351455b256bfc94e6da474ac7097adc841be3911b44a7", 0x4d}, {&(0x7f0000004f00)="e7d4e0", 0x3}], 0x6, 0x0, 0x0, 0x8810}, 0x7f}], 0x3, 0x24000000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r6, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:57:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x18400) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x2) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x2, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x20, 0x6e6c, 0x6, 0x3, 0x9, &(0x7f00000000c0)='lo\x00', 0x9, 0x401a, 0x80000000}) 2018/03/30 09:57:00 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={r1, 0x2000002}) fcntl$setstatus(r0, 0x4, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="34250000ff0f000000b8dd896cd32752c30700000000000000000000000000000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000b1000)={0xffffffffffffffff, 0x0, 0x0, r3}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@dev}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) add_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="46cafe8bd36dd3a7987861dbce0507061de5329a7831326b3844fe4f2d26369b5f2ef357f1cef467cda069ab3fd1379769cd99bbfda64b00304048d156c6b4f8e5378a8b1914df4972c1c5e761439e325e30e1aa51456be462e5cb371eb33ba276115be40889e6eac4981ff39c00e385ed6eec1a", 0x74, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:57:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:57:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [], 0x1}, 0x51, r1}) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x400) sendmsg$can_raw(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x2, 0x100000000, 0x6, 0x6}, 0x0, 0x3, 0x0, 0x0, "a6e4af2cb53cff59"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x44800) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x5, 0x8, 0x3, 0xffff, 0x7, 0x59, 0x8, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x9}, &(0x7f0000000200)=0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0xfffffffffffffb7c, 0xfff, 0x8, 0x101]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000025000000000000000700000000000000009ff7ff00000000950000000000f6ff9b2ee4c8bfece0a96f5956db251e449775b31a5260e17d6b0d1e107bb259b3964975"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:57:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="d888f6b5d788edd192acd42bded11a02a96522bff8c464e273e649b6495b102b71b1ec681fd9ad8e39e8f246c8320755c1dd4f8b0fe0e47515b1e72d397b703f9cbf990000000000000001c8d2db13ce84a9b5be1a8164f6006eb4a1f67d5e1be5ca9811cee320d6c0e7a46f622236024f"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)=0x80000001) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0x0) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@local, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xaa}, r1}, 0x14) listen(r0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) setrlimit(0x7, &(0x7f0000000040)={0x2, 0x4}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:57:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000000140)="73797a6b61f26c657200", 0x0, 0xc3, &(0x7f0000000000)=""/195, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)="47500200", 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41f00}, 0x48) 2018/03/30 09:57:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) r0 = dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r1) 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0x0) 2018/03/30 09:57:00 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x2, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:57:00 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xe2, "1615434b8119aee1eec6b61ad48acd37e6a56e554436e8220c386376550adea2d7632ee28ed90f430d4327151901b6bc43731450cb2610cc9c2f9b3a30c43f36c9f419e2018e808815d4e9bde5979b4138ecee414677765c6036e668933090a670680fbfa3479571e8dafc3dde6d794ecb4052ecb5cfca81c4b68b14b169b293af60fbae43b3077d044ccd0c66e1764c2981a736adb374f5ea55f8361136f60add3d668dab5b83af82c38ecbc8ab5b8551cd23594624a69c681d2b044be7fccea0d58be08062c5e15f1db18110da16582e7aef33d7d0f26bb7215051d5d8a65a89cc"}, &(0x7f0000000140)=0xea) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0xc70, 0x3ff}, &(0x7f00000001c0)=0x8) 2018/03/30 09:57:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x40800) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000080)={0x80000001, 0x0, 0x10001, 0x1d1f}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x2, 0x2, 0x200, 0x9, 0x9162, 0x101, 0x9, 0x6, 0x6, 0x5, 0x80000001}, 0xb) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40086437, &(0x7f00000000c0)={r2, 0xbf1d}) close(r0) 2018/03/30 09:57:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="94338416cf48e14b1bf03b527d3ee6fbe4bf685fb8d0168b3946bb17a1ec2d9c1413c3c31c607d9fd1774f0845c7e37b60e85bc95c348bf826a2e1880bb0a119adae04659772e50d01259b6dd337cec416e90ae55f674e8406514d10d48a022a4188e2c7269487"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0x0) 2018/03/30 09:57:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="3b1b8207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/30 09:57:00 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffffffffff8, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x20}, 0x6a) 2018/03/30 09:57:00 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="7f33844b1b0207e6ad"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x401, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 2018/03/30 09:57:00 executing program 0 (fault-call:9 fault-nth:0): r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 1 (fault-call:12 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xffff, 0x10000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[@register_looper={0x630b}], 0x1e6, 0x0, &(0x7f00000000c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c6f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0b1d593d21cbf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63cf28031f0c2fd5dfc58dcfcb7acde57e7160d6b8ae92e296c32bdc4c6745d92a149f1816758b03e695561dc6ac04e599f126674ff48e8df44448a9b03a9b2ddfaf1d59d654c29d8db5651f22cd192c8bda663c6c89f580b34f3284fe59f4c9313723812abae79be66347a2d8f1a2e5cc2bd5236279e4a6dc1d29dca77713514d0073123be9c5"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x3c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="d888f6748542ecaa169f2f2bded11a02a96522bff8"]], 0x9, 0x0, &(0x7f0000000580)="4701fbca154c840def"}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r1) 2018/03/30 09:57:00 executing program 4: r0 = mq_open(&(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x0, &(0x7f0000000100)={0x1bdc, 0x56835abc, 0x9, 0x0, 0x5, 0x2274, 0x1, 0xff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000280)="56b9e2a8", 0x4}], 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e23, 0xd98, @loopback={0x0, 0x1}, 0xa9d}, {0xa, 0x4e22, 0x1, @empty, 0xebf}, 0x9, [0xfffffffffffffffd, 0xa477, 0x2, 0x1, 0x20, 0x2, 0x2, 0x800]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x42002, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000340), &(0x7f0000000440)=0x429ab42e52b9ff4a, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x1000000000006000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x5000, 0xfffffffffffffffe}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000200)=0x400, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x5000, 0x9000}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400, 0xa) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = fcntl$dupfd(r6, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000080)=0x300000000000000, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc8, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x20004840) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9b86bbbf64f4ca8d1e3f171e7ec690d308028b3b56716", 0x2d}], 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'lo\x00', 0x3}, 0x18) ioctl$sock_ifreq(r9, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc\x00', 0x80, 0x0) 2018/03/30 09:57:00 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x249fbda517af3fab, &(0x7f0000000040), &(0x7f0000000080)=0x8) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:57:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) [ 65.642886] FAULT_INJECTION: forcing a failure. [ 65.642886] name failslab, interval 1, probability 0, space 0, times 0 [ 65.654231] CPU: 1 PID: 8308 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #281 [ 65.661507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.670845] Call Trace: [ 65.673419] dump_stack+0x194/0x24d [ 65.677043] ? arch_local_irq_restore+0x53/0x53 [ 65.681697] ? __lock_acquire+0x664/0x3e00 [ 65.685922] should_fail+0x8c0/0xa40 [ 65.689621] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 65.694707] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 65.699875] ? print_irqtrace_events+0x270/0x270 [ 65.704615] ? trace_hardirqs_off+0x10/0x10 [ 65.708926] ? find_held_lock+0x35/0x1d0 [ 65.713002] ? check_same_owner+0x320/0x320 [ 65.717313] ? rcu_note_context_switch+0x710/0x710 [ 65.722218] ? lock_release+0xa40/0xa40 [ 65.726185] should_failslab+0xec/0x120 [ 65.730143] kmem_cache_alloc_trace+0x4b/0x740 [ 65.734707] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 65.739708] ? trace_hardirqs_on+0xd/0x10 [ 65.743848] tty_ldisc_get.part.3+0x66/0x140 [ 65.748243] tty_set_ldisc+0x4f/0x7a0 [ 65.752049] tty_ioctl+0x492/0x1610 [ 65.755658] ? tty_vhangup+0x30/0x30 [ 65.759355] ? ldsem_down_read+0x37/0x40 [ 65.763409] ? lock_release+0xa40/0xa40 [ 65.767374] ? trace_hardirqs_off+0x10/0x10 [ 65.771681] ? __fget+0x36b/0x5b0 [ 65.775136] ? find_held_lock+0x35/0x1d0 [ 65.779189] ? tty_vhangup+0x30/0x30 [ 65.782889] do_vfs_ioctl+0x1b1/0x1520 [ 65.786764] ? lock_downgrade+0x980/0x980 [ 65.790902] ? ioctl_preallocate+0x2b0/0x2b0 [ 65.795297] ? check_same_owner+0x320/0x320 [ 65.799605] ? rcu_note_context_switch+0x710/0x710 [ 65.804546] ? ldsem_up_read+0x3a/0x70 [ 65.808414] ? tty_ldisc_deref+0x35/0x40 [ 65.812453] ? tty_compat_ioctl+0x119/0x260 [ 65.816764] compat_SyS_ioctl+0x4ef/0x2a30 [ 65.820988] ? do_ioctl+0x60/0x60 [ 65.824423] do_fast_syscall_32+0x3ec/0xf9f [ 65.828734] ? do_int80_syscall_32+0x9c0/0x9c0 [ 65.833295] ? _raw_spin_unlock_irq+0x27/0x70 [ 65.837776] ? finish_task_switch+0x1c1/0x7e0 [ 65.842267] ? syscall_return_slowpath+0x2ac/0x550 [ 65.847186] ? prepare_exit_to_usermode+0x350/0x350 [ 65.852187] ? sysret32_from_system_call+0x5/0x3c [ 65.857028] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 65.861861] entry_SYSENTER_compat+0x70/0x7f [ 65.866246] RIP: 0023:0xf7fbfc99 [ 65.869586] RSP: 002b:00000000f77bb09c EFLAGS: 00000286 ORIG_RAX: 0000000000000036 [ 65.877272] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000005423 [ 65.884520] RDX: 0000000020c9f000 RSI: 0000000000000000 RDI: 0000000000000000 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') fchmod(r3, 0x4) getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 1 (fault-call:12 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x100) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 2018/03/30 09:57:00 executing program 6 (fault-call:11 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x6, 0x0, 0x0, 0x800000000000, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x4}) ioctl$KDSKBLED(r0, 0x4b65, 0x2fde) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x40000001b) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x2, 0x5}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000c9f000)=0x2) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) [ 65.891766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.899017] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 65.906265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/03/30 09:57:00 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c5087673706b897c3d583dc5334396f792a2d00165663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae489"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) 2018/03/30 09:57:00 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440), 0xad, 0x0, &(0x7f00000006c0)="64fd4ba32509f0592b7353a46791ddd18204be00675d6bf88549f86edb981427f74a5e8be9e50e670036cee4f63837c2f0e533f8d97b74780b763a27f0be0d64b600eccc263a3026c43ac0bf4d48c8c6d031a26ac30405f3c3ceae01c5bf8721e0f84864bcf3c0190c0002013e44f94ad57346bd7a887d55d5157a26b8d0b4d447c2cd62e6dd808b96bb03e4cba5338a1f11e18e58643f68874d6c35c30928a35203cdfe16733b63b0435fd5af"}) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)=0x1000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)=ANY=[]) close(r0) 2018/03/30 09:57:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f000089b000)=0xffffffffffffffff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2018/03/30 09:57:00 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6723, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000002c0)={0x7, 0x0, 0x1, 0x8, 0x9, 0x100000001}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x31, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0x4, 0x4) connect$vsock_dgram(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xfffffcbe) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000340), &(0x7f00000003c0)=0x60) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') getsockname$ax25(r4, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EVIOCSFF(r4, 0x402c4580, &(0x7f0000000400)=ANY=[@ANYBLOB="510008000800040005000700ad00000001010300080000807f003ade997bd018495ede116669d5117a697b9163a2821f2c1a8023fc7164ebcbd64e5303985e5c34eb2dd66a92e264c68d0ba5479f9fcad1bbb015c3b9e79ee492c74114d77a9c508767370663cec9eea28def03f35e7ef46c8c8bd7f1d5059c63c969d508d149f12d2f97ecb4118c4f59a5c15f08cfbae48900000000000000000000000000000000"]) sendfile(r2, r4, &(0x7f0000000000), 0xff) [ 66.013786] FAULT_INJECTION: forcing a failure. [ 66.013786] name failslab, interval 1, probability 0, space 0, times 0 [ 66.025448] CPU: 1 PID: 8333 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #281 [ 66.032731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.042090] Call Trace: [ 66.044693] dump_stack+0x194/0x24d [ 66.048336] ? arch_local_irq_restore+0x53/0x53 [ 66.053028] should_fail+0x8c0/0xa40 [ 66.056734] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 66.061832] ? trace_hardirqs_off+0x10/0x10 [ 66.066131] ? save_stack+0x43/0xd0 [ 66.069734] ? __kasan_slab_free+0x11a/0x170 [ 66.074119] ? kasan_slab_free+0xe/0x10 [ 66.078075] ? find_held_lock+0x35/0x1d0 [ 66.082122] ? __lock_is_held+0xb6/0x140 [ 66.086183] ? check_same_owner+0x320/0x320 [ 66.090503] ? lock_downgrade+0x980/0x980 [ 66.094634] ? rcu_note_context_switch+0x710/0x710 [ 66.099545] ? lock_release+0xa40/0xa40 [ 66.103492] ? lock_release+0xa40/0xa40 [ 66.107463] should_failslab+0xec/0x120 [ 66.111421] kmem_cache_alloc_trace+0x4b/0x740 [ 66.115978] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 66.120971] ? trace_hardirqs_on+0xd/0x10 [ 66.125104] tty_ldisc_get.part.3+0x66/0x140 [ 66.129494] tty_set_ldisc+0x64d/0x7a0 [ 66.133372] tty_ioctl+0x492/0x1610 [ 66.136979] ? tty_vhangup+0x30/0x30 [ 66.140673] ? trace_event_raw_event_lock+0x340/0x340 [ 66.145846] ? lock_release+0xa40/0xa40 [ 66.149801] ? trace_hardirqs_off+0x10/0x10 [ 66.154099] ? __fget+0x36b/0x5b0 [ 66.157553] ? find_held_lock+0x35/0x1d0 [ 66.161599] ? tty_vhangup+0x30/0x30 [ 66.165291] do_vfs_ioctl+0x1b1/0x1520 [ 66.169156] ? lock_downgrade+0x980/0x980 [ 66.173289] ? ioctl_preallocate+0x2b0/0x2b0 [ 66.177671] ? check_same_owner+0x320/0x320 [ 66.181972] ? rcu_note_context_switch+0x710/0x710 [ 66.186897] ? ldsem_up_read+0x3a/0x70 [ 66.190761] ? tty_ldisc_deref+0x35/0x40 [ 66.194797] ? tty_compat_ioctl+0x119/0x260 [ 66.199104] compat_SyS_ioctl+0x4ef/0x2a30 [ 66.203325] ? do_ioctl+0x60/0x60 [ 66.206760] do_fast_syscall_32+0x3ec/0xf9f [ 66.211068] ? do_int80_syscall_32+0x9c0/0x9c0 [ 66.215627] ? _raw_spin_unlock_irq+0x27/0x70 [ 66.220099] ? finish_task_switch+0x1c1/0x7e0 [ 66.224577] ? syscall_return_slowpath+0x2ac/0x550 [ 66.229486] ? prepare_exit_to_usermode+0x350/0x350 [ 66.234481] ? sysret32_from_system_call+0x5/0x3c [ 66.240133] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 66.244969] entry_SYSENTER_compat+0x70/0x7f [ 66.249356] RIP: 0023:0xf7fbfc99 [ 66.252713] RSP: 002b:00000000f77bb09c EFLAGS: 00000286 ORIG_RAX: 0000000000000036 [ 66.260398] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000005423 [ 66.267642] RDX: 0000000020c9f000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.274887] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.282132] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 66.289380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.296852] WARNING: CPU: 1 PID: 8333 at drivers/tty/tty_ldisc.c:531 tty_set_ldisc+0x4c6/0x7a0 [ 66.305594] Kernel panic - not syncing: panic_on_warn set ... [ 66.305594] [ 66.312940] CPU: 1 PID: 8333 Comm: syz-executor1 Not tainted 4.16.0-rc7+ #281 [ 66.320186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.329514] Call Trace: [ 66.332083] dump_stack+0x194/0x24d [ 66.335694] ? arch_local_irq_restore+0x53/0x53 [ 66.340337] ? arch_local_irq_restore+0x53/0x53 [ 66.344988] ? vsnprintf+0x1ed/0x1900 [ 66.348775] panic+0x1e4/0x41c [ 66.351945] ? refcount_error_report+0x214/0x214 [ 66.356676] ? show_regs_print_info+0x18/0x18 [ 66.361158] ? __warn+0x1c1/0x200 [ 66.364594] ? tty_set_ldisc+0x4c6/0x7a0 [ 66.368628] __warn+0x1dc/0x200 [ 66.371886] ? tty_set_ldisc+0x4c6/0x7a0 [ 66.375930] report_bug+0x1f4/0x2b0 [ 66.379543] fixup_bug.part.11+0x37/0x80 [ 66.383583] do_error_trap+0x2d7/0x3e0 [ 66.387453] ? math_error+0x400/0x400 [ 66.391230] ? put_ldops.isra.2+0x7b/0xa0 [ 66.395378] ? lock_downgrade+0x980/0x980 [ 66.399511] ? free_modinfo_version+0x70/0x70 [ 66.403996] ? lock_release+0xa40/0xa40 [ 66.407959] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 66.412788] do_invalid_op+0x1b/0x20 [ 66.416482] invalid_op+0x1b/0x40 [ 66.419915] RIP: 0010:tty_set_ldisc+0x4c6/0x7a0 [ 66.424557] RSP: 0018:ffff8801c67bf970 EFLAGS: 00010246 [ 66.429898] RAX: 0000000000010000 RBX: ffff8801ca0c4e00 RCX: ffffffff82f49246 [ 66.437152] RDX: 0000000000010000 RSI: ffffc90002c52000 RDI: 0000000000000282 [ 66.444922] RBP: ffff8801c67bf9c0 R08: 1ffff10038cf7eee R09: 0000000000000000 [ 66.452167] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 66.459411] R13: ffff8801ca0c5370 R14: ffff8801d79f27c0 R15: fffffffffffffff4 [ 66.466673] ? tty_set_ldisc+0x4c6/0x7a0 [ 66.470733] tty_ioctl+0x492/0x1610 [ 66.474340] ? tty_vhangup+0x30/0x30 [ 66.478036] ? trace_event_raw_event_lock+0x340/0x340 [ 66.483209] ? lock_release+0xa40/0xa40 [ 66.487165] ? trace_hardirqs_off+0x10/0x10 [ 66.491464] ? __fget+0x36b/0x5b0 [ 66.494921] ? find_held_lock+0x35/0x1d0 [ 66.498968] ? tty_vhangup+0x30/0x30 [ 66.502656] do_vfs_ioctl+0x1b1/0x1520 [ 66.506520] ? lock_downgrade+0x980/0x980 [ 66.510647] ? ioctl_preallocate+0x2b0/0x2b0 [ 66.515034] ? check_same_owner+0x320/0x320 [ 66.519338] ? rcu_note_context_switch+0x710/0x710 [ 66.524261] ? ldsem_up_read+0x3a/0x70 [ 66.528129] ? tty_ldisc_deref+0x35/0x40 [ 66.532176] ? tty_compat_ioctl+0x119/0x260 [ 66.536489] compat_SyS_ioctl+0x4ef/0x2a30 [ 66.540712] ? do_ioctl+0x60/0x60 [ 66.544147] do_fast_syscall_32+0x3ec/0xf9f [ 66.548453] ? do_int80_syscall_32+0x9c0/0x9c0 [ 66.553015] ? _raw_spin_unlock_irq+0x27/0x70 [ 66.557491] ? finish_task_switch+0x1c1/0x7e0 [ 66.561969] ? syscall_return_slowpath+0x2ac/0x550 [ 66.566878] ? prepare_exit_to_usermode+0x350/0x350 [ 66.571873] ? sysret32_from_system_call+0x5/0x3c [ 66.576698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 66.581526] entry_SYSENTER_compat+0x70/0x7f [ 66.585912] RIP: 0023:0xf7fbfc99 [ 66.589249] RSP: 002b:00000000f77bb09c EFLAGS: 00000286 ORIG_RAX: 0000000000000036 [ 66.596933] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000005423 [ 66.604180] RDX: 0000000020c9f000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.611425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.618668] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 66.625913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.633987] Dumping ftrace buffer: [ 66.637732] (ftrace buffer empty) [ 66.641416] Kernel Offset: disabled [ 66.645018] Rebooting in 86400 seconds..