x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000100)={{0x20, 0x6}, {0x5, 0x10001}, 0x4, 0x1, 0x6}) r2 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_vs_stats\x00') preadv(r2, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:27 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17001d001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:27 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2004, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x4002, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:27 executing program 2: prctl$void(0x22) 2018/04/19 08:14:27 executing program 2: unshare(0x203) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000000c0)={0x8, 0x0, [{0x2, 0x7, 0x0, 0x0, @msi={0x401, 0xfff, 0x6}}, {0x0, 0x1, 0x0, 0x0, @irqchip={0x40800, 0x6}}, {0x8, 0x1, 0x0, 0x0, @adapter={0x6, 0x800, 0x444, 0x5, 0x3}}, {0x7fff, 0x6, 0x0, 0x0, @irqchip={0x9, 0x800}}, {0x7506, 0x1, 0x0, 0x0, @adapter={0xf5a, 0x51a, 0x100000001, 0x50000000000000, 0x71a}}, {0x101, 0x7, 0x0, 0x0, @irqchip={0x5}}, {0x9, 0x3, 0x0, 0x0, @sint={0x5cdb}}, {0x5, 0x1, 0x0, 0x0, @adapter={0x0, 0x7, 0x3f, 0x7, 0xffffffffffffffff}}]}) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x6e93ebbbcc0884ef, 0x0, &(0x7f0000664fc0)={0x0, 0x7, 0x4}) mq_timedsend(r2, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)) 2018/04/19 08:14:27 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170010001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:27 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x200a, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:27 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x15) 2018/04/19 08:14:27 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_open_procfs(r0, &(0x7f0000000080)='syscall\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') socket$inet_sctp(0x2, 0x1, 0x84) preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:27 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xe803000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:28 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17000e001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:28 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x400000000000000, 0x52, r0, 0x0) 2018/04/19 08:14:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)="6e03000000705f76735f7374617473ad") ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000140)={r0, 0x938}) ioctl$KIOCSOUND(r2, 0x4b2f, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r2, &(0x7f0000000040), 0xfb, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) 2018/04/19 08:14:28 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 2018/04/19 08:14:28 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000181a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:28 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000000000000, 0x52, r0, 0x0) 2018/04/19 08:14:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x2900], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000040)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240)) 2018/04/19 08:14:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x40000) 2018/04/19 08:14:28 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000221a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:28 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x28], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x200000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs_stats\x00\rf') ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x5, 0x6, 0xffffffffffffcbe7, 0x5, 0x80000001, 0x4, 0x3f, 0x3, 0x2, 0x8, 0x8001, 0x2, 0xabd3}, {0xa0, 0x4, 0xa33, 0x0, 0x6, 0x3, 0x20, 0x6, 0x1, 0x80000001, 0x7, 0x7ff, 0x10001}, {0x100, 0x10000, 0x9, 0x9, 0x0, 0x3, 0x0, 0x7, 0x3, 0x1ff, 0x1ff, 0x3, 0x8000}], 0x100000000}) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x9, 0x7, 0x3, 0x9, 0x2, 0x100000001}) preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:28 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000000, 0x52, r0, 0x0) 2018/04/19 08:14:28 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001b1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:28 executing program 2: io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xffffff7f00000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:28 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x30a31e, 0x52, r0, 0x0) 2018/04/19 08:14:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 2018/04/19 08:14:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x401, 0xc02) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) 2018/04/19 08:14:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:28 executing program 5 (fault-call:2 fault-nth:0): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000a1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:28 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x0, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:28 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170016001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x381040, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x9, 0x1f, 0x1, 0x4, 0x7, 0x1eb0, 0x1, 0x1, 0x9, 0x200, 0x6, 0x4}) preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) [ 241.528144] FAULT_INJECTION: forcing a failure. [ 241.528144] name failslab, interval 1, probability 0, space 0, times 0 [ 241.539455] CPU: 0 PID: 19342 Comm: syz-executor5 Not tainted 4.17.0-rc1+ #7 [ 241.546648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.556000] Call Trace: [ 241.558602] dump_stack+0x1b9/0x294 [ 241.562248] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.567447] ? perf_trace_lock_acquire+0xe3/0x980 [ 241.572297] ? graph_lock+0x170/0x170 [ 241.576105] ? find_held_lock+0x36/0x1c0 [ 241.580183] should_fail.cold.4+0xa/0x1a [ 241.584254] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.589365] ? graph_lock+0x170/0x170 [ 241.593185] ? find_held_lock+0x36/0x1c0 [ 241.597284] ? check_same_owner+0x320/0x320 [ 241.601621] ? lock_release+0xa10/0xa10 [ 241.605611] ? rcu_note_context_switch+0x710/0x710 [ 241.610546] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 241.615572] __should_failslab+0x124/0x180 [ 241.619819] should_failslab+0x9/0x14 [ 241.623627] kmem_cache_alloc+0x2af/0x760 [ 241.627787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 241.633334] ? _copy_from_user+0xdf/0x150 [ 241.637960] do_io_submit+0x3fd/0x18c0 [ 241.641868] ? free_ioctx_users+0x6b0/0x6b0 [ 241.646217] ? __sb_end_write+0xac/0xe0 [ 241.650211] ? ksys_write+0x1a6/0x250 [ 241.654030] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 241.658881] __x64_sys_io_submit+0x75/0xb0 [ 241.663104] ? __x64_sys_io_submit+0x75/0xb0 [ 241.667502] do_syscall_64+0x1b1/0x800 [ 241.671376] ? finish_task_switch+0x1ca/0x810 [ 241.675866] ? syscall_return_slowpath+0x5c0/0x5c0 [ 241.680781] ? syscall_return_slowpath+0x30f/0x5c0 [ 241.685706] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 241.691059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.695890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.701061] RIP: 0033:0x455329 [ 241.704234] RSP: 002b:00007fea1c4f7c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 241.711927] RAX: ffffffffffffffda RBX: 00007fea1c4f86d4 RCX: 0000000000455329 [ 241.719179] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 00007fea1c4a7000 [ 241.726430] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 241.733685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 241.740936] R13: 000000000000018d R14: 00000000006f55d8 R15: 0000000000000000 2018/04/19 08:14:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xf4010000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:29 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x0, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:29 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1ea31000, 0x52, r0, 0x0) 2018/04/19 08:14:29 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17000c001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x8) 2018/04/19 08:14:29 executing program 5 (fault-call:2 fault-nth:1): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) 2018/04/19 08:14:29 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17002a001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:29 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x0, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x96, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'bcsh0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xb400], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:29 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x52, r0, 0x0) 2018/04/19 08:14:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:29 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) 2018/04/19 08:14:29 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170012001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:29 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0x0, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:29 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x52, r0, 0x0) 2018/04/19 08:14:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x32a89b1100000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:29 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x1, 0x4, 0xca9, 0x6}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2018/04/19 08:14:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:29 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:29 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000071a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:29 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x10a31e00000000, 0x52, r0, 0x0) 2018/04/19 08:14:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f69705f76735f73746174730043bc65f947dcb5c1cff521db9bdec25fd2e1683f9e48a2672799c37345cb7bfe000f2793d1996533732a5faea06e580095f5ba9bf7592881b025b25d30edfdbff272629fe1371c2daa86ec5772fe6c714b3df44e267516a213497f22b64da8f8a6b59fb13d9e6e61447ea79596227a00637d81f942445fe2c814ea83e3303eb6bfb35c9a96f273b31dcef62caabf1e26429afd3a06591e948c7368") ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x80, 0x7, 0x0, 0x2, "cf6d67bce979c2a60e1abea8d8cdb10d25817312914b7d34bd8a7cb794b07bc5f3e6ed4a73316416030901e4", 0x2}) preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xe803], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:29 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1300, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:29 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, &(0x7f0000000080)) 2018/04/19 08:14:29 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000051a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000) 2018/04/19 08:14:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:29 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x52, r0, 0x0) 2018/04/19 08:14:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffff000, 0xa, &(0x7f0000001840)=[{&(0x7f00000000c0)="aa8673f9059736f07fdf6680c325a3644a6ed22afeebd1bac9e8df5cd6196d934b72275e97e9626fe8a815f12a49fcb2b3b6097346e0ce01ae54f027939b9177d5e8e5d4d483a6137fbc8e559f2ecf81738de5904b5e1d650b147edc63ede7fc9cf152b6bb35d4eab049d0af3325c85bc6c55e4438a359ff92eac682d1c32f15171543f0a9f081c3b4d3dc7f1a9390a1c4473efc36f84e3e554c6f37bab30ce32712ce9610bc69b05cfc80f80050637d894679a1108810fed1042a6ae26a", 0xbe, 0x200}, {&(0x7f0000000180)="e0f51ec4feb352e8b2c408a469e082673c56585653ac6700d15ebd9c0539671280b5f4aa6e8c3c09b48e945e63c4879dd583bba9d8472b2a2b708d44e011d4e5905df41b243e713a7bcd52b1bf5c27e349944946d4", 0x55, 0x8}, {&(0x7f0000000240)="93fd3e35ac4b54862db07274cd539dafeb67fed0ba1380cbf0233d45fd265e83886898af22957f70cb1947d469703a904e7a4e1369f2805edbff4bba9976ab37345cdbb226f9fb276ae66045a28c2f9e0418ec7a2e7ba066ae4adfd7c7f762c1fa3989a4e744c857927fbb3d6dbb883d99c669a306206ec173c54ee2b974c7bef2f2c4e88e6b4cabc797ad2b08da82f9c92517153273b75954a23698b18d01ebeb8bf849a51f3278d268a8ebdbace1c87cd4730c20391133d583b20fec7fa537bbc237d6ae11fc747e98eda9a2072a7c512879a18aff8f4a62b7a565d1aabb0a6b86779a974ccbfc19eb2c26e4b07c210950eadecebbe936ff", 0xf9, 0x7}, {&(0x7f0000000340)="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", 0x1000, 0x5}, {&(0x7f0000001340)="9f824aaa8b50a32183c10e81580a13200b4695ff859fd742e0be0e33c3fb68771f737a88549299f809da42d4a6fcdd23bbb91a59eccd17af693da43be100833377519b0a6cb6b6bb7f1b3474fa33e93da08b08ac65fe48dd1b3fd07f69fe7c804e5c941ad45e1b815f80349e079778ae3e2d838f1e918e2c9f014dbb2008d2ecbfac80fdc17c946539dd372ed7892b56afc735fb274a49699ceda5e30f3119ed295941aa2bd62cd41d63b2ffe80fd23d6bad728f70213eeb0bbc", 0xba, 0x7}, {&(0x7f0000001400)="f9e9e745d0386a3869f3d06eabb8b4dbd2188b0e3e23f7bd40721ca963aeb7834998a4c8c145c6f65a8a2c948acccf72ffdee645def7f52108e96780ea88ffb276f1e09ed09ce9c6747a67e850584f3b612290aa3b5908335ced877363ba66601d555cf6cb75b2ab14886d4b950d9de424065ac721a4b2c917dec5ef0782bcadf0430be194b205181e39b4ced43fae2c4552979b3a2a77d2bd0b905c70acabfca03971bb4ac37c67cbc7a77bed5a6448459325077b7e77e2af1a642a5169a0f5254593a17fced3", 0xc7, 0xc9}, {&(0x7f0000001500)="7ad3d08b1d3d7614c8360a223e90cd000150dff1e8017cb94dfb074cbb26a84a628b1bdc1981715bec4c5b99814abbcb5d8c1fbc2677492e4800c6b68e985ff022fc8d1af124739aaf4ddfd81b5504c7bcf9124d2ada2322f22ebdd412e9dc13c5f3b3431af745757d6829182c714caeb012423bb34ea832b4c823bff80648f77487831b73cd530737e731c704ddcf917e4134865383371b0b7805f0580b1b53c3d4cea420737b9662951d49ac36217a", 0xb0, 0x100000001}, {&(0x7f00000015c0)="ff4ee5b1e86a1c1821b81422a6da2ec2b4de735f49542ff94eaf8ffc22ebde4bfa93cc8de96684cdb7433639f65b22065c25d9fa6a7755d283bbbf1c7a9a147781bdf1ef0a262e8d5caf3f9e7f6e967e3d81ec78fcc98f3727cc6edbf7d3f43294e46b7e1d71790aa08d598b57e74a5ad58dcc86b6b9a32999be1f35b0779df2ba6d81f9a018c269098b10aedbb80575ce494d82d7976b4cb0cf7c8bdb6eb8d9d48c840eafa4815a77842e0d7574238dbfdfd4a1e44403ca3c1e355d6ef0241992e01b29003b438a1a5d84d1abd48c933e70a3a6a49c400ff15e6ec8ebac378c702bb8a072bc92aa", 0xe8, 0xc4}, {&(0x7f00000016c0)="5c7d95ae5407c39e9c5b799666653a71f1ecc1b2d378069379d09b20370f491ef0e8b6659b716acf8f1298b2f243c3f5372e455cb0a2a36b5b703f3a377cf412a7e81b40f1a3cde4ea0ca02d046b0ecd1be493258f771439f78a16873d1e4cde8e5f82e1f78ce2db7d9fba21323274af9c7635ba4d3c77bc7c7a630a16214ac7efa075c7eeca1d76abd9fe15d61a63b2259c344873101deb6e2ce427b02fef80a1d5d1ab4a0ab8b88f4f1fb12eaa8c49bd0b65168fda47e51f805a9ac952838110deaec29e7da483ab5675170ef22e7189c62c8fc78c8e655557fa4edfe04b1166ed799c73bb07a116391aab48f403d4930527323e", 0xf5, 0xfffffffffffffffe}, {&(0x7f00000017c0)="ec5f47e7d94f03d4f677844ea375e4f71de8996d231952a798301a88924f9e948eabdbb7da1a04ee231f27b6a5bb0b4f6fdf42fde614a8ae6ce468de56122e0c80464afbdd69f64a397f3322ac90f692bd6f97008bacd8744b0cf790b9b9b1", 0x5f, 0x8000}], 0x400, &(0x7f0000001940)={[{@fmask={'fmask', 0x3d, [0x34, 0x30, 0x35, 0x36, 0x33, 0x32, 0x30]}, 0x2c}, {@quiet='quiet', 0x2c}, {@flush='flush', 0x2c}, {@tz_utc='tz=UTC', 0x2c}, {@uid={'uid', 0x3d, [0x37, 0x32]}, 0x2c}, {@sys_immutable='sys_immutable', 0x2c}, {@dos1xfloppy='dos1xfloppy', 0x2c}, {@allow_utime={'allow_utime', 0x3d, [0x36]}, 0x2c}, {@codepage={'codepage', 0x3d, '1251'}, 0x2c}, {@nfs='nfs', 0x2c}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:29 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0xf, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x700], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:30 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170004001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:30 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, &(0x7f0000000080)) 2018/04/19 08:14:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xa00], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:30 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x52, r0, 0x0) 2018/04/19 08:14:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:30 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0x6d8, 0x100000000000003, 0xffffffffffffff6e}, 0x7f, 0xffffffffffff9065}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000240)=@ioapic={0xf000, 0x100000000, 0x4, 0x0, 0x0, [{0x0, 0x1e28, 0x1ff, [], 0x1}, {0x9, 0x3, 0xb966, [], 0x8000}, {0x7, 0x101, 0x8, [], 0x7}, {0x8, 0x0, 0xce17, [], 0x100}, {0x20, 0x101, 0x80, [], 0xfffffffffffffffb}, {0x320, 0x9, 0x9, [], 0x6}, {0x9, 0x4, 0x5, [], 0x80000000}, {0x4, 0x0, 0xe5, [], 0xcd}, {0x7fff, 0xc96, 0x4, [], 0x9}, {0x7, 0x4, 0xa7, [], 0x4}, {0x1, 0x4, 0x7, [], 0x5}, {0x3, 0x2, 0x3, [], 0x400}, {0x284, 0x11, 0x4, [], 0x5}, {0x1, 0x0, 0xfffffffffffffffd, [], 0xff}, {0x9, 0x101, 0xff, [], 0x8}, {0x6, 0x0, 0x3, [], 0x94}, {0x10001, 0x14, 0x8, [], 0x9}, {0xc9, 0x0, 0x7fff, [], 0x6}, {0x8, 0xffffffffffffffff, 0x101, [], 0xc4}, {0x800, 0x0, 0x1, [], 0x461d0b8e}, {0xff, 0x1, 0x40, [], 0x10001}, {0xfffffffffffffff7, 0x2, 0x3, [], 0x1d}, {0xff, 0x6, 0x2, [], 0x6}, {0x7, 0x5, 0x9, [], 0x5}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x2, 0x10000, 0xf9, 0x3e]}) preadv(r2, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) 2018/04/19 08:14:30 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170003001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 2018/04/19 08:14:30 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x31, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:30 executing program 2: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, &(0x7f0000000080)) 2018/04/19 08:14:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xfeef], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:30 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:30 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x52, r0, 0x0) 2018/04/19 08:14:30 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17002f001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xb) 2018/04/19 08:14:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:14:30 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:30 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x7, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:30 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002d1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:30 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000000000000, 0x52, r0, 0x0) 2018/04/19 08:14:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) r1 = msgget$private(0x0, 0x4) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000080)=""/140) 2018/04/19 08:14:30 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x200000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) [ 243.283234] FAULT_INJECTION: forcing a failure. [ 243.283234] name failslab, interval 1, probability 0, space 0, times 0 [ 243.294533] CPU: 0 PID: 19560 Comm: syz-executor2 Not tainted 4.17.0-rc1+ #7 [ 243.301736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.311097] Call Trace: [ 243.313701] dump_stack+0x1b9/0x294 [ 243.317343] ? dump_stack_print_info.cold.2+0x52/0x52 [ 243.322540] ? perf_trace_lock_acquire+0xe3/0x980 [ 243.327370] ? graph_lock+0x170/0x170 [ 243.331155] ? find_held_lock+0x36/0x1c0 [ 243.335219] should_fail.cold.4+0xa/0x1a [ 243.339274] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.344364] ? graph_lock+0x170/0x170 [ 243.348157] ? find_held_lock+0x36/0x1c0 [ 243.352222] ? check_same_owner+0x320/0x320 [ 243.356526] ? lock_release+0xa10/0xa10 [ 243.360494] ? rcu_note_context_switch+0x710/0x710 [ 243.365410] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 243.370413] __should_failslab+0x124/0x180 [ 243.374643] should_failslab+0x9/0x14 [ 243.378429] kmem_cache_alloc+0x2af/0x760 [ 243.382577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.388187] ? _copy_from_user+0xdf/0x150 [ 243.392320] do_io_submit+0x3fd/0x18c0 [ 243.396198] ? free_ioctx_users+0x6b0/0x6b0 [ 243.400515] ? __sb_end_write+0xac/0xe0 [ 243.404483] ? ksys_write+0x1a6/0x250 [ 243.408271] ? exit_aio+0x560/0x560 [ 243.411886] __x64_sys_io_submit+0x75/0xb0 [ 243.416105] ? __x64_sys_io_submit+0x75/0xb0 [ 243.420500] do_syscall_64+0x1b1/0x800 [ 243.424374] ? finish_task_switch+0x1ca/0x810 [ 243.428855] ? syscall_return_slowpath+0x5c0/0x5c0 [ 243.433775] ? syscall_return_slowpath+0x30f/0x5c0 [ 243.438693] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 243.444052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.448894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.454065] RIP: 0033:0x455329 [ 243.457238] RSP: 002b:00007f609312bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 243.464931] RAX: ffffffffffffffda RBX: 00007f609312c6d4 RCX: 0000000000455329 [ 243.472189] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 00007f60930db000 [ 243.479444] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 243.486698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 243.493950] R13: 000000000000018d R14: 00000000006f55d8 R15: 0000000000000000 2018/04/19 08:14:30 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001a1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:30 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x80000000, 0x5}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)={0x9, 0x4, [{0x200, 0x0, 0x1}, {0x1, 0x0, 0x10000}, {0x1, 0x0, 0x3c05}, {0x5}, {0x8}, {0x1, 0x0, 0x401}, {0x3}, {0x4, 0x0, 0x81}, {0xca0, 0x0, 0x100000001}]}) 2018/04/19 08:14:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xc) 2018/04/19 08:14:30 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffff00000000, 0x52, r0, 0x0) 2018/04/19 08:14:30 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x8, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xf401000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:31 executing program 4 (fault-call:8 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:31 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) [ 243.713988] FAULT_INJECTION: forcing a failure. [ 243.713988] name failslab, interval 1, probability 0, space 0, times 0 [ 243.725558] CPU: 1 PID: 19591 Comm: syz-executor2 Not tainted 4.17.0-rc1+ #7 [ 243.732754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.742111] Call Trace: [ 243.744713] dump_stack+0x1b9/0x294 [ 243.748355] ? dump_stack_print_info.cold.2+0x52/0x52 [ 243.753553] ? perf_trace_lock_acquire+0xe3/0x980 [ 243.758408] ? debug_check_no_locks_freed+0x310/0x310 [ 243.763610] should_fail.cold.4+0xa/0x1a [ 243.767690] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.772808] ? print_usage_bug+0xc0/0xc0 [ 243.776881] ? graph_lock+0x170/0x170 [ 243.780686] ? print_usage_bug+0xc0/0xc0 [ 243.784767] ? find_held_lock+0x36/0x1c0 [ 243.788840] ? __lock_is_held+0xb5/0x140 [ 243.792917] ? trace_event_define_fields_br_fdb_external_learn_add+0x5e/0xd8 [ 243.800123] ? check_same_owner+0x320/0x320 [ 243.804455] ? rcu_note_context_switch+0x710/0x710 [ 243.809374] ? iov_iter_alignment+0x1f7/0xc10 [ 243.813866] __should_failslab+0x124/0x180 [ 243.818091] should_failslab+0x9/0x14 [ 243.821876] kmem_cache_alloc+0x2af/0x760 [ 243.826014] ? lock_downgrade+0x8e0/0x8e0 [ 243.830165] do_blockdev_direct_IO+0x607/0x9e90 [ 243.834821] ? perf_trace_lock_acquire+0xe3/0x980 [ 243.839647] ? perf_trace_lock_acquire+0xe3/0x980 [ 243.844476] ? ext4_dio_get_block_unwritten_sync+0xf0/0xf0 [ 243.850089] ? do_direct_IO+0xc300/0xc300 [ 243.854224] ? perf_trace_lock+0x900/0x900 [ 243.858444] ? graph_lock+0x170/0x170 [ 243.862232] ? graph_lock+0x170/0x170 [ 243.866020] ? perf_trace_lock_acquire+0xe3/0x980 [ 243.870850] ? print_usage_bug+0xc0/0xc0 [ 243.874897] ? idr_preload+0x40/0x40 [ 243.878599] ? find_held_lock+0x36/0x1c0 [ 243.882656] ? lock_downgrade+0x8e0/0x8e0 [ 243.886794] ? kasan_check_read+0x11/0x20 [ 243.890926] ? rcu_is_watching+0x85/0x140 [ 243.895060] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 243.900251] ? find_get_pages_range_tag+0x93f/0x1250 [ 243.905343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.910867] ? wait_on_page_bit+0x650/0x650 [ 243.915175] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 243.919916] ? perf_trace_lock_acquire+0xe3/0x980 [ 243.924742] ? perf_trace_lock_acquire+0xe3/0x980 [ 243.929570] ? perf_trace_lock+0x900/0x900 [ 243.933795] ? perf_trace_lock+0x900/0x900 [ 243.938021] ? graph_lock+0x170/0x170 [ 243.941804] ? graph_lock+0x170/0x170 [ 243.945595] ? graph_lock+0x170/0x170 [ 243.949381] ? perf_trace_lock+0x900/0x900 [ 243.953610] ? find_held_lock+0x36/0x1c0 [ 243.957660] ? lock_downgrade+0x8e0/0x8e0 [ 243.961798] ? kasan_check_read+0x11/0x20 [ 243.965928] ? rcu_is_watching+0x85/0x140 [ 243.970062] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 243.975240] ? pagevec_lookup_range_tag+0x40/0x80 [ 243.980071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.985602] ? wait_on_page_bit_common+0x770/0x770 [ 243.990523] ? do_writepages+0x161/0x1a0 [ 243.994587] ? ext4_dio_get_block_unwritten_sync+0xf0/0xf0 [ 244.000198] __blockdev_direct_IO+0x9d/0xc6 [ 244.004510] ext4_direct_IO+0xf90/0x2110 [ 244.008564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.014085] ? timespec_trunc+0xe7/0x170 [ 244.018135] ? put_itimerspec64+0x310/0x310 [ 244.022444] ? ext4_iomap_end+0x800/0x800 [ 244.026579] ? current_time+0x86/0xc0 [ 244.030365] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.035891] ? filemap_range_has_page+0x123/0x3c0 [ 244.040720] ? new_inode+0x40/0x40 [ 244.044247] ? rcu_is_watching+0x85/0x140 [ 244.048380] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 244.053563] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 244.059090] ? touch_atime+0x101/0x310 [ 244.062963] ? print_usage_bug+0xc0/0xc0 [ 244.067016] ? __atime_needs_update+0xd10/0xd10 [ 244.071671] ? print_usage_bug+0xc0/0xc0 [ 244.075717] ? __unlock_page_memcg+0x72/0x100 [ 244.080196] ? unlock_page_memcg+0x2c/0x40 [ 244.084420] generic_file_read_iter+0x510/0x2e90 [ 244.089164] ? page_add_new_anon_rmap+0x850/0x850 [ 244.093993] ? debug_check_no_locks_freed+0x310/0x310 [ 244.099190] ? filemap_range_has_page+0x3c0/0x3c0 [ 244.104031] ? __lock_acquire+0x7f5/0x5140 [ 244.108251] ? find_held_lock+0x36/0x1c0 [ 244.112304] ? debug_check_no_locks_freed+0x310/0x310 [ 244.117478] ? perf_trace_lock_acquire+0xe3/0x980 [ 244.122309] ? kasan_check_read+0x11/0x20 [ 244.126440] ? do_raw_spin_unlock+0x9e/0x2e0 [ 244.130832] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 244.135406] ? add_mm_counter_fast+0xd0/0xd0 [ 244.139796] ? perf_trace_lock+0x900/0x900 [ 244.144023] ? print_usage_bug+0xc0/0xc0 [ 244.148069] ? perf_trace_lock_acquire+0xe3/0x980 [ 244.152893] ? __handle_mm_fault+0x88c/0x40b0 [ 244.157374] ? perf_trace_lock+0x900/0x900 [ 244.161593] ? graph_lock+0x170/0x170 [ 244.165380] ? __lock_acquire+0x7f5/0x5140 [ 244.169599] ? print_usage_bug+0xc0/0xc0 [ 244.173645] ? print_usage_bug+0xc0/0xc0 [ 244.177696] ? debug_check_no_locks_freed+0x310/0x310 [ 244.182875] ? __lock_acquire+0x7f5/0x5140 [ 244.187096] ? __lock_acquire+0x7f5/0x5140 [ 244.191314] ? rcu_is_watching+0x85/0x140 [ 244.195454] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 244.200636] ? debug_check_no_locks_freed+0x310/0x310 [ 244.205809] ? perf_trace_lock+0x900/0x900 [ 244.210031] ? debug_check_no_locks_freed+0x310/0x310 [ 244.215206] ? kernel_text_address+0x79/0xf0 [ 244.219607] ? __unwind_start+0x166/0x330 [ 244.223742] ? __kernel_text_address+0xd/0x40 [ 244.228223] ? graph_lock+0x170/0x170 [ 244.232015] ? __save_stack_trace+0x7e/0xd0 [ 244.236329] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.241850] ? fsnotify+0x415/0x1100 [ 244.245551] ? fsnotify_first_mark+0x330/0x330 [ 244.250126] ? security_file_permission+0x1c6/0x240 [ 244.255133] ext4_file_read_iter+0x13c/0x180 [ 244.259528] aio_read+0x2a0/0x3a0 [ 244.262969] ? aio_write+0x5e0/0x5e0 [ 244.266673] ? lock_release+0xa10/0xa10 [ 244.270636] ? kasan_check_read+0x11/0x20 [ 244.274772] ? __might_sleep+0x95/0x190 [ 244.278734] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 244.283911] do_io_submit+0x1468/0x18c0 [ 244.287876] ? free_ioctx_users+0x6b0/0x6b0 [ 244.292199] ? __sb_end_write+0xac/0xe0 [ 244.296165] ? ksys_write+0x1a6/0x250 [ 244.299955] ? exit_aio+0x560/0x560 [ 244.303568] __x64_sys_io_submit+0x75/0xb0 [ 244.307794] ? __x64_sys_io_submit+0x75/0xb0 [ 244.312188] do_syscall_64+0x1b1/0x800 [ 244.316154] ? finish_task_switch+0x1ca/0x810 [ 244.320637] ? syscall_return_slowpath+0x5c0/0x5c0 [ 244.325558] ? syscall_return_slowpath+0x30f/0x5c0 [ 244.330479] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 244.335837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.340677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.345849] RIP: 0033:0x455329 [ 244.349027] RSP: 002b:00007f609312bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 244.356720] RAX: ffffffffffffffda RBX: 00007f609312c6d4 RCX: 0000000000455329 2018/04/19 08:14:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:31 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000191a001bed0000132100f404fffffd9872eff0cf", 0x17) [ 244.363970] RDX: 0000000020000080 RSI: 0000000000000001 RDI: 00007f60930db000 [ 244.371221] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 244.378471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 244.385722] R13: 000000000000018d R14: 00000000006f55d8 R15: 0000000000000001 2018/04/19 08:14:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x89f4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xbf) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000180)='attr/exec\x00') preadv(r3, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xe000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:31 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x187f, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:31 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002a1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:31 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8000000000000000, 0x52, r0, 0x0) 2018/04/19 08:14:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000) 2018/04/19 08:14:32 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7, 0x40000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/117) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x5) preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x4002], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000c1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:32 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x80000000000000, 0x52, r0, 0x0) 2018/04/19 08:14:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:32 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x4, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:32 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x9000000) 2018/04/19 08:14:32 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170024001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x2], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000, 0x52, r0, 0x0) 2018/04/19 08:14:32 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x187f, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='coredump_filter\x00') preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xffff0f00) 2018/04/19 08:14:32 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000f1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:32 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x4, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x20c], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x10a31e, 0x52, r0, 0x0) 2018/04/19 08:14:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:32 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001d1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_snmp6\x00') preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xa) 2018/04/19 08:14:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xe00000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8831, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:32 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0xf, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:32 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x31, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:32 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000201a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x1000}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000, 0x52, r0, 0x0) 2018/04/19 08:14:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x40020000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1300, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:32 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000171a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 2018/04/19 08:14:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0xffffffff, 0x1}, 'port0\x00', 0x90, 0x180000, 0x10000, 0x4, 0x2ce5, 0x7fff, 0xffffffff, 0x0, 0x4}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000001280)={0x1, 0x82f, 0x0, 'queue0\x00', 0x3fff800000}) r3 = syz_open_procfs(r0, &(0x7f0000000200)="6e65742f69705f76735f737461dd7300") preadv(r3, &(0x7f0000001240)=[{&(0x7f0000000240)=""/4096}], 0x0, 0x10401) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f0000000040)={0x7, 0x3000000000000000}) 2018/04/19 08:14:32 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa00000000000000, 0x52, r0, 0x0) 2018/04/19 08:14:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xeffe0000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:32 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8804, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) [ 245.628963] QAT: Invalid ioctl 2018/04/19 08:14:33 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170028001a001bed0000132100f404fffffd9872eff0cf", 0x17) [ 245.658663] QAT: Invalid ioctl 2018/04/19 08:14:33 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x880f, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x30a31e00000000, 0x52, r0, 0x0) 2018/04/19 08:14:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xf401], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 2018/04/19 08:14:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x8a280, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r2, &(0x7f0000000240)=""/236}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', r3}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) preadv(r4, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:33 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000031a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:33 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000000000000000, 0x52, r0, 0x0) 2018/04/19 08:14:33 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x880f, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8831, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x900], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:33 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000231a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') preadv(r0, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[0xfffffffffffffbff]}) 2018/04/19 08:14:33 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x40000000, 0x52, r0, 0x0) 2018/04/19 08:14:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1600) 2018/04/19 08:14:33 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8807, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:33 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17002e001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:33 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa000000, 0x52, r0, 0x0) 2018/04/19 08:14:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x1f4], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) 2018/04/19 08:14:33 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8808, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x700) 2018/04/19 08:14:33 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17001b001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xc0045877, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:33 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x2000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa00, 0x52, r0, 0x0) 2018/04/19 08:14:33 executing program 7: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x41) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000140)=0x17000) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs_stats\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) preadv(r1, &(0x7f0000b5cff8)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x1000, 0x0, 0x0, 0x0, @sint={0x9a4, 0x800}}]}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) r2 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) 2018/04/19 08:14:33 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8804, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xe00) 2018/04/19 08:14:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x900000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:33 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700f0001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:33 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffdef, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x700000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:34 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x30000) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x8, &(0x7f0000000840)=[{&(0x7f00000001c0)="20451325cb686a204fcb09beaa83c8896a700ebcee8405d4ee3f00b7297245ff6ee0da469809dcfc6104c87ea06e89defdea66f5c3892a14b1e999113abdddffed3711374f6506747f4f5658c6fb0b71eb29a33fbbea6a852742f189b03106772942f439b61c1d007d0a40dfde6d80d962a91c2ba0bb5bbd7d50854f54a9e0bf87276f02757d3d8ccaed155c51ec87b46a7c0475e079060b4e32928fba5ef65a17dda8c2420c8e521c2af557f9b093809a8c244433ae6dc615fc4e52767299fbd6a8060251ad59e08cbf56fcd64e2da8811ba62f8690e71c1999b6d1f330567ddd9efe67d80af4b375a3320f30cb7284136cc333354ea2ef", 0xf8, 0x6}, {&(0x7f00000002c0)="a4aa12cbf82c45ab90be022415ad90a9c8a8a87a0557dd4094081f8a8b01dd925d0f0361004bdfce7e09375ba6d170a60283dcaf9f23a71ced69e99835dc4c781b7ca3d0226fe541a537301c3118b4a0dcf78868f36acbb38a6d1732678aeb06f5072b9b507879a70accd585087573aae7894a3ff60572f560f25285ccf9283eaee84c06d749b1c1184a053e86b1", 0x8e, 0x2}, {&(0x7f0000000380)="cd538e27331d27d2a10e2b5001b09a8ba7a1629d1cffde5f0abcd52c2657a4c02288ce64ee4c21b10a888da65c30d7a104d1146465878ec7c15d4e3e5ffee87a23ab45e86ef4d73f1cf7d100c2", 0x4d, 0x1}, {&(0x7f0000000400)="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", 0xfc, 0x6}, {&(0x7f0000000500)="38e1ed9b6de358b42da2c106edae02696469f17f3e0b88d405c9f936e7ab28863d92076e1cfae8092326f86b24b0cc70c0cd33c8d9876e51d038be2af9b1207ebe452953e9e22eab1f53cf1b950fa8576788f402759091d342597a48e11c75ccaf96505b2185788536b68431b45a1a5774ece625a2", 0x75, 0x8}, {&(0x7f0000000580)="1654c445a329305d8218fbd775427742f26aff673ef363c421cda56ac393c17885370c7b88b453b1a8add8ea3b850409482dabfcb9db592cf750e5822ec07cf522e1dc791306e764b804614b8eb896d5894fd04202b3e4d408166ffe3eed882ab6430a9699f8c94a465c64d665ed90909e6cce04deb8f1235cb927a4f6cbc5b13d7e65a5ba27205ec5d04647da0b34f3ab0bc05ca09c0b83fbc7bee4094fb84962698acb0248c474ad556a31e079c5ec82044c9a74a8ee9c8ffcc25718e0c42ac97f881554ff878e911617e66c3a4a5c6a6fe21f1556fe612025eaa55468af600418f326", 0xe4, 0x7}, {&(0x7f0000000680)="ef7e7c25b5fe18e2153cddddc6b99ab0aa0d12595da786905f05eb3ce94efbfaf90a4af3dce8e8ddf2f6cc768044f2831c990f9e2e87c1b3a64d557c25e5245c230a253e74c9890650466fa6ff436baeaefc34fc848314bf957e6534c35fae0de087f71aa98b0ed7c503855bda6fb6c6d2fa48cb5424945c86a41c3bd4d5e615caff5eb627e068b3c2868ea5ce067d2e140e2cce", 0x94, 0x1}, {&(0x7f0000000740)="c5d4d3f590c36b4350c87ec04c105a3a70edc6711f33677776bc2ab81064a05d0e0d1a36ec04ff80d1e38d82acee36ad104418ad2e9c310d827912bfc526f0b206cb0b7f85850a4116f2d492ce56efaaf82b139da4984515cd9393c7f592f25757f7439acf047e9fd2f729b64db31a5d8a49a7d74aac1dc383461fece5c40a9b7a6fe535d59598b3313851c9cb365dd0c5b870b12782694bda82b106e199fd71b5119fd42ed5b2c7b9626e491cd15cfdb5de70275bb4edf74c7eb8bdaaa67b1df5", 0xc1, 0x2}], 0x0, &(0x7f0000000900)={[{@map_normal='map=normal', 0x2c}]}) ioctl$KDMKTONE(r0, 0x227e, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)="b8495f416772a42e2d85205dee48c1362b6adc97ca4ec5a5e48cb1b5e09a08b4f8cfff1429e6202b9cecbca3f9d211d72a4571c8604aa844df0b21e1bece94df9236acac9c570777adcf30b719c8b1c50ffbc7ec64eda37aa54396c19af7b25da0d52974f8140ff18eccd8854e42d6e9f6c086bd95d395069f325b15735ea27f184458bc274f13833d2b755c2ef5d3dea897b96ceb0d15dd0b9a5887f51354ee7e5373f56f80429479695d0d5a3511f7d33978d15d6cdea71135396b7414139512") 2018/04/19 08:14:34 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1ea33000, 0x52, r0, 0x0) 2018/04/19 08:14:34 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000e1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:34 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfe000000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x4) 2018/04/19 08:14:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:34 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffff4, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:34 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00005a8000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}, 0x66, r1}) 2018/04/19 08:14:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x9000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:34 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0xa00000000000000) 2018/04/19 08:14:34 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002c1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:34 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x1) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) 2018/04/19 08:14:34 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfcfdffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) 2018/04/19 08:14:34 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfe0000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:34 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="f0836d473c66b819008ec00f20c035000000200f22c0360f32b8010000000f01c10f08df79fa66b8c5000f00d0660f3882bb59b10000360f0b", 0x39}], 0x1, 0x1a, &(0x7f0000000040), 0x1000000000000053) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x20000) 2018/04/19 08:14:34 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002f1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:34 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfeffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:34 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x100000000000000) 2018/04/19 08:14:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xffffff7f], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x19000000) 2018/04/19 08:14:34 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170025001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:34 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x1000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:34 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3f00, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:34 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0xffffffff00000000) 2018/04/19 08:14:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xffffffff00000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:34 executing program 7: r0 = socket(0x10, 0x802, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) write(r0, &(0x7f0000fcf000)="240000001a0025f0006bb4040000001d020b00ff0010b500001000eb080002007fffe5b7", 0x24) 2018/04/19 08:14:34 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17001c001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:34 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x31, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 2018/04/19 08:14:34 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170005001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:35 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf00000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:35 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x10a31e) 2018/04/19 08:14:35 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000017000)={0xa, 0x4e24, 0x3, @loopback={0x0, 0x1}, 0x1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="3f11000000000000050200011a02000004010001030000000401ff05020178000100c2040000a2aa03659cdb57b5709d923c5e32c7d316b311ec542634b63aabf1fde9cbf3b02005867ec6e4976c2c8b8b62567d69060f889460d0e50aad52844cb7f142a20a35b4695ecbc359fbd4c4c6e721276af27aa5607b92b259a5164c0374260ebbf8c2ea50d43f9a056e2302000100000000"], 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x200, 0x3, 0xffffffff}) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)}}, {{&(0x7f0000000ac0)=@l2={0x1f}, 0xe, &(0x7f0000000d00), 0x0, &(0x7f00000035c0), 0x27e}}], 0x2, 0x4) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0x3d, &(0x7f0000000180)="4932a1f0315e7f44680c743297ecb194f6631b48544cb1d04c4601c83f68d68625df1b76c4b913c7b373c0f9187a072f68c3736110f73cb30cea11bc4a"}) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x991, 0x4, 0x8, 0x3f, 0x5}) 2018/04/19 08:14:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x29000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:35 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001e1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x8004000000000000) 2018/04/19 08:14:35 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x2000000000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:35 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfcfdffffffffffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='/exe\x00\x00\x00\x00\x00\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x6e, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x1, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x8100, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000ee7f2ba3f079c98b9cef226b6f6d98998aa90cd66256db4bba98a37313fda00e996643610eba6b7c0eec7a56848f62befcecf15dc260774f09f7c7e0e4654a4fe791f93dd903a36888327238ff44dde3eaeb9a0d54366919ecd4ae681b100a0b4e42c477b74dfe581f10277c6d81855be434bed90eb6b03bee6295a95b5cc8e0f29427a3c22f72df5a5f3da4"]) 2018/04/19 08:14:35 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x30a31e) 2018/04/19 08:14:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:35 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001f1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xeffe000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:35 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3100000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1d00) 2018/04/19 08:14:35 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x40000000) 2018/04/19 08:14:35 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x8000000000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:35 executing program 7: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f00000000c0)="784fbbe390b886cfcac0bad4531e43dddb6b54b8a5ee82244254eb26d479f5ccea9363a76f36cf3d696df3065ef210a40934f4713ef446872c3e18abdab0c5ea18002a8bcc91636dffc3794a1625f18130e7c2479f7c1579c0d4a3ff262a69f11d058064f4bd738000368bf2af4e5e3ab61f3d223ee5de467a99666fe3d15d67bc58d67a") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x60, 0x101402) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000923ff4)='/dev/rfkill\x00', 0x200000000004043, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000df00000094f328a0c5d455242b13545625d5fba2b38a553985c39a56050123cdc873db94c439ae0c316e407c40fb9b9b6ed3c816d9e5a15564544186826c627aa199b1842416cdd51685cfb9ee18fedb2e7d36b04e50949a0b0c6780b107c03059f307917723cd9ec4f59cee93dba9012d32ea5e71f76cddf4bea6c4c6b41b8e0ff5b5f5bc50842984473d1508538f53e25af1aff2a29f53a5a744bba4cc8cf35d48a6528e1595941051ff0ef40aba4a68ff1daa941251f0b85de1129b9d49ffaa24220359cc9ca95d1fe1e3528c4cb9e1c32d9c08717b36"]) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000b27000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)) 2018/04/19 08:14:35 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170029001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:35 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x1000000) 2018/04/19 08:14:35 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xeffdffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:35 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x752fcc8da90e0bde, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x80000000, 0x9}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000002c0)) 2018/04/19 08:14:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x2800000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:35 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002e1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x7) 2018/04/19 08:14:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:35 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x2, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:35 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x4000000) 2018/04/19 08:14:35 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000121a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x9], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:35 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffffffffffdfc, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:35 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0xa00) 2018/04/19 08:14:35 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000000000000, 0x42400) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x5, [0x3, 0x80000001, 0x3, 0x7, 0x100]}) sendmsg$nl_xfrm(r0, &(0x7f0000009fc8)={&(0x7f000000aff4)={0x10}, 0xc, &(0x7f000000f000)={&(0x7f0000006000)=ANY=[@ANYBLOB="2400000024000106000000000000000000000000080003000000000008000400000006ef"], 0x24}, 0x1}, 0x0) 2018/04/19 08:14:35 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000061a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 2018/04/19 08:14:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:35 executing program 7: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="220000001e0007ffe988160f09007fde0000f5eafeffa7001af2fe38050008800100", 0x22) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7ffd, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x4, 0x0, 0x10000, 0x200}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x1f, r2}) 2018/04/19 08:14:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xa00000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:36 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x800000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:36 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x30a31e00000000) 2018/04/19 08:14:36 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x31000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:36 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000111a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:36 executing program 7: unshare(0x8000000) r0 = mq_open(&(0x7f00000001c0)='-$\x00', 0x3f, 0xfffffffffffffffc, &(0x7f0000664fc0)={0x3, 0x5, 0x2, 0x0, 0x7dca, 0xffffffffffffffff}) mq_timedreceive(r0, &(0x7f0000000200)=""/164, 0xfffffffffffffc89, 0x0, 0x0) 2018/04/19 08:14:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x900) 2018/04/19 08:14:36 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffdfc, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:36 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001c1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001300)={0xffffffff}, 0x13f}}, 0x12) write$rdma_cm(r0, &(0x7f0000000080)=@notify={0xf, 0x8, 0xfa00, {r1}}, 0x10) 2018/04/19 08:14:36 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x4000000000000000) 2018/04/19 08:14:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x4002000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:36 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xeffdffffffffffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:36 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3f000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 2018/04/19 08:14:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:36 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170014001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001300)={0xffffffff}, 0x13f}}, 0x12) write$rdma_cm(r0, &(0x7f0000000080)=@notify={0xf, 0x8, 0xfa00, {r1}}, 0x10) 2018/04/19 08:14:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xc02000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:36 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x400000000000000) 2018/04/19 08:14:36 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170015001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:36 executing program 7: r0 = socket(0x10, 0x3, 0x8000000000000000) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7fc, 0x88000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0xfad, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000180)={0x4, r2}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00006ba000)={0x2, &(0x7f00006b1ff0)=[{0x20}, {0x6}]}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000001c0)={0x2, 0x4, 0xdbd, 0x10000, 0x995, 0xbd4}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000039486edcbf842c9ad9c885af90d0707e3e74d227f8efbe3d613082b2f39e20d9d9cbcd962cf5e95c1d5265c13df1b398de36506423b88322b59ab207ccfe13e09d0f288dfa22fdcb769f91a2b8e8025955545d16eb710629ac88fa7a7695efa5d6ae0dd7c7076175e417c9b3", @ANYRES16=r3, @ANYBLOB="010000000000000000000b000000"], 0x14}, 0x1}, 0x0) 2018/04/19 08:14:36 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x2000000) 2018/04/19 08:14:36 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x8000000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x7], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1e00) 2018/04/19 08:14:36 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x2) 2018/04/19 08:14:36 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170017001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:37 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfdfe, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:37 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfe, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xf8], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1600000000000000) 2018/04/19 08:14:37 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x1ea31000) 2018/04/19 08:14:37 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000241a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:37 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') readv(r1, &(0x7f00009a5f80)=[{&(0x7f0000004340)=""/4096, 0x1000}], 0x1) readv(r1, &(0x7f0000d3bff0)=[{&(0x7f00003ce000)=""/4096, 0x1000}], 0x1) r2 = semget(0x3, 0x3, 0x20) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f0000000100)=""/195) readv(r1, &(0x7f0000001200)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x3) readv(r1, &(0x7f0000002180)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) 2018/04/19 08:14:37 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000251a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:37 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffffffffffdef, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:37 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0xa) 2018/04/19 08:14:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xb4000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:37 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x2000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x200000f5, [0xd12, 0x6]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={@empty, 0x5d, r2}) write$binfmt_elf64(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x307d896, 0x7, 0x2, 0x200, 0x63, 0x2, 0x6, 0x8, 0x115, 0x40, 0x2e3, 0x2, 0x6, 0x38, 0x2, 0x81, 0x1, 0x4}, [{0x4, 0x5, 0x8, 0x5, 0x2, 0x20, 0x8, 0x80000000}, {0x70000000, 0x1, 0x3, 0x8, 0x401, 0x5, 0xffffffffffffff34, 0xa87e}], "06d799d8acfdc375b27b4b0b77bebdc54eec8a2bdf526b16165ddd1a6fb9e98415db91f4f138f92bc41e2dcc5ba071fde7f5f388b40f54180980ef3450b35ac1d6c4f2be9a45a5c2d4961ad26b15b8893b9c6b118a6f9c0b7e2de2d7ed57e6de2d798512c2d1abfd4349ae1798", [[], []]}, 0x31d) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)={0x18, 0x27, 0x1ff307543bf68163, 0x0, 0x0, {0x100b}, [@nested={0x4, 0x5}]}, 0x18}, 0x1}, 0x0) 2018/04/19 08:14:37 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000151a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) 2018/04/19 08:14:37 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x200000000000000) 2018/04/19 08:14:37 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x400000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:37 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17000b001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xf8000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:37 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x560, 0x42001) ioctl$TIOCCBRK(r0, 0x5428) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)=""/7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000180)) socket$l2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r2) 2018/04/19 08:14:37 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x400000000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 2018/04/19 08:14:37 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17002c001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:37 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffe00, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:37 executing program 7: r0 = socket$inet(0x2, 0x801, 0x400) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x390, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x501) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$int_in(r0, 0x60039d1060858e93, &(0x7f0000000140)=0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @rand_addr=0x2}, {0x307, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x8, {0x2, 0x4e20, @loopback=0x7f000001}, 'ip6gretap0\x00'}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x410000, 0x0) syz_open_pts(r1, 0x100) 2018/04/19 08:14:37 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0xa000000) 2018/04/19 08:14:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xe00], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1a00) 2018/04/19 08:14:37 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170009001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:37 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:38 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfefdffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:38 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1, 0x80000) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000380)=""/203) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000080)={0x2, 0x7, 0x3, 0xa3, 0x7, 0x80000001}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f17000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000000005420, &(0x7f0000000000)) 2018/04/19 08:14:38 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x4000) 2018/04/19 08:14:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x29], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:38 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170008001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1e) 2018/04/19 08:14:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:38 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xffffffff000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:38 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3100, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:38 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x4) 2018/04/19 08:14:38 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170018001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:38 executing program 7: r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x7) bind$unix(r2, &(0x7f000000d000)=@abs={0x1}, 0x8) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x1}, 0xffffffffffffff12) 2018/04/19 08:14:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x119ba832], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000) 2018/04/19 08:14:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b17ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000357000)='./file0\x00', 0x0, 0x0) r1 = accept$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'bpq0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}}) r2 = fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) fcntl$dupfd(r0, 0x280000000000402, r2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000c47fec)={0x2, 0x4, 0x6879, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x2c) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="00564e1bb801db6ca919e519b3b774e50ebe8cd914efc9aa200b6276d78a2885adec80a4eb62c22a73e882c8d939522ddcb8b505bac7688d7a455ca1a3eccc326c48ae6abb599fbe3ba8f05099f71995dee02627a80b3c36d32a26ecdfd3eb3d8e4576da446c5db8c2a73468278a15ace4710209454a71a2b862b16e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x1c) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x694d8f9c, 0x800) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x7ff, 0x2, 0xef37}, &(0x7f0000000140)=0x10) 2018/04/19 08:14:38 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000131a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:38 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x1ea33000) 2018/04/19 08:14:38 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfeffffffffffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x28000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:38 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3f00000000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:38 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170026001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000) 2018/04/19 08:14:38 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00009f5000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000690000)={0x1c, 0x9, 0x4, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/19 08:14:38 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x10a31e00000000) 2018/04/19 08:14:38 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170013001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:38 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:38 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x8000000000000000) 2018/04/19 08:14:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xb4], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1500000000000000) 2018/04/19 08:14:38 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf0ffffff0f0000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:38 executing program 7: capset(&(0x7f0000da9ff8)={0x399f1336}, &(0x7f0000001fe8)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0/file0\x00', 0x540000000000000, 0x45, &(0x7f00000013c0), 0x80, &(0x7f0000001880)=ANY=[@ANYBLOB='d,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1a5, 0x80) umount2(&(0x7f0000aaaff2)='./file0/file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000001480)='hfs\x00', &(0x7f00000014c0)='./file0/file0\x00', 0x80000001, 0x4, &(0x7f0000001780)=[{&(0x7f0000001500)="a276bc0f204c8285d3a18104d424d4acc1e9a178dcc39d04718f1365ecd2f3e2daa04efa8643a1d3966bd67be3dc4ee3afb4b9b3bd5b35f399c0ba4fae39344fdd4269b3cebe2ce701d8d08e9e080a5bdc191fc0ad56", 0x56, 0x23}, {&(0x7f0000001580)="de59b2c87a30d8531e513a21ef5447d87b0e21f5ad0c1863e58037d818a5b4b461f391cf0194a9ce7ddbae2708afce60c77f5777f9d3527a8945255224094b9119b1094c39cc4b54143a78fbfb25328dafce0437d07d0a", 0x57}, {&(0x7f0000001600)="1e9e65501fcabc74f718823c2f142cc9fb2c2e34da0eca9cca5aa5ff6087f452cde1bdde4cb869432a9cd9112d6c9f6dcc5e76d204267ac03e007a7262e8944c93623b6610ca873cca82d1495b7179ca1d8d391e4851357b90463d9c0489ee02ddddb0e4cf7501525d62764277fa221c68ad34bb7ef87a20d55a98df381a648903360c9a49b3beea12c7d10568fa77c260d1af0fe0513f3901172527b2f2117f7c740cb5c7df6c89580e369d64371e70530dc0db276e8f3f9c3fea5b", 0xbc, 0x7fff}, {&(0x7f00000016c0)="f52668c1327a3a76dd082734bac7298afd3b4774bf5c2a101530dadc6422222eb63e56ae38c2b755a0c6c6e77ca5b3b0c764734ae127b2d0d31d79454c953bf9df6f9c0ba2637d4688781327b56f8cccc7dc313a73bbdd5781b045b66426c73be06cac80373e6130d81f6d5a7196c91c90af86c08cd6552a9ee138c9ac7d27de56e28eb35dc439530f9488e3a71c2b48135e894b153dadac87762e8926e827a81e95efef71c7cdb26e", 0xa9}], 0x4713c77c65b9b177, &(0x7f0000001800)=ANY=[@ANYBLOB="66696c655f756d61736b3d3331372c696f636861727365743d69736f383835392d342c000037393c3d3f2c696f636861727365743d6d61637475726b6973682c736573000000043d367f2c0000"]) 2018/04/19 08:14:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:38 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17000a001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:38 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfefdffffffffffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:38 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000271a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:38 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x80000000000000) 2018/04/19 08:14:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xf800], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:38 executing program 7: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bcsh0\x00', {0x2, 0x4e21, @multicast1=0xe0000001}}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) msync(&(0x7f000081d000/0x4000)=nil, 0x4000, 0x0) 2018/04/19 08:14:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1b000000) 2018/04/19 08:14:38 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xffff0300, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000b1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:39 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3100, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x800000) 2018/04/19 08:14:39 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000ff1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:39 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffd0000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 7: r0 = socket(0x11, 0x4000000000080003, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x1f, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r1 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1', "5f3c583e475a531f1469f2be5d70cdca43334b9757a1aae5cc7834f211e056e8d29f9598ea9d33ea5651f30585192e7803de47dc5e23343111b33191e17f9a2fe892e45dbf19d85626c4f6f6ca9c071794f2e351921928876022489103ddcaa77aa71268a53c04246d7ddd8722f45d775ab625912c07436ec0db6c3fb0ac7bf2d07be30d9078ed50fa60d2fdcd067084964f235e7b2506a5954b8105f4cfbba50b9e230e534ee8df851d17a7"}, 0xb0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x10000, 0x422000) 2018/04/19 08:14:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xeffe], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) 2018/04/19 08:14:39 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) r2 = shmget(0x0, 0x2000, 0x1482, &(0x7f0000001000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) 2018/04/19 08:14:39 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17002d001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:39 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfe00, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17000d001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:39 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3f000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x50000000000000, 0xc0040) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000001c0)=0xffffffffffff22d3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000080)={{0x7, 0x3f, 0xffffffff, 0xd60, 0x4, 0x5}, 0x401, 0x4, 0xffffffffffffff22}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) 2018/04/19 08:14:39 executing program 7: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x8040) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0xfe}, 0x7) r0 = socket(0x11, 0x4000000000080003, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) shmget$private(0x0, 0x4000, 0x11, &(0x7f0000ffc000/0x4000)=nil) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) 2018/04/19 08:14:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x2900000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1800) 2018/04/19 08:14:39 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170027001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:39 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x31, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf00000000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x35, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000fe1fef)='/selinux/enforce\x00', 0x200001, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000d59000)={0x0, 0x9, 0x23c2, 0x10061636}, &(0x7f0000bdbffc)=0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00005a4000)={r0, 0x0, 0x1, 0x1, &(0x7f00003ed000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r2, 0x400, 0x3) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000200)=0xfffffffffffffde0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f000033a000)=@assoc_value={r1, 0x20}, 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x101, 0x7, 0x20, &(0x7f0000a18000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000a1fffc)=r1, 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x1a000, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f000022aff4)='/dev/ashmem\x00', 0x40000222500, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f00001f8000)={0x2378, &(0x7f00006b6000)=[{}, {}, {0x0}, {}, {}]}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000245000)=""/21, &(0x7f0000c54ffc)=0x15) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000516000)={r5, 0x19}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000002c0)={0x7ff, 0x0, 0x10000, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f0000000300)={0x3, r6, 0x0, 0x4}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x9}, &(0x7f0000000140)=0x8) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ee7000)='/dev/rfkill\x00', 0x200000, 0x0) sysinfo(&(0x7f0000ba8000)=""/218) setsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000040)=0x7, 0x4) getpeername$unix(r7, &(0x7f0000234ff8)=@abs, &(0x7f0000428ffc)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00002c5ffc)=0x80, 0x4) chroot(&(0x7f00000001c0)='./file0\x00') socket$can_bcm(0x1d, 0x2, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f00005d9ff7)='/dev/vcs\x00', 0x4000, 0x0) setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f00008d6000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x1, 0x800000, 0x7}, 0xc) setsockopt$inet6_int(r4, 0x29, 0xc9, &(0x7f0000c3a000), 0x4) 2018/04/19 08:14:39 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x501900, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400000000000002) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x3f, 0x2000000000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:39 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfefd, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x1000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfffff) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x18) 2018/04/19 08:14:39 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170006001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:39 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170002001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:39 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x7000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:39 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001040)={{0x108, 0x0, 0x8000, 0x28f, 0x3c7, 0x4, 0x81, 0x5}, "2d7613224efd25606051fc0304e6f71ae82cc3571605e3feb7d9d18c00531336c7b6d8d123d081813e3fb974aee04172a9eff878fb9abf05532a9dc4a167e72d08862d06daa615cf2b08b2b7742b3137eb6af6e7ecc724f2cae002ca6090b5e4bdb6213ab521622ce213299aa42c8a39b1cb2a394005cb7281b1e2c637a92d2183ce80db95a347e1a48178b3ec155a02bd63c80c30abb87e99ca75c15bca0767d70b4d2f20666ba6cf5dffb7defc273e2a2ccb41529299915053e784a9b46cfd2d4d3e1ded4112eaf85ca23c7fd4d2be28c1515e0989421a3511fbb659139c78867727f1c1c855c73d351445da760e655da133a71059b32bfec514aba74b046f37df2871336ec19ffbc9d1229b8ccc73dcd75e29ed14e78716cb89cc44815e259cb52a79a58d2936d5c107caa0d7553bf2b8bc2f7bd3f2dcdecf827136081c8334cd96058cbea7387aa75e3e4b7ce496f9581aa6777a551047d314a832cd696b34efecee4ad472fc2206d3158acf43f2c681fd5c90940b19b9f5d4db0141579c6c0ed2bd98a619e9fb2db6d0e695b499dc0cf585820302f1160b8938b0a10bf09b0047f8ff506ad987a665d96dc4a932afc7c922a9d9c0d2e89bea00e793e7178522c7b7cae877ba0dc24259d41b193a9cca599e3b3eba1c17640ca660ca3193dd37b9094f1773c6dc2864289c440b5020fb4d4b0da72c97ebfa5fbea666b4d616fb34ed56bda09825d1a93ee12b84737e5c9958b84f32358bc8bf7a4ea25b8bd69764c99435b7ee170f5ffaec01bf5c47926b399cd77bf0a833f36049494e4d54863028fca096118f6a255704e524503837461547a7003d9ad88bde6e810e110c0d7b69a39ddab56243d6198e29e75198f74603f32ed22ad6f392d3689e050ba99e53202c11164959736a83bb43b3008b6587cd5857ac6d1399f25738cec2bc200912d02c97d32dfac9c2fd64e2d9f65b91e833c0234234b98a70c56923a867e9d1017e440c06a2e612368e2d71cc98e3b05b07bc965bf96bef897a02023d9c081ca5ef4282205f9e9017f8bbbbcceef7a543eab407950d9151eac0f3a3abe25c6d2b6db2784dfbf5ebb23dbacea5de03e23c8680f04ef1ec0c5553f34e29b2c1bd798699cb392a922d043e4e2160844c27f56d53d64fecff13c6b80d887a46d46e832c02f29eb925bc78ced658afabef882e4181afcb94d7a416cca208555c3061a97a840946fc076bfa266a3af4ebe96b36687d8b24f181ec101b9aec4e8407c271eb911c65a8ebddbe33aabdd9f7c366cdcff41feef419dbe4a18cd8c7e8ce226a138bff8f271472d83dd41c64bc153baf8a4b81a81a000e71f4cacd4e0de5487f32073320653b8d9ffa94ac166ee9e62d92124f25bf98bbed37cf840e39a7b56ef3aed67f572621c0700fb69b19a8fea228f34474366a28c9c89ac6ab68ef3e9e433a1fe01db3f62a58849dd65baa2590d446724b3697dfeb99d1a1e52a01ca9a076ff8aa5cb42e662a6e0c89c67c1b5cb4c553e8518e9ed3650980b43ebb05314584c69d2b15643c62fc18d89a4121ba90d42e8989b3857a1f358a2fc6a7237584fe2248f06680e3f8f8277cd3b8c9b962cab63ed1c4c6e648c9c6c6cb824d34cb9e34793b00e0e6fc1d5a49961672fc0dc20c0d0ddbdf3d087df80a2e7ef38eca6f8b317e5e3e32e987b028ff1f1538b2ba8c3d2a009f5146bee32e71ca90a4532726360a5ed728001eb21ee6052c4b7361da5df659ce6108999ab7bf0d3c075aa428997f32033fa97b8384999e2e83c64b5a4393f01879f83ed173bc22bbcecec0c6716e002c252dab74bc06f9d7725f667d549aa723bb937c2d04bf2caca4d4e04d153148cd6d180b9e3ac8da5dd1569ecbf1154c3da9682caba891e3210a9e36e5b387e1a6978e20d56eace3fff0e54c1ad42e7d00252f06a8fb35086c8e6c08212a7f7465c335edda6932a9e4aaf5754d1334fdbcd3d64722d93d913150522d04e1d0ffc90435692a4b12f278bb88a2ed21794fc698f38497a01d04999effff61c533ca53ae14612da4f9b6ac34107a3b1f0823750bd5f1dc0c5860c88fbcbb01894495fac6bc81b3ce17dd00f921de4b17b7f66ef2c3ec6d3625a97617dc90c68249d417010bc573917a26db0bfb7a931db25a17a4cb81436b53bb08420ec6da825706c8564d14a38e88f7d2451a4f68e1727d7121f0faf981a24f790a7a9287e38f28471e5040929beea55a3eb624060cadec35053d9c19d7e17e48507f2d1d2217370cadb81fc8c451908549fde2aa1c1dafaa6f3255cc3d5dea82422a052d378724a759a9cddc03a55a9941d5df5358c25e5fff94d6d3046bfd43eb1aee20a9c76363e641e2d0e85558ede515a616556f6fd32f0eb51e68061823bd404e401937de8b29950b5d32e23fbf29722e89ea78b84572e49f90f34b1d2c313232c22c8688066d03fd6db0c5221a2a5973f9d34d0a7c439083477e516512cc975657871897dc6b0f1d36034c98a684dae99dd45e28111f7e04d0a10f6eb4a57b86ab117cf18d002c7caa438a68f3bafd9b030582f7570f1531431458199b256d4085734049a57140a219e087ce9aed6b54ef7e3c5d894fb7eaf852a92aacb4e3dfbd853fb12cdf81c021b37510010f9cda71b11330b104ec8a9285e70d5f5309c454191c4ad5d81aa612d337355de1a9a859c8dfabe03bd6d6d19c2f51fe6d2223f485a090cc780b32119cdfc8cf9a89e5df36f5040ccc13ed8b62cb77638b1cfa599d3716076250e423ca4c0608090a5a236e973803bb303d07923b4fce2c329459085fde7b7a60be09c39d30c822a67f45f72a425bdcb425d6ab41f6726d585d54cad2170fb1adbace5a71c9219a6e8578d1d7de30d0efa6be5308e636a5843caed19eb1d72681aca9ca58bba2c420b6a6b334f1fc62f2098903a453f7b075fe24489a7dbe1491c8ff5bf25912bd04b9573d69af3b685eadd93f89fde6777d32d73852535f94152b7c73788435a82e76fd70e05755f761c42c746f7e5210d5765dc8b7dc86ff198f181a7db95379a372a6c7968e6bc5d31427b422b03fd773318be9f027ca317b6972bf428990b5912830a272d6950914250af21a28194fc7a708f76e02b2c4ebdcb2ddf251c1616ec716774ce28639b71c2281b5ce49330f3892ab933e92ad880c40adedd490a30b86ec1b67bfde105133c374c0e01ce210c7290c5a8e299dbf840e2c042edc87136eb2c43aa5461e67cc23d572958761e9ae9fafaf6208c5dc4dd8a093c710a9d30d27278ae424bbc511a0f5e884edd5f6e3e32d3b3b5e006060b94e25be7d51246fd1725317c14f97d94650c10425aa135c416fd5461a4a8694b126d83082c1601b0635616473de99e6cc8be12d29b12fda8779626d5882740c07b7dd63384fabd97be0c00fec9b305ca4713419dfc0b928e5e6103c00ac68edf4af83bd9eab2b63afc7467976821c74bb1beaee3e74954fae6f539eb517ca36d880021c37b52938591c271f069f4e7e619aea51a5cb25c3e133c121baa1dfc9f059b712b0f2db68007156747a68845aa870ffeb41b3c6000b8cab3337e94362d0a33d8f7aa5c8effd1e11665a3d8b4be6daa467baf9826d0beadb410797028b966fdc7a9e92bc0c1d36e8b21d3802e3e013f061f3423e2d168606065e8579ced43d25b0a794553cda0d6f97181326360cfb45972bd5ae783aa48963c96f096633b71ae29e942f8b2d184e05170af144e8b90c0fd506fe0eeca4e7398af48a42b0254784f24a68d68dbc6b5ed04b8bfd0fab0ad514ae4ed021165e7f237d6430b796cb46d6e37911664f954ca45e5a412d7eac6a341bdd039c011ba60e8cad98e734a020976dea92c08ec7a99517dbf6aa48fe542c0d2c870110f8ae1f1f2f6799de543dcb483dcb8a77c12de68db5077e130af6e924236751f19821a5f6d1f71aeafa8fa0d3dcf6a27d63413d4c0e4d55eacb56de424dd0e66b20c42b46193e28d92c65c928c199e557cc617abfb4240d4c3e25adaeca4eb7b0757a5fa6454390cde78105ffc82a487d46e416b0b83d43951d4193b75b7e48359b9934d7983463102a211f3f43613d754ad081303b2d3ba54ca2448743cf3bdc7b56caf357cae57b811db8a914253677890cf44f062a3798a9355ae82d4b03c9f7ca5e30ab444c35698726381e2042742e1fcebb57ab81799af1f1e93fbb813b96af972bf30b6705af2e2c9436e339fe658f84a7727a24c961c9d1c747720c22fc202b0a23e3ad88ab37a4d8e6a867c220e44a507cd3d9cdf733fe857122b29ab3c1d94f7aaab601d0a8a21587d32f986a0fa3c16a8d1204d9380336238a66f51b18580782e7cd5707030b087ba6ec0e8a276379c47bd8132ad130eeeca2cca77886035a88a47dc45eee188916cbc00e25efe3e300eeb48fb92934cbffd4b7f4b07dcd591289e0802598e75ba7589d5a9bf6d7c0237f0f0778e41aa1ac4f4b18b6526783bbd29c1720eb3400946005248e998fcdd638ddd5dc755ff6d62aab3c7de7916e1ddb675c4950c9af25085973600fdd8467b74091cd955dd4b159c4ccd7f78fd8218a629c5b398520756dd3d040adb9886fdbc5741484352aa323882137ef830fea239f6c4d5314399dd42e7781cd6bb607338eb85dc0e6f2a808bfc6424362ae80346aa413ce177896d77247e758203490a729636c05c47f1924d44a3e789c505a51c2b22471a6eec8e3192e9fb13034fe2d30ccac331038907cb7e5bdaa4792e15d5a2c51f6196eba76198ed45f14b96106b788bb48123bf068bc592fcae5b5da1ad9ae1f5afd10c2a1511a36eecadca76873acd604db352c8dc3be1ec73cf0fe4c583b6d410ddc3b91a6187a31111ba7c81fdb3dce99ff4e4b117a9fee3fd4116705c557e17428211fa8f12094984aab6171859edc08242e6e3df50d95e775b9cbc86ab2ecd4a136eece0f9c5928ca055c30af3e9fc0c9efb1494e270ba0115255574791cc2e494fda9b112e2b3f8a3921bc49a1a73c4185a19d2641e0fe17fb5368f83f83f80412ea7cede610feb95a01ad049604b85733181208f77e84133ff8add8929899fb6352223ad9c3200ecb7e1a247cf638ed60d406164fcabb5317acb5db03510bf6e0f83fd8ca07fac366ba2a52604f7b8a916c11cd50aeaf8f64170888315d5e9a0f1f002769d38c4f43ed1eb2e72390209b29976c338ff54cc375c07aafe20c56dc199c4ee58241016cd65f830c9e30f97e08381f9e7e8b9ac0258c7dc95557b0ca0f5a366982d23fc2c5f7beef8bad73fdd814596feeedabd38ce1961e8537af7ccbc8d9ebe4550af4c8d2414fcd8e81f08107856204dce39da274509b72a0552af5d5d8e8b6d97749302b34bcf1c30573fb1618f9c0995d65a17e05996a57624ade14fe351e6465cf3be5358e9d58a95dd7b654e575e91f43bc9d083e1c252dc407e853b5b106f3ef056cc15dc7c33d1feb74592a5dd30a316aeb68779130d6c28f4b87e3ba81c386a664129be943b3fe9fbe811b2cb67af7d05f3e2077c8126203b4f82670e240378d7b748df5dd77bee36a3fa00524e6a105a043248d125804b458361e63c3f479f3416daebf1b9cd393fe59f82d14225ec703b079250ceb6f98960d7fb337eda178ae48c6dc914818876889014e38ad599b741719ed9c70154ef34b4739ca95134738b89af9ba643c3f8ae6a028d554564c0440835ca9c912979982b6731f84acbc7db11f3572efa03c6f74c6278aeadf4ff68216301ae4251bed37ac910a45bed6271ce2", [[], [], []]}, 0x1320) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x240], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xfffff) 2018/04/19 08:14:39 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x4000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170021001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffe0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:40 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfe, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000130a01000000000000000000000000000c00020050a0165dd38b8cc3c81c783f7d7d5c0f61a04f1cad20653ce948ff8a4424fe76e400612ce49757b8f57b", @ANYRES32=0x0], 0x20}, 0x1}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xc, 0x140) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="274099a5de5cbfd2d1cc3bfc8ef11d016de26574387c955bc4cb8115ad10") 2018/04/19 08:14:40 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x101000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) 2018/04/19 08:14:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:40 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000261a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:40 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffffffffffe00, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x200000003) 2018/04/19 08:14:40 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000040)="e8f0d15886b03f83925745fc083e4da9e009e744eef30b850cc074e4e1bb04d3e79799c30a9e1d6e704ffa37392afb2fbbf61cdf3a21ebe2b3227c5d0c50a0c64c76c07e776a7ccdf2d65473ec9b5ea5394d607f7dae8d8fc3aec9df66f03e8cf2fcefd316fc612a6463350e50476df523c077ce159b5a1ccaef72d93aec38711a29e03bf7153b58c77e4dc840e4d5f7", 0x90) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x12240, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x4, 0x40000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0xbc) 2018/04/19 08:14:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:40 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x1000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000211a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:40 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0xfd, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000480)={0x4, 0x0, 'client0\x00', 0x0, "aa832238e4660d0d", "cae01e4303c113ef65bc291d3a5d7a722d0bcba701d9b7daa02fcf45beb9b6fb", 0x200, 0x9}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000040)) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000540)={0x5, 0xecd4, 0x4}) 2018/04/19 08:14:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x3) 2018/04/19 08:14:40 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf00, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfbffffff00000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 7: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffff9c}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/160) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[0x9, 0x20, 0xa4ef, 0x2, 0x3]}) syz_extract_tcp_res(&(0x7f00000001c0), 0x0, 0x7f) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x14200, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x400000, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000280)={0x191f, 0x5, 0x100, 0x3ff, 0x8, 0x4, 0x2, 0x20, 0xa18b, 0x6f5, 0x4612, 0x8}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000002c0)=""/91) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000340)={0x57, 0x6, 0x81, {0x7, 0xffff}, {0x3, 0x8000}, @const={0x401, {0x0, 0x8, 0x15, 0x101}}}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000380)=""/99) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000480)={{0xfff, 0x4, 0xbe9e, 0x0, "eb9d60c5d5f1535adb42d0deb5469a93a1278f604be614bae0e5610afbfb53a1da7bcbb58210f9cea3cbde2e", 0x7}, 0x0, 0x0, 0x57b, r3, 0xa5, 0x2e, "f76d8b951dee4014233636e30d53da5ebca8583733764addeeb839f9fb424f3aea05a4b1ed7755af786a8a7b521c2d7a5661f60b161d09313ebc64be53bee32d", &(0x7f0000000440)='\x00', 0x1, [], [0x8, 0x0, 0x7, 0xcfd]}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000005c0)=""/4096) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000015c0)={0x4, 0x9, 0x3ff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000019c0)={0x6, &(0x7f0000001640)=[{}, {}, {}, {}, {}, {}]}) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000001a00)=""/4096) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002a00)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000002a40)={@empty, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x1a}, 0x417c2673, 0x6, 0x1, 0x100, 0x2, 0x2000000, r4}) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000002ac0)=""/101) fchmod(r0, 0x28) pwrite64(r2, &(0x7f0000002b40)="73413c8c402b38a5b9b58d2f8b4f7bc1b73fe5b4e62cf7697bf279915f88cc35f56830fef83bc93a107723dd1afa70de3499a50a7f3ef40cfea984a8bd358cbdea6984c707967dd4", 0x48, 0x0) ioctl$TIOCCBRK(r2, 0x5428) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$int_out(r0, 0x5460, &(0x7f0000002bc0)) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000002c00)={0x4, 0x96, "9885cbdea811ee6267f132278d3458881c752b9eecc102f5abda44b34131401ee6e662aec4c6e98acf246e05a413810186f6f4210c5c75c5f5d7ddb94269c450b22ede81c641caa93041af9b8f3cd12ac935aff7f53a405a851f3d2b2a06adeec90d310842e3825df214120ef9070df6b73aae21e8d4e163f530f91a396ab4c9389b364a4e94a8b20b177fc276b00d2b10bc874ee3e1"}) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000002cc0)={'\x00', @ifru_names='bond0\x00'}) ioperm(0x5, 0x8, 0xf2) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000002d00)=0x7ff) 2018/04/19 08:14:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xb40000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:40 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700c00e1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:40 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xe8030000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:40 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-twofish-3way)\x00'}, 0x58) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x800) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000040)=""/108) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) 2018/04/19 08:14:40 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x4, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xffff0f0000000000) 2018/04/19 08:14:40 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x8, 0x1f, 0x8, 0x5, 0x1, 0x6}) openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000000c0)=""/217) 2018/04/19 08:14:40 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfdfc, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:40 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17002b001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:40 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x2, 0x42400) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000500)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000480)=&(0x7f0000000440)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000540)='memory.swap.current\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000580)=""/156) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0xa04, 0x5, &(0x7f0000000300)=[{&(0x7f00000000c0)="0f0bb4e63ec638cd0d8a747a08ef5191840e2ed2f7621ec74daeaaf34df767161d948c5eebabcc47a1b8fc242d41ee3d4c2d55d072197c3a29cd1aad13116906930313c7c05e7d9e7228a5a5c3d4d0650f2c3f39", 0x54, 0x2}, {&(0x7f0000000140)="5025a1af6a333c027993ae62839d3d8104416b2f026db59b539487f4186de84b3cc73adbc90712a10c798c569f6e7929801e8dd4829d3584d1594fd681733f813cbc73e84d0212ecf3e4d98a9d3000824c4070a7b644232a7b", 0x59, 0x3ff}, {&(0x7f00000001c0)="674936eb9ec6c0685936eb382faf585881012397befec4678474282f47c0e824ee27d2a934b965b185bc96ef2f50", 0x2e, 0x1}, {&(0x7f0000000200)="7e8d4ada7f01e7db3d7ed5eb445c521079f6c6aa2168bc770f9e9a0fa2e43ec138f54b7a28ad655122ac5c80f690390936b6a0fb657f896d648523d5c6d5ef86ece6a568aef10840eb78395f94468f807cd57813a87e805a6bb69d", 0x5b, 0x9}, {&(0x7f0000000280)="e5a15a23261621d6e7b974a3334fe5e37dc92ae1beb288e3f7330ddc3556821fab9cb806fb903400b42c20a8d7001d580c3129f726a2da28e98d21320a12a9c53187acb9ef37dac1a75d8f8d2cb4c4c36715a2155c10ea70d8fcab5af6d063c02f1db79ae6b34278d12f5191ff2a5eb1d936964494798df9e1102291683e", 0x7e, 0xffff}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="74696d655f6f66667365743d39313f003130353d2c636865636b3d72046c617865642c747b3d5554432c646f733170666c6f7070792c646d615e6b3d3634332c00"]) 2018/04/19 08:14:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x32a89b11], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:40 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x62000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000001340)={{0x4, 0x3f, 0x5, 0xe0, 0x9}, 0x0, 0x6, 0x3ff, 0x1, 0x8, "6dfd81416d09dda0a1caa3e6911494b603f71e7eb2d28abeafb18da8e541de8e15b48e75e26e9ca3ba362d6f8bdea4f7f05675f1d6ec21325d5df3531992419ff09df7ce51b54a8083685a558389de53366c181bda001531eff878528b4e5ec5dbf96e391ed1de1ce7aec5e6c9c59635dba668bcf19e36c7d13bc2e76c3835ee"}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001780)={0x10}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB="20f1ffffffffffff2b"], 0x1}, 0x1}, 0x0) process_vm_writev(0x0, &(0x7f0000001100)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=[{&(0x7f0000000040)=""/133, 0x85}, {&(0x7f0000001280)=""/164, 0xa4}, {&(0x7f0000001140)=""/187, 0xbb}, {&(0x7f0000001400)=""/83, 0x33}, {&(0x7f0000001480)=""/8, 0x8}, {&(0x7f00000014c0)=""/177, 0xb1}, {&(0x7f0000001580)=""/161, 0x3de}, {&(0x7f0000001640)=""/3, 0x3}, {&(0x7f0000001200)=""/114, 0x72}], 0x223, 0x0) 2018/04/19 08:14:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 2018/04/19 08:14:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:41 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000f01a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:41 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfdef, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:41 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x200000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xa000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:41 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x101002) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x7}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x9, 0x9, 0x4}) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/dsp#\x00'}, {0x20}, {0x20, '/dev/dsp#\x00'}, {0x20, '/dev/dsp#\x00'}, {0x20, 'nodev-'}], 0xa, "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"}, 0x1034) 2018/04/19 08:14:41 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x402880, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001040)=""/4096) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1300) 2018/04/19 08:14:41 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170022001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:41 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffd, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:41 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x44000, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x5, 0x200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xc02], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:41 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170011001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 2018/04/19 08:14:41 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3100000000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:41 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfcfd, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x2800], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:41 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000091a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:42 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x4100) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0x9) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xfffffffffffffff9, 0x4080) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0x9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x80100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000000)) 2018/04/19 08:14:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x17) 2018/04/19 08:14:42 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170039041a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:42 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffffb, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xe], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:42 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x100000000000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:42 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f91ff8)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000280)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000580)='fuse.', 0x0, &(0x7f0000000500)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x5) 2018/04/19 08:14:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:42 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170023001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10800003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3ff, 0x20}}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10, {0x2, 0x4e23, @loopback=0x7f000001}, 'team0\x00'}) 2018/04/19 08:14:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xf800000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:42 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x100000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:42 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f000098cfe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x6c, &(0x7f0000000680)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000740)=0x98) 2018/04/19 08:14:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x19) 2018/04/19 08:14:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:44 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170019001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:44 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x4000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:44 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x20000000, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x2000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:44 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000271000)={0x0, 0x70, 0x4a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)) listen(0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000015c0)={0x0, 0x7fff}, 0x14) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1187252ad3c2ee7fedb48c4bf65fcfdc9f78f6ccec9fbb2a"]}, 0x1}, 0x0) mremap(&(0x7f0000a95000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fchmodat(0xffffffffffffffff, &(0x7f000058f000)='./file0\x00', 0x0) mprotect(&(0x7f000072d000/0x2000)=nil, 0x2000, 0x1000008) mremap(&(0x7f0000676000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000590000/0x4000)=nil) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f00000019c0)=ANY=[@ANYBLOB="200042000300000028e4ed"]}) 2018/04/19 08:14:44 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) 2018/04/19 08:14:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xa00) 2018/04/19 08:14:44 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000ffffffffffff8847ff0000f00000000000000000000000000000000000f0ffff07f0ffff000000800000000000000000d31cc1cd60c708e0a4a2b5a55ed23349c301ae2a9e772425814e7e6dfaacc2ea5a9aff256fd1bc0fd8651d0ca8f8b5d0f4dabfeba4e681a594357314c3a976d3a766eba554fef1a221de955a58c7ded251532bdf8859458b921549fdb993061fa00e82a39e7619854df6480a0a9581599bba8f55f8f2856dfe931d761dbb000000000000"], &(0x7f0000000140)={0x0, 0x3, [0x628, 0xa55, 0x82f, 0x458]}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r0}) ioctl$KDENABIO(r0, 0x4b36) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000000c0)=""/85) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000, r0}) 2018/04/19 08:14:44 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000141a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:44 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x2000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd) 2018/04/19 08:14:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xc020000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:44 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000d1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:44 executing program 7: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x40000) syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "981258", 0x1c, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@fragment={0x0, 0x0, 0xc2}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)) 2018/04/19 08:14:44 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0xf, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:44 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x52, r0, 0x0) shmget(0x3, 0x3000, 0x40, &(0x7f0000000000/0x3000)=nil) r1 = semget$private(0x0, 0x4, 0x80) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000040)=""/44) 2018/04/19 08:14:44 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf00, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x80040000) 2018/04/19 08:14:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x7000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x3e8], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$getname(0x10, &(0x7f0000000040)=""/102) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000001c0)={[{0xffffffffffffffff, 0xa9, 0x81, 0x7, 0x0, 0x60, 0x0, 0x6, 0x4, 0x80, 0x0, 0xb4e4, 0x7a5d}, {0x0, 0x7f, 0xffff, 0x9, 0x4, 0x6, 0x81, 0x74, 0x100, 0xfff, 0xa6, 0x4, 0x4000000000000000}, {0x6ae, 0x6, 0x3, 0xfffffffffffffffa, 0xc4a7, 0xfffffffffffffffb, 0x10001, 0x1, 0x9, 0x0, 0xc45, 0x1d, 0xffffffffffffffff}], 0x5}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r4, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$ipx(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, 0x0, "0fb38bdf0a63"}, 0x10) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="460f21e9b805000000b9000000000f01d966460f3881680fc2c63ac4615de0dcc442a0f5997c348b5e3666450f3880ba001000008bcd64400f060f35", 0x3c}], 0x1, 0x0, &(0x7f0000000140)=[@cr4={0x1, 0x200}, @flags={0x3, 0x8004}], 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:14:44 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17001e001a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:44 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x700000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:44 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 2018/04/19 08:14:44 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x31, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:44 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000281a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:44 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x7, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0x100000000000000], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) [ 257.374765] *** Guest State *** [ 257.378151] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 257.387128] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 257.396010] CR3 = 0x0000000000002000 [ 257.399800] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 257.406338] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000004000 [ 257.412884] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 257.418905] RFLAGS=0x00008002 DR7 = 0x0000000000000400 [ 257.424914] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 257.431633] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 257.439651] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.447676] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.455690] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.463718] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.471727] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.479834] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 257.487843] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 257.495868] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 257.503885] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 257.512616] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 257.519060] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 257.526566] Interruptibility = 00000008 ActivityState = 00000000 [ 257.532824] *** Host State *** [ 257.536066] RIP = 0xffffffff811f6429 RSP = 0xffff8801bbc5f390 [ 257.542086] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 257.548543] FSBase=00007efc56c42700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 257.556370] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 257.562309] CR0=0000000080050033 CR3=00000001c1af4000 CR4=00000000001426f0 [ 257.569364] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87601380 [ 257.576077] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 257.582172] *** Control State *** [ 257.585658] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 257.592377] EntryControls=0000d1ff ExitControls=0023efff [ 257.597860] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 257.604832] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 257.611541] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 257.618189] reason=80000021 qualification=0000000000000000 [ 257.624550] IDTVectoring: info=00000000 errcode=00000000 [ 257.630064] TSC Offset = 0xffffff73167a1655 [ 257.634419] EPT pointer = 0x00000001bf03f01e [ 257.686212] *** Guest State *** [ 257.689598] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 257.698563] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 257.707456] CR3 = 0x0000000000002000 [ 257.711236] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 257.717771] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000004000 [ 257.724325] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 257.730331] RFLAGS=0x00008002 DR7 = 0x0000000000000400 [ 257.736360] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 257.743063] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 257.751089] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.759106] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.767176] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.775202] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.783222] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 257.791211] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 257.799230] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 257.807215] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 257.815214] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 257.823214] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 257.829687] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 257.837166] Interruptibility = 00000008 ActivityState = 00000000 [ 257.843418] *** Host State *** [ 257.846641] RIP = 0xffffffff811f6429 RSP = 0xffff8801b502f390 [ 257.852645] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 257.859071] FSBase=00007efc56c21700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 257.866884] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 257.872802] CR0=0000000080050033 CR3=00000001c1af4000 CR4=00000000001426f0 [ 257.879845] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87601380 [ 257.886529] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 257.892597] *** Control State *** [ 257.896080] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 257.902760] EntryControls=0000d1ff ExitControls=0023efff [ 257.908223] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 257.915167] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 257.921848] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 257.928444] reason=80000021 qualification=0000000000000000 2018/04/19 08:14:45 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x80000000000, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x52, r0, 0x3) 2018/04/19 08:14:45 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000161a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xfee00000) 2018/04/19 08:14:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffff0029}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:45 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x47}, 0x2c) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x101, 0x82080) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000040)=""/166) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2c}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x310) 2018/04/19 08:14:45 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xf, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:45 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x8, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) [ 257.934775] IDTVectoring: info=00000000 errcode=00000000 [ 257.940245] TSC Offset = 0xffffff73167a1655 [ 257.944579] EPT pointer = 0x00000001bf03f01e 2018/04/19 08:14:45 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000291a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:45 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf4ffffff00000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffff2800}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:45 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x80000000, 0x2, 0x4, 0x7, [], [], [], 0x697, 0x68baea63, 0x4, 0xab87, "11668cb8658821d9def15276861d7e78"}) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x7d, 0x28040) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 2018/04/19 08:14:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xe0fe00000000) 2018/04/19 08:14:45 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xffff030000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:45 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x5f, r0, 0x0) 2018/04/19 08:14:45 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002b1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:45 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/100) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x110000}) 2018/04/19 08:14:45 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x31, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffff2900}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 2018/04/19 08:14:45 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001d1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:45 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7e, 0x800) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740)='/dev/sequencer\x00', 0x82080, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6f, 0x4000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000700)={0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xfffffffffffffffe, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000780)={0x0, 0x0, 0xe337}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000007c0)={r4, r5}) msgget$private(0x0, 0x50) 2018/04/19 08:14:45 executing program 7: r0 = epoll_create(0x6) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x200, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0, 0x2, 0x100000000}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000100)={0xffff, r2}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 2018/04/19 08:14:45 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x2000000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffff3f000000}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:45 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x7, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:46 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000281a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) 2018/04/19 08:14:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffe0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:46 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xfff, 0x101040) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="74cdbe831f4d8425b7d77b9ff55cbdc8f00d66580c9ba74679345a077029668a070c2f566f265815e3d299a6571920cfd7a0278cea40a753e2085b150ccbae62b465338f63d72914d96060f6df5cdb7734fc869a042431d0ccaca946a200c8fde3f11e99178a1070183ec40994fb9ba3eeedee96c791c4b94550aa5f1b56803f113629b32719253a1be6e598873d9c5bb548d67fe2c0b1e9e411ec3e3b113628f77000b08823a2727a2fc150601eb050118a6f4d7d60c5ce8cf0df3beda0db583367bc86a1a7f2a3405b804eb3a490c9b76733f6ec159b2396a4f0f2312181598b8a125257aa6c144f2f65c8949c00eeb7b160e6", 0xf4) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x48000000, 0x8001, 0x4}) sync_file_range(0xffffffffffffffff, 0x8, 0x9, 0x81) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10002, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 2018/04/19 08:14:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffff0028}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:46 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x700, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:46 executing program 7: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000008000)='/dev/cuse\x00', 0x0, 0x0) readv(r0, &(0x7f0000f4e000)=[{&(0x7f00000cdf2c)=""/56, 0x38}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) io_setup(0x9, &(0x7f0000128000)=0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0xffffffffffffffc7) io_submit(r2, 0x1, &(0x7f00007a7fd8)=[&(0x7f000026c000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f000000bfb6)}]) tkill(r1, 0x1000000000013) 2018/04/19 08:14:46 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000221a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:46 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x8, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:46 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x52, 0xffffffffffffffff, 0x3) 2018/04/19 08:14:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 2018/04/19 08:14:46 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000251a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:46 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x4, 0x940) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0xff) r2 = semget$private(0x0, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000180)='/dev/sg#\x00') semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000001c0)=""/149) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/208) 2018/04/19 08:14:46 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xeffd, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000) 2018/04/19 08:14:47 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002a1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:47 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x187f, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x800000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:47 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x467) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000080)={0x36, 0x80, 0x8, 0x0, 0xffffffff}) 2018/04/19 08:14:47 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x4, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:47 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES16=r0, @ANYRES16=r0]]], 0x8}, 0x1}, 0x0) 2018/04/19 08:14:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xd00) 2018/04/19 08:14:47 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x2, 0x30c55370, 0x0, 0xc967}, 0x55, 0x81, 'id1\x00', 'timer0\x00', 0x0, 0x7fffffff, 0x4, 0x3, 0x34f22e74}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000140)={0x8000, 0x400, 0x5}) socket$rds(0x15, 0x5, 0x0) 2018/04/19 08:14:47 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfdff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:47 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002e1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:47 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x1, 0xfffffffffffff001, 0x7}) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f1f3c66180298a072fc2a1c227b15039", 0x10) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000180), 0x0, &(0x7f0000000440)}, 0x0) 2018/04/19 08:14:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1900) 2018/04/19 08:14:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:47 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000041a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:47 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x4, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:47 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffdfe, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:47 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x28802, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0xa000000000000000) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:47 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xf15, 0x0, 0x0, {}, [@IFLA_MAP={0x28, 0xe}]}, 0x48}, 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8f, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2018/04/19 08:14:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:47 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000241a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xd) 2018/04/19 08:14:47 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x20000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:47 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1300, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:47 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:47 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000271a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:47 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.net/syz1\x00', 0x200002, 0x0) futex(&(0x7f000012cfff), 0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040), 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x4, &(0x7f0000001280)=[{&(0x7f0000000100)="0f6ef92a7701d43259e086760edea4b1e4f8156f853be0e2a9a5b58d61ac8b19e4634fdb4e5cc658e3c66b60f1bc77f9b9435e6731649c667a35", 0x3a, 0x5}, {&(0x7f0000000140)="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", 0x1000, 0x100}, {&(0x7f0000001140)="bf6735897dbfd8f0bf7dafb20ddc20c89db5f22c5925f489a6f3ac785d25fa", 0x1f, 0x9}, {&(0x7f0000001180)="12d82f4f7cff01f9acae441fb51b29d813e970332095eb4280a57c63ffddc50563c06af2ba378a3f2fc27853a0bbd2edb439f8951ae5bc10f82929891355b9d8596f100b091100bafe7642daafae5f43f37a61e3515cda066064487a154ce3cac19e61f06423653c75b1389b45657348e897edad408ce15c772e306019bbb4dc35645343ee35cc09cebfdfab9ae5f549fb3640f386313d2bf9f11cf79f415ca69833ffdf239a3353edcfa829906c5b91a9ea8fc50699c6d0bcab8dc9b236f56f70c4", 0xc2, 0x7}], 0x8, &(0x7f0000001300)={[{@force='force', 0x2c}]}) 2018/04/19 08:14:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:47 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:47 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x8000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x300000002000000) 2018/04/19 08:14:47 executing program 7: syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600000e3ff44110000000000000000000000000000000000000000005cf4b1b704add2973d731c41be0da6600000000004ce409302d3a2aa0320880b00001c0000000800000086dd0000000000000000000000000000000000646999059b9ad9116c7e1b5f600000000000000000000000000000000000000000000000000000000000000000000000"], &(0x7f0000005000)) 2018/04/19 08:14:48 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xf, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff0f0000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:48 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000d1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:48 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x51, r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000080)={0x3ff, 0xc00, 0xfff, 0x4}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xd) 2018/04/19 08:14:48 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffffffffffffdfe, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 7: r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0xfff, 0x4, 0xfff}) shmget$private(0x0, 0x3000, 0x200000001000, &(0x7f0000ff9000/0x3000)=nil) 2018/04/19 08:14:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:48 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x200000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1c00) 2018/04/19 08:14:48 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000091a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:48 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x80010, r0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0xcf, &(0x7f0000000040)="e9a390362f611ac39ec8d1dc7b107a8a4c1e9d09d10f3dc5087589e31a133848d9a9962aae7fc36a2b00160bd3c6922b9ab36497ba113d8dcf94be0f3d652f39f122bc0e605f5ac0d38ace31dced96ecac20b6eb9e8cad751041814f6ef8dcfd066df038feaa51edbc0e242efaafb3e9a524ae39c735823f0aea810ec64b47d8a539841b8e6be80216eb6dc96c4d4307cac251e03eed66aed223a534f7dbfe3c2ac598b19fa61f5ea919365a1ae95808c1ac23997702ae4d50b10badc6f19e1807b661953e738852b737587e274f41"}) 2018/04/19 08:14:48 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3f00, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 7: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@random="cd38ffe40f97", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x43ff, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x87, 0x3, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}}}}, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x3ff) 2018/04/19 08:14:48 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x2000000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000) 2018/04/19 08:14:48 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000111a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:48 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="b3", 0x1}]) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x13, 0x8202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000200)=""/4096) 2018/04/19 08:14:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:48 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfbffffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x3f000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x0, 0x2) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000040)=""/176) write$cgroup_int(r0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:48 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000191a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:48 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xf4ffffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 2018/04/19 08:14:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:48 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000100)={&(0x7f0000001000/0x11000)=nil, 0x7, 0x5, 0x86, &(0x7f0000011000/0x3000)=nil, 0x800}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x8001, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000180)={0x0, r1}) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1810, r0, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast2=0xe0000002}, {0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0xa, {0x2, 0x4e23, @broadcast=0xffffffff}, 'syzkaller0\x00'}) 2018/04/19 08:14:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffe0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:48 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000e1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:48 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfe00, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x4000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1300000000000000) 2018/04/19 08:14:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000040)=""/208) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, &(0x7f0000000640)="653aba1f00000066450ff37a00b9900900000f32420f07c744240076000000c7442402180d0000ff1c24b9800000c00f3235008000000f30c4e235ba618266baf80cb8bc6e4283ef66bafc0cb856cbc4fdef0f01d62e42de8a00000000"}], 0xaaaaaaaaaaaaac0, 0x0, &(0x7f0000000600), 0x100000000000024d) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x491}]}) 2018/04/19 08:14:48 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4042, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000100)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x254080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x20010, r1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x4e, 0x2, 'client1\x00', 0xffffffff80000004, "1f31434f0aa07ed1", "d8f13751fd6316a79525ce6b319060476b45ad7b900ba079baf64dd4e5bd67fc", 0x6, 0x9}) 2018/04/19 08:14:49 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001e1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:49 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) 2018/04/19 08:14:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:49 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3ffff, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 2018/04/19 08:14:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x40000, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000058ffd)='./file0\x00', &(0x7f0000c77ffa)="646178000365", 0x400, &(0x7f0000000000)="28057a6047338df6657f9756cae855d289543439d542be94107ba2c34966f6827230cee2377df815119db80f82745d34eb3c51103bb456b3694bacc1ebdfba99e9d7000000000000000000000000000000000000") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="d804295b20a489e5f692092f14bf5ae93a8745b5e4f30f61fa6823f37263368cafe34a48a992c34f2ef9db1cd7db7915d1d9df5a7d7749616f493d873d3609ad766b05265ff01ba322e084f2c9c882abd9ff12ee8a4610690b7c0ba9bb37617900011d1acff969f3a7db83a43ee4da10fd92c35a2a2590159633b32d05a0f7b49488ed4a6164d152bcefe8b12d84dc8a44ff432a5190ada236a29dd62f6604c0835a0ba8046d", 0xa6, 0x877}, {&(0x7f00000003c0)="ff90e42707f14832d0b156ca44be59e1610b9813d3c3c94c4a58b42b31858c837e79764103db6e793d56404b3f76b8e12aa00828b78db4a0dd22d503042a48a1abb2b061d90cf05718f143dbf90ffc8618590da28928303c1f273c6b1ce2022d033b61c6439f2f77a564eb525e066844d97c977cf66ce8a1e1f837dc3f343170dced87868af26e1d28bff846458040757eb16cb3f0c7fb93a8c1", 0x9a, 0x4}, {&(0x7f0000000280)="286f6ef00475155ffd2d2bcb2c5a4e55201f", 0x12, 0xff}], 0x25, &(0x7f0000000580)=ANY=[@ANYBLOB="6726f8409080ccbcb2f67c623f7f6e6f696e69745f697461626c652c626172726937003d002c7379737667726f7570732c6a6f75726e616c5f6465763d7b3d3f367d2c64656275675f77616e745f65787472615f6973697a653d3130002d3f3b7d2c646174613d6a6f75726e616c2c00"]) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000140)={0x1, 0x200, 0x8, 0xffffffffffff8000, 0x46fa, 0x200}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000600)={[{0x0, 0x1, 0x7fff, 0x7, 0xfff, 0x5, 0x80000001, 0x6, 0x2, 0x935, 0x7fffffff, 0x4, 0x5}, {0x4, 0x7fffffff, 0x2, 0x9, 0x1, 0x2, 0x8, 0x0, 0xa, 0x3, 0x0, 0x3, 0x9}, {0x6, 0x6, 0x7fff, 0x5, 0x8, 0x8001, 0x3, 0x400, 0x40, 0x139, 0x9, 0x1, 0x7fffffff}], 0x8}) 2018/04/19 08:14:49 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000000f001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:49 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x31, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:49 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xfffd000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:49 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000063001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:49 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x40000, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000058ffd)='./file0\x00', &(0x7f0000c77ffa)="646178000365", 0x400, &(0x7f0000000000)="28057a6047338df6657f9756cae855d289543439d542be94107ba2c34966f6827230cee2377df815119db80f82745d34eb3c51103bb456b3694bacc1ebdfba99e9d7000000000000000000000000000000000000") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x81, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="d804295b20a489e5f692092f14bf5ae93a8745b5e4f30f61fa6823f37263368cafe34a48a992c34f2ef9db1cd7db7915d1d9df5a7d7749616f493d873d3609ad766b05265ff01ba322e084f2c9c882abd9ff12ee8a4610690b7c0ba9bb37617900011d1acff969f3a7db83a43ee4da10fd92c35a2a2590159633b32d05a0f7b49488ed4a6164d152bcefe8b12d84dc8a44ff432a5190ada236a29dd62f6604c0835a0ba8046d", 0xa6, 0x877}, {&(0x7f00000003c0)="ff90e42707f14832d0b156ca44be59e1610b9813d3c3c94c4a58b42b31858c837e79764103db6e793d56404b3f76b8e12aa00828b78db4a0dd22d503042a48a1abb2b061d90cf05718f143dbf90ffc8618590da28928303c1f273c6b1ce2022d033b61c6439f2f77a564eb525e066844d97c977cf66ce8a1e1f837dc3f343170dced87868af26e1d28bff846458040757eb16cb3f0c7fb93a8c1", 0x9a, 0x4}, {&(0x7f0000000280)="286f6ef00475155ffd2d2bcb2c5a4e55201f", 0x12, 0xff}], 0x25, &(0x7f0000000580)=ANY=[@ANYBLOB="6726f8409080ccbcb2f67c623f7f6e6f696e69745f697461626c652c626172726937003d002c7379737667726f7570732c6a6f75726e616c5f6465763d7b3d3f367d2c64656275675f77616e745f65787472615f6973697a653d3130002d3f3b7d2c646174613d6a6f75726e616c2c00"]) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000140)={0x1, 0x200, 0x8, 0xffffffffffff8000, 0x46fa, 0x200}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000600)={[{0x0, 0x1, 0x7fff, 0x7, 0xfff, 0x5, 0x80000001, 0x6, 0x2, 0x935, 0x7fffffff, 0x4, 0x5}, {0x4, 0x7fffffff, 0x2, 0x9, 0x1, 0x2, 0x8, 0x0, 0xa, 0x3, 0x0, 0x3, 0x9}, {0x6, 0x6, 0x7fff, 0x5, 0x8, 0x8001, 0x3, 0x400, 0x40, 0x139, 0x9, 0x1, 0x7fffffff}], 0x8}) 2018/04/19 08:14:49 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x400000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 2018/04/19 08:14:49 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)=0x28) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) 2018/04/19 08:14:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:49 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0xffffffff00000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:49 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x9fff, 0x0, 0xffffffff, 0x7, "9e159c84f782718be2811e9ec5430dfe8a9d615ef83edc61419867b8c92ae4c296131a93eabf15982b2f3096", 0x1ff}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:49 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000141a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:49 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x3f, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x8000, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000000c0)=0x1) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000500)}], 0x1, &(0x7f0000000000), 0x2d3}}], 0x2, 0x0) 2018/04/19 08:14:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 2018/04/19 08:14:49 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002c1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:49 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x3f00000000000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ffffff) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:49 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:49 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000982000)='/dev/cuse\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000080)=""/66, 0x42, 0x0) pread64(r0, &(0x7f0000000640)=""/56, 0x38, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000296f99)=""/103, 0x43}], 0x1) write$fuse(r0, &(0x7f00000e5f18)={0x10, 0x0, 0x1}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1, 0x63de, 0x8, 0x6}, {0x80000001, 0xfffffffffffffff9, 0x0, 0x9}, {0x3f, 0x7, 0x100, 0x4}]}) 2018/04/19 08:14:49 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x2000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:49 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x31000000, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:49 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000b1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x16000000) 2018/04/19 08:14:49 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000051a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:50 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0xf, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:50 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/24) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000000c0)={0x6340d959, 0x1, 0x7, 0x0, 0x2, 0x9, 0x2, 0x12000000000, 0x7, 0x8, 0x7, 0x0, 0x0, 0x7fff, 0x0, 0xbb7, 0x3, 0x88}) 2018/04/19 08:14:50 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000121a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:50 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x3100000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 2018/04/19 08:14:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:50 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x31, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:50 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x40004000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:50 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="17000000ff001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:50 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffd000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x13) 2018/04/19 08:14:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:50 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xf0ffffff0f0000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:50 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000040)=0x52a9) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) pread64(r3, &(0x7f00009f3000), 0x352, 0x0) 2018/04/19 08:14:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ff) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:50 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000021a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:50 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xffffffff00000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:50 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x18000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={r2, 0x80000, r3}) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r4, 0x0) 2018/04/19 08:14:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:51 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0xa}) poll(&(0x7f0000000040), 0x0, 0x3ff) r1 = semget$private(0x0, 0x2, 0x2) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000000)=""/226) 2018/04/19 08:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x11) 2018/04/19 08:14:51 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x20000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfcfdffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000101a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:52 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="4983118d2d404a38993d49aeb7d01d8dee") 2018/04/19 08:14:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1e000000) 2018/04/19 08:14:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:52 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x101000) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fdd000)=0x3) ioctl$PIO_UNISCRNMAP(r2, 0x80047456, &(0x7f00007d9f86)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x4828, 0x3, {0x3, 0x1, 0x1ff, 0x2, 0x5122403b}}) 2018/04/19 08:14:52 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x3f00, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x8000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001c1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:52 executing program 6: socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xe, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x10000, 0x3, 0x1, 0x4, "594239e75851f7543b26c1c0809c19eac7757bf861f28df768d3cecc53823bec9501f0f0284018435fb41b4d", 0x7}) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:52 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/191, &(0x7f0000000380)=0xbf) r1 = userfaultfd(0x0) r2 = dup(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x1, 0x4) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/213) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x14a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x6, 0x54, 0x2}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x3) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0xe}, 0x1ff}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x80) ioctl$KDADDIO(r2, 0x4b34, 0x2) 2018/04/19 08:14:52 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001b1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 2018/04/19 08:14:52 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x3f00, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x3f00000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:52 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x87, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="7d4da370e3f08ff8547a014d956ddfd18cc46e8e00237901231de94cbd1ef788d93845f2528c07d86ebaf2cf2af62d633b51de6ddebcc214bbc4f27bdbdb390834e6c8b511f4e2c6db394900ffe7751769ebe83a648793d170dc530941099d34d2e20d8a1d9884fba3930a0602e40d09a5d679bba28b80ddaf6f13ea260bf7d5927d3cb972b1f9cb0444f21a660b3df75131e9e1d4454ed5a7067b8d5f5dfe8e47887f34d04fcea9a4ce9a3165b9fa865fe538a41bff448a46a246f97bb82f574afc05897df8e2d9e2e7ae10eb4b4f30bb055eaabfc2fec774d911450ee8a7", 0xdf, 0xfffffffffffffff9}, {&(0x7f00000001c0)="526c7caf44706d248627073901b7e3a454b647a093660f4d308766714c5e35a99ce8c90a4853abd8fd", 0x29, 0x8}], 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:52 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/191, &(0x7f0000000380)=0xbf) r1 = userfaultfd(0x0) r2 = dup(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x1, 0x4) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000000)=""/213) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x14a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x6, 0x54, 0x2}) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000003c0)=0x3) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, [], 0xe}, 0x1ff}, @in6={0xa, 0x4e24, 0xfffffffffffffff9, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x80) ioctl$KDADDIO(r2, 0x4b34, 0x2) 2018/04/19 08:14:52 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002f1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:52 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xeffd, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400500, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000140)=0x1001) chroot(&(0x7f00000001c0)='./file0\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f00006adffc), 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000200)={{0x0, 0xfffffffffffffffc, 0x1000000000000800, 0x2000000000003, 0x8000}, 0x4a0, 0x9}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000180)={'syzkaller0\x00', {0x2, 0x4e20}}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400, 0x0) 2018/04/19 08:14:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:52 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f00000a5000/0x1000)=nil, 0x1000, 0x2000000, 0x50, r0, 0x0) 2018/04/19 08:14:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 2018/04/19 08:14:52 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000a1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:52 executing program 7: r0 = getpgrp(0x0) socket$kcm(0x29, 0x2, 0x0) ioprio_set$pid(0x2, r0, 0x0) 2018/04/19 08:14:52 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x100000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffffffffffdfe, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:53 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xfffffffffffffffd) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:53 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000f1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x14) 2018/04/19 08:14:53 executing program 7: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d}, 0x10) setsockopt(r0, 0x65, 0x1, &(0x7f0000000000), 0x0) close(r0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x7, r0, 0x1}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x1f) 2018/04/19 08:14:53 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfdef, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:53 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x2, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:53 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000161a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:53 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4000000000004, 0x0, 0x7]}, &(0x7f0000000340)=0x3cd) 2018/04/19 08:14:53 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x2000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:53 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) semget(0x1, 0x0, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xa43, 0x14001) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffff) 2018/04/19 08:14:53 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x2000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:53 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffe00, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:53 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000131a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:53 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x996, 0x50040) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3ff) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:53 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x31000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:53 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000291a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 2018/04/19 08:14:53 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x8001, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000140)={[{0xfff, 0x3edccddc, 0x3, 0x0, 0x8000, 0xfffffffffffffffb, 0x80, 0x100000001, 0x6, 0x1e, 0x6, 0x1, 0x7}, {0x2, 0x57, 0x8, 0x149, 0x9, 0x0, 0x100000001, 0x5, 0x7, 0x200, 0x3, 0x4, 0x5}, {0x5a0e0, 0x5, 0x0, 0x4c808bd0, 0x2, 0x3, 0x0, 0x1, 0x9, 0x2bbf, 0x40, 0x650f8332, 0xffffffffffff4915}], 0xfffffffffffffffd}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000000c0)={0x6f, &(0x7f0000000040)=""/111}) 2018/04/19 08:14:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:54 executing program 7: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000300)=0x2000) r1 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f00000001c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) ioctl(r2, 0x400, &(0x7f0000000080)="e6171fab406937d4336800edf1ac00002821ddad6bda2cb5180d452f17e24a72a63c8768af92564b5583cfea92894271c1eb376bb79b387f9fd2c0d831421f68f23325125a1b44043808357dc7716a99acdc51c7902b07379d") r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x40000) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000100)={0xffff, 0x1ff}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000340)={0x8, 0x6, 0x775, 0x0, 0x0, [], [], [], 0xfffffffffffffffe, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bcsh0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'gretap0\x00', r4}) 2018/04/19 08:14:54 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000171a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:54 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x700, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:54 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xfe, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:54 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x52, 0xffffffffffffffff, 0x0) 2018/04/19 08:14:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) 2018/04/19 08:14:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) [ 266.956770] QAT: Invalid ioctl 2018/04/19 08:14:54 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x6, &(0x7f0000000440)=[{&(0x7f00000000c0)="a2241cc110ae4bb6516b0133dd8119acbe8bd31f71d4b1cd0ae17bfac845a7a83bfd1e7dd3cb07f0487bd4d0c3ed3b67a4fae60b10361995a7b2f3dde57903a58f8984ffd5d75fcbd8dc06903f3f9fe4b93ad6e0d92208b0d08b2889093609f9191efe9a83cf3c9ed01fe691ec947e4ed7", 0x71, 0x10000}, {&(0x7f0000000140)="acf75a2a12442dfc2ce8938dff80b934f5a7251c6b3b199c1ad8d6f3432b1e521b27bae163", 0x25}, {&(0x7f0000000180)="098811edff1477dfdd10691deee138b73d5dcb5958efb5fc85c112c416cce5694e23814d8b7e5054445a8628edd4236349fa5fcca7beb10cde38174e35bb89434d8fe26a5ff9044adcbd1586960c2792a6ef0e110486f4d2493a675dcdb42f923b66634265f45b49a01556fb614bfb25ffbe6f279fe8b6675548a90f1a3e79a06724f0d8bf88597353d8b53951689e26cd096538f436076d76645ccc5ddebb458f8aa2b21360b9df6c5854b3e840532462e4df95ea767c8a", 0xb8, 0x6}, {&(0x7f0000000240)="3a3d6d1f05e2f1c99b8a8b5cbbbf77038bbb55438f510154859d23b64faf2a9b3e1878553c8e583c9511a6ede38f0800c685898ebbf8266adb84a7068b8ccc4f6133525ca430e9aa503ee9d4b6eb6cd9658e0b14487cfed54e4e14a7aad1447fd60e9831ba33a84b4686ee2b34a75e49c7084326e6ffa630d4163fce6044f2057cfe12762d8ad0843acac43f75f5cec4b07f4d66", 0x94, 0x81}, {&(0x7f0000000300)="dff463473260ffe63a6eac215926174f5883205c1205ae9a387406333542e46ec8d54c57715e8e996ac04b11fd369dc6817aaa565799d369d2935f963d7788ad2caf119ddb39a9d66e56b3f62a1c8515e7a6403ac78d905e533f0796776a8bbcc9f6d8050264d2ae9b3101ecaa5a0c9a455039dcb3ac111fed10c36dc464d03205f7bc96805f865c33d7cdd525498a", 0x8f, 0x100000000}, {&(0x7f00000003c0)="91eae3414c197a8aa99372188dff9b5ce95a94d42dfb1bc447eb45c6a2303a565a0d75bb12335a74f2cecf096b74e95d47b3189ce4663be292f58252d2b694c16198e0dfa0a67098325830d446dc", 0x4e, 0x7fff}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="636fff7f66743d2d78362c00"]) r0 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x101, 0x101000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000005c0)=""/40) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000580)={0x7ff, 0x7}) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/04/19 08:14:54 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000c1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:54 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x7, 0x0, r0, &(0x7f0000000000), 0xfe00}]) [ 266.977937] binder: 22139:22141 ioctl c008ae91 200001c0 returned -22 [ 267.013279] binder: 22139:22141 ioctl 400 20000080 returned -22 2018/04/19 08:14:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:54 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x4, r0, &(0x7f0000000000), 0xfe00}]) [ 267.037828] binder: 22139:22141 ioctl c028ae92 20000100 returned -22 2018/04/19 08:14:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1c) 2018/04/19 08:14:54 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x3f00000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) [ 267.137491] binder: 22139:22141 ioctl 8933 20000140 returned -22 [ 267.209307] binder: 22139:22141 ioctl 8933 20000180 returned -22 [ 267.250741] QAT: Invalid ioctl [ 267.273768] binder: 22139:22141 ioctl c008ae91 200001c0 returned -22 [ 267.285309] binder: 22139:22183 ioctl 400 20000080 returned -22 [ 267.300918] binder: 22139:22183 ioctl c028ae92 20000100 returned -22 [ 267.339901] binder: 22139:22141 ioctl 8933 20000140 returned -22 [ 267.353413] binder: 22139:22183 ioctl 8933 20000180 returned -22 2018/04/19 08:14:54 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000003, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:54 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000181a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:54 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffffffffffdef, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1d) 2018/04/19 08:14:54 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x800) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0xbc5, 0x0, 0x10000, 0xf70}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x9, r1}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0xc, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xff54) 2018/04/19 08:14:54 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x1000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff0f00) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:54 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700002d1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:54 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfeffffffffffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x4002043f6, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:55 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) write(r0, &(0x7f0000000080)="b07192d5", 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x80003, 0x5) r3 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0xa001) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'bcsh0\x00', 0x200}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty=0x1000000, 0x0, 0x0, 'lblcr\x00'}, 0x2c) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'irlan0\x00', 0x3fffc0000000}) 2018/04/19 08:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 2018/04/19 08:14:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:55 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700001a1a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:55 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xfe0000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xf4ffffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000031a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:55 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x3f000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x12000000) 2018/04/19 08:14:55 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfe00, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000071a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:55 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000540)='/dev/input/event#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000000c0)=""/188) readv(0xffffffffffffffff, &(0x7f0000000040), 0x10000000000002ec) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x874, 0x3, 0x6, 0x64, 0x2, 0x0, 0x6e7, 0x4956, 0x1, 0xffff, 0xf0, 0x4e4}) 2018/04/19 08:14:55 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, "4027cc"}, {0x20, '/dev/sg#\x00'}], 0xa, "28f1e414dc7c82fc88ce4fdb51dffd3edc4ff99af14dacaa97a178fee8dfa4e80c0a1cd172b8170e09870e2f8ff3c76dc748fdae8abc"}, 0x59) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:55 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xf00, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x16) 2018/04/19 08:14:55 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000151a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:55 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffffb, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 7: mount(&(0x7f0000000100)='.', &(0x7f0000000140)='.', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x80000000}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000d40)="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", 0x57d}], 0x1}, 0x8000) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000d00)=0x4, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) umount2(&(0x7f0000000000)='.', 0x0) 2018/04/19 08:14:55 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000040)={0xfd4, 0x9, 0x5}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000080)={'syzkaller1\x00', @ifru_mtu=0x7}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) 2018/04/19 08:14:55 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000081a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:55 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfdff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0xfffffffffffffffc, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000040)="955743d69568c568357df43b946624d741491e39f0c9b0958d6cb599f3e7962d314c94ba65b7429cd43580b5d084101a6d8031b5acc316faa730d08daef1bc476c016c03bb6df1bc276edd53f4ad265fc5668a926a0ce81026ec30c6e039c1d4e1313d36ef3cf6f1efdaee3035274f3c58903381eb9744e153ce577cfa5689da5c2a905d50ab1bbfb41e48f06b5acf816877364638216e447bedc404406bf93a58dd88") 2018/04/19 08:14:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x9) 2018/04/19 08:14:55 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x3100, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:55 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000261a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f000036bfc8)={&(0x7f000035cff0)=@llc, 0x10, &(0x7f0000b78000), 0x0, &(0x7f000034cf66)=""/154, 0x9a}, 0x0) write(r0, &(0x7f0000000280)="1f0000001000077f00000000002000fc0300000408000200048000ad06ffef", 0x4) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x350, 0x280400) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000300)={r2}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000200)={0x8, 0xfff}) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x7, 0x8000) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0xff) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/55, 0x37}, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000240)) 2018/04/19 08:14:56 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffffffffffdfc, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:56 executing program 6: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x86d, 0x40) r1 = socket$unix(0x1, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) 2018/04/19 08:14:56 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000231a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1d00000000000000) 2018/04/19 08:14:56 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xfe00, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:56 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000061a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:56 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x700000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:56 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/31) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40, 0x0) 2018/04/19 08:14:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 2018/04/19 08:14:56 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000211a001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:57 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x31000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:57 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) 2018/04/19 08:14:57 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x800000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:57 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="1700000063001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:57 executing program 7: socket$l2tp(0x18, 0x1, 0x1) r0 = inotify_init1(0x1000) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) setpgid(r1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x80) getdents64(r2, &(0x7f00000000c0)=""/237, 0xed) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000040)={0x3, 0xffffffff}) ioctl$KDDISABIO(r2, 0x4b37) 2018/04/19 08:14:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x6) 2018/04/19 08:14:57 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000000f001bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:57 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xffff0300, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:57 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1900000000000000) 2018/04/19 08:14:57 executing program 7: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'veth0_to_team\x00', 0x5}) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x40001) sendfile(r1, r2, &(0x7f0000001000), 0x400000000fee) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/123, 0x7b}], 0x1, &(0x7f0000000680)=""/108, 0x6c}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/164, 0xa4}], 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x3}], 0x2, 0x0, 0x0) sendfile(r0, r2, &(0x7f0000000040), 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000300)={{0x0, 0x1, 0x8, 0x3, 0x7}, 0xfffffffffffffffd, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x2, 0x6, 0x11e6}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5fb}, &(0x7f0000000180)=0xffffffffffffff6e) prctl$seccomp(0x16, 0x0, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0x4000000000000, 0x9, 0x7, 0x9}, {0x3, 0x10001, 0x1, 0x1}, {0x80, 0x8, 0x5, 0x80000001}, {0x9, 0x48, 0xaa, 0x4}]}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f00000002c0)={{0x80000001, 0x0, 0x1000, 0x7fffffff, 0x4974fe63, 0x1}, 0x2}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x100000000}, 0x8) 2018/04/19 08:14:57 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a1a1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:57 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xfe000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:57 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) 2018/04/19 08:14:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:57 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x7000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:57 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a031bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:57 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x3ffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:57 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000000c0)=0x6) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000080)={0x7ff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2018/04/19 08:14:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) 2018/04/19 08:14:57 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a2b1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:57 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xf4ffffff00000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000040)={0x200, 0x7, 0x8, 0x701}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x0, 0x4}) 2018/04/19 08:14:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:58 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xf000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x7, 0x8001, 0x1f, 0x5, 0x1000, 0xbb, 0x9, 0x3, 0x5be, 0xfff, 0x6, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000057fee)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x2000004, 0x32, 0xffffffffffffffff, 0x50) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}) socket$bt_bnep(0x1f, 0x3, 0x4) 2018/04/19 08:14:58 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a0b1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:58 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfcfd, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 2018/04/19 08:14:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:58 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a021bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 2018/04/19 08:14:58 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x3100000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 7: r0 = socket$inet6_sctp(0xa, 0x100000000005, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000000)=@proc={0x10}, 0xc, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="108000000000b1"], 0x1}], 0x1, &(0x7f00000016c0)}, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000240)={{0x3, 0x3, 0x7fff, 0x3, 0x5}, 0x3, 0xc32, 'id1\x00', 'timer0\x00', 0x0, 0x5, 0x2, 0x40, 0x7}) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3ff, 0x410000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000100)=r3) 2018/04/19 08:14:58 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x52, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7ff, 0x40400000) 2018/04/19 08:14:58 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xffffffff000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) [ 270.917395] QAT: Invalid ioctl 2018/04/19 08:14:58 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a191bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) [ 270.963889] QAT: Invalid ioctl 2018/04/19 08:14:58 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xeffdffffffffffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x200000) r1 = syz_open_dev$vcsa(&(0x7f0000002ff5)='/dev/vcsa#\x00', 0x2, 0x1) write(r1, &(0x7f0000000080)="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", 0xf81) ioctl$VT_ACTIVATE(r1, 0x5606, 0x100000000) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0xa000000, 0xfffffffffffff4e5, 0x5, 0x4, 0x800, 0x7f}) socket$inet6_icmp(0xa, 0x2, 0x3a) 2018/04/19 08:14:58 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:58 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a0a1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 2018/04/19 08:14:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc0000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:58 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x8000000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a161bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:58 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfefdffffffffffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0xffffffdb) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cuse\x00', 0x0, 0x0) sendto$ax25(r2, &(0x7f0000000480)="44ad80e62aca57d656d0d9f33841f9ce22779c1e451dc250fe9fc7ec46289d5a3cd897b9db2be6c05679e00b397e7e9e15687111ec70bbafbd4d1b6ea73066e688bce231ff2852bd0bb294a1b497b9a2da1c51d75ca19548e8e9c58419200c821ee5bd21bde47cae3c1d448a65f5c6d88f91e08d12b1d6e6cb12f92ebe520b5538f0ebffb117f293bd155d0a3f104f45b18dd33eb247dd311696d26b931c51fb8dcf2be3b9aa8ea3675505fdf8f41e92d7432924b16933cd1e9d48ce9cabf19f587643256948df2a3ce52cbea4a40bbfa2ce83", 0xd3, 0x20000000, &(0x7f00000006c0)={0x3, {"760bda9e41bbad"}, 0x2}, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000002c0)='gre0\x00') rt_sigtimedwait(&(0x7f00000001c0)={0x400}, 0x0, &(0x7f0000000280), 0x8) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x20201) io_setup(0x0, &(0x7f0000000700)=0x0) io_destroy(r4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x101, 0x81, 0x9, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[{0x3, 0x100, 0x9, 0x800}, {0x1, 0x2e8, 0x1, 0xffffffffffff7fff}, {0x4, 0x101, 0xffff, 0xffffffffffff8000}, {0x8000, 0xfffffffffffffff9, 0x3f, 0x5}, {0x9, 0xa9, 0x291, 0x4}, {0x5, 0x7, 0x8001, 0x2}]}, 0xfffffffffffffe32) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0xe) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) select(0x40, &(0x7f0000000140)={0x8, 0xcea, 0x3, 0x6b, 0x7f, 0x5, 0x286e, 0x6}, &(0x7f0000000180)={0x4, 0x1, 0x2, 0x0, 0x3ce9, 0x10009, 0xf374, 0x1}, &(0x7f0000000300)={0x8000, 0x3, 0x73, 0x1, 0x0, 0x20, 0x9, 0x3}, &(0x7f0000000400)={r5, r6/1000+30000}) io_setup(0x21, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) 2018/04/19 08:14:58 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x400000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x7ff, 0x2a, 0x1}) 2018/04/19 08:14:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x100000) 2018/04/19 08:14:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:58 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0xf00000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:58 executing program 7: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) mmap(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f000000e000)=""/84, &(0x7f0000000000)=0x54) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2f, 'io', 0x20}, {0x2f, 'io', 0x20}]}, 0x8) syz_open_pts(r1, 0x801) 2018/04/19 08:14:59 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfefdffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:59 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a081bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:59 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x440000, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:59 executing program 7: sendmsg(0xffffffffffffffff, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000012f70), 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x5, "27020201"}], 0x18}, 0x0) 2018/04/19 08:14:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:59 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe0f}]) 2018/04/19 08:14:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 2018/04/19 08:14:59 executing program 7: r0 = eventfd2(0x3, 0x0) fsetxattr(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="ef90c273782e65746830"], &(0x7f00000000c0)="7365637572697479057d626465767070703173656c696e75782c21706f7369785f61636c5f616363657373292100", 0x2e, 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000a32000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00002a0e50)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 2018/04/19 08:14:59 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a101bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:59 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x20000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:59 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x0, 0x62d127f7, 0x1, &(0x7f0000000040)}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:14:59 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x2000fe00}]) 2018/04/19 08:14:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 2018/04/19 08:14:59 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a2a1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:59 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfeffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:59 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000fc9000)=0xff, 0x4) sendto$inet6(r0, &(0x7f0000ab4f8e)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) socket$alg(0x26, 0x5, 0x0) readv(r1, &(0x7f0000864f80)=[{&(0x7f0000142000)=""/4096, 0x1000}], 0x1) 2018/04/19 08:14:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:59 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000200)=""/167) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000080)={{0x4, 0x795}, 'port0\x00', 0xa1, 0x40a, 0x7ff, 0x10000, 0x3, 0xff, 0x1, 0x0, 0x2, 0x3ab5}) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x9, 0x8001}, 'port0\x00', 0x6, 0x800, 0x101, 0x3ff, 0x92, 0x7fffffff, 0x100000000, 0x0, 0x6}) 2018/04/19 08:14:59 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfdfe, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:59 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a251bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) 2018/04/19 08:14:59 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0x2000000}]) 2018/04/19 08:14:59 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a131bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:59 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfbffffff00000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:59 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000180)) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:14:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x2) 2018/04/19 08:14:59 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xffffffff000}]) 2018/04/19 08:14:59 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a00ffed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:59 executing program 7: ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000280)) move_pages(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], &(0x7f0000000100)=[0x3, 0x3], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x8, &(0x7f00000001c0)="04836c31f37c1d7c38076f5f85e44b5318bce1fc72b083e356b57b06fef940c4701e764e157876c732c54d02ac938b80c80eae143edb4910f76f5226d391ed66b16470d40bf77703d6fac66c3d1fc4cd8a91885fdafa0882e685e718ee5491759b7f5b5ac2cf") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/59, 0xfffffea8, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/04/19 08:14:59 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffffffffffe00, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:14:59 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x369f, 0x33e5, 0x7, 0x0, 0x0, [], [], [], 0x5, 0x6}) 2018/04/19 08:14:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) 2018/04/19 08:14:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:14:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:14:59 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a0e1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:14:59 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xf00000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:00 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) 2018/04/19 08:15:00 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe31}]) 2018/04/19 08:15:00 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffdfe, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:00 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a0f1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:00 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/107, 0x6b) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:15:00 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x20) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vcs\x00', 0x4000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000001180)={r0, 0x14}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f00000011c0)={{0x5, 0x3, 0x5, 0x8, 0x4, 0x8001}, 0xbd3}) connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x80841) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001200)=0x0) syz_open_procfs(r3, &(0x7f0000001240)='net/if_inet6\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f000039a000)={0x5, 0x100, 0x100, 0x2}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x7, &(0x7f0000000080)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r4}, @initr0={0x18}], {0x95}}, &(0x7f0000000040)="7379e66b616c6c657200", 0x8, 0x1000, &(0x7f00000000c0)=""/4096}, 0x48) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000000c0)) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000010c0)={0x40000, 0x0, [0x7fffffff, 0xb0, 0x5, 0x7, 0x7, 0x1, 0x3, 0x8]}) 2018/04/19 08:15:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x14000000) 2018/04/19 08:15:00 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe04}]) 2018/04/19 08:15:00 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a271bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:00 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:00 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xf000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:00 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x8000000000000000}]) 2018/04/19 08:15:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 2018/04/19 08:15:00 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x101) syz_extract_tcp_res$synack(&(0x7f0000000540), 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) close(r1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f0000000000)=[{}, {0x0}, {}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000500)={{0xb2, 0x9, 0x0, 0x7ff, 0x10001, 0x1}, 0x7fffffff, 0x3ff, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000580)={0x7fff, 0x0, 0x2, 0xb9a000}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000005c0)={0x9f01, r3, 0x0, 0x99}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000004c0)={r2, &(0x7f00000003c0)=""/228}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000600)) 2018/04/19 08:15:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:01 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a231bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:01 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffd0000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xf) 2018/04/19 08:15:01 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, @perf_bp, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8000, 0x200) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={{0x614, 0x0, 0x9, 0x4, 0x7, 0x40}, 0x3}) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffffe, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'tunl0\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x0, 0xbe2, 0x6, 0x3, 0x9, 0x8}, 0x100000001, 0x5, 0x83ca}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:15:01 executing program 7: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000240)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f284299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000000000000000104000000000000000020000003dd06aa3b65988fb00000000000000000000000000000000000000008002000000000070000000000000060000000000000001000000000000000010000000100000001000000010000061000000040000000000000002f2ed9ab996cd7cca000000491fd05cdb370000000000000000000000000045010000000000000000000000010000fffffffa0000008002000000000000800000000000001000000010000000104000000000000000000000000000000000000000000000400000000000000000c08dc19d65d03cd67c70514c95b95e109e964ab97c8cffa950977e584610e5bf2c7d81d4ff7b30ef8dd64f5d831d82f22d4b86550aebbecf8ece1263fefe61d00fdd66c5706b8633f130949d224fd6ddb18ab8402f5dd454769c8a6b26f9434c3df064fd0bcaa3400032582db62468d7802aa6c59bc6c40e39ef5a7b6e1851997ff7f2965b354baf05730be801a9ba65039abbd872492b932c97755e36f28034faab5ed86b20315e2716bb0990769a36fa17867c12276654ed29d2b5a4211e89c38c92b32100c9b61ebc516c480aa72084603fdc7aa632c0587f86483b7ce33fbb8c3e825437c99942da627ed78382776722c0738ff70f5e2a1627f0775db68d8d41c2ff93d23e4ca6", 0x22b}], 0x2004000, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xc400, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r1, 0x3f, 0x80000000, "b136fa2d565bbca8adada5d6258951136a4dbab4ba9fd08c9d23b5e0812966b1a1df4256a3ec911e87c53865c30351ba9c00b7f8a239441bace4e520475501576e05af1dc903fb57d5cbe92b093fcde8bcf72e9d350e4a70487be501cdff026c1a974c63ca6a88897fca"}) 2018/04/19 08:15:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:01 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a221bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:01 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x1000000}]) 2018/04/19 08:15:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:01 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a091bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:01 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000040)={0x5, 0x0, [{0xc0000001, 0x100, 0x5, 0x9, 0x8000000000000000, 0x38e, 0xfff}, {0xc0000007, 0xffffffffffffffe0, 0x0, 0x10000, 0x7, 0x0, 0x200}, {0x0, 0x9, 0x1, 0x5, 0x10000, 0x2, 0x1ff}, {0xc0000000, 0x7ff, 0x7, 0xfff, 0xffffffffffffffc1, 0x6, 0x1}, {0xc0000000, 0x1, 0x6, 0x6, 0x8001, 0x4, 0xd46e}]}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x3e3fc0000000000, 0x4, &(0x7f0000000500)=[{&(0x7f0000000300)="a5adcc3763d5bcd2334f120150ae5e8a88355af642646b223beef97c6a6417119681fd9f65b93f45a3c6efee972927057728ef6ca2f328c4e1937a49541fbb61e16baabe88b755506ce4a5b26e5d12ebdcfb4b8b6445ca2b5f4e56e35721c77f2ec9f21f9c5d82d4bb5c7f8720c603ea5cadd46e63fed77cc07630a1e3ec9e539dafff88e69ffae43f49ce77e6404e5508f220c1974af95ff97e6b852806c87b92e67156d9213fe63fbab9606d9b32465ee78cbdb0d4c8e2429a6d4d67ac3c8e", 0xc0, 0x7}, {&(0x7f00000003c0)="18", 0x1, 0x86d}, {&(0x7f0000000400)="6f1dfd9b5d41", 0x6, 0x64c}, {&(0x7f0000000440)="a2bbf6c38fe16d373cf988bd3433fc3aba4141600bd3792945017886e032755be4e2cbbc8a73bb018716dd4f0bd213e93114655f90a0a4636673c4a6240df5b955fd5a025956cc1afaeb359da9c7bb3601197e018d31865fd80ba361398b2ce06fe2c38c6eacdd85caeacfc8a1bf1d5a0a6ae8a136af8b28a389bbbd9918d2dfb6acc333c36e5f2731ec0eda922672ecfa8a69308ed353dc6131eebf1b424eb3255b4d4a10fca7fe606673af968f7e591ae1fe1da3e3659c97b589", 0xbb, 0x3f}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="646d61736b3d323734358c989969b499b0ff636f6e74696e75652c00"]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800)='/dev/sequencer\x00', 0x400, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000200)=""/81) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x100000001, 0x38d040) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000007c0)={0xf744, 0x3, 0x7fff}) write$binfmt_elf32(r2, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7fff, 0x0, 0xffff, 0x1f, 0x2, 0xf087931c58ccb23d, 0x8, 0x29c, 0x38, 0x3ae, 0x101, 0x200, 0x20, 0x1, 0xfffffffffffffffd, 0x6, 0x20}, [{0x2f2e2eec588de8d5, 0x26, 0x6, 0x101, 0x6, 0x10000, 0x0, 0x7fff}], "e1bd04b54ae03a858cbca65a39b5087c5b3b22f781ea6a249adf8f9a3de174998192ab774ec1e372ecf402cf446b05d3e3a28f5981b53d9ace8e6097b27f0c80a2500255ab17e78cd1b6b76050dbe1811f013aaddaacecfabf8bb9fa56f3aefe32c0b88433d66bcf324e27d67c03a05be4b38c3d1ebbeca772ee4106f6eff610c10a80a749169e19ebc0824872c14f502542e2f80b4c04643636a644f6c90f81c3c5285c5832836b848744049c466ca46bf8f8ceb1249c5be792e4a3e98fa129bf0ba2f19be7307c067603c60c47adf1b2ab4a840069f26618c7c0a86fd2d12098c0c90301cc5ac2ee60104242d56d99be8f52"}, 0x14b) syz_open_dev$sndctrl(&(0x7f0000000600)='/dev/snd/controlC#\x00', 0xac10, 0x101240) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r3, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000005c0)=""/7) socket$inet6_udp(0xa, 0x2, 0x0) 2018/04/19 08:15:01 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfbffffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:01 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f0000b8c000)) io_setup(0x1ff, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) 2018/04/19 08:15:01 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x2000}]) 2018/04/19 08:15:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xe) 2018/04/19 08:15:01 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfefd, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:01 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a2f1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:01 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x10001, 0x4, [0x400]}) 2018/04/19 08:15:01 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x2003, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 2018/04/19 08:15:01 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xfe00}]) 2018/04/19 08:15:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1500) 2018/04/19 08:15:01 executing program 7: unshare(0x8000400) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) iopl(0xffffffffffffff69) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f00000001c0)=0x80) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/cuse\x00', 0x20280, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000780)={[{0x6, 0x4b, 0x100000000, 0xfffffffffffffff9, 0x80000000, 0x2, 0xd0a, 0x3, 0x245, 0x1ff, 0x2, 0x0, 0x1}, {0x3c, 0x8c, 0x3, 0x7, 0x9, 0x4, 0x8a, 0x0, 0xfffffffffffffffb, 0x2, 0x100000000, 0x4f10, 0x2}, {0x80000001, 0xffffffff, 0xff, 0xb3f, 0x1, 0x3ff, 0x401, 0x5, 0x4, 0x0, 0xd6, 0x9, 0x9}], 0x400}) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000c00)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000840)='/dev/rfkill\x00', 0x101, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000980)=0x7) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r2, 0x61e}, 0x8) unshare(0xc000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000800)=0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000680)=0x4) r4 = perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000340)=@pppoe, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f00000006c0)=""/75, 0x4b}, {&(0x7f0000000880)=""/85, 0x55}], 0x5, &(0x7f00000009c0)=""/199, 0xc7, 0x5e542a51}, 0x0) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000600)="ddb7c9f85387995fda830870c2bcb79f2b9e9401dc57eff706cb03985193b9b694878b9ada1c64dc0d06eef073e1b159a5e0dee4147d185ddbc502589297428e6ab36984c5f2b12b8e88758715ad8e40049c5781c800a9", 0x57, 0xfffffffffffffffa) r6 = semget(0x2, 0x0, 0x40d) semctl$SEM_STAT(r6, 0x4, 0x12, &(0x7f0000000b00)=""/253) keyctl$assume_authority(0x10, r5) getsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x0, 0x4, 0x3d0f, 0x2}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)=0x9, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='user\x00') 2018/04/19 08:15:01 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffff4, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:01 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)=@ioapic={0x1, 0x4, 0x386, 0x0, 0x0, [{0x1, 0x66c, 0x611, [], 0xfffffffffffffff9}, {0x0, 0xe900, 0x0, [], 0xffff}, {0x6, 0xfffffffffffffff8, 0x1}, {0xe5, 0x0, 0x1, [], 0x4}, {0x5, 0x8, 0x0, [], 0xffffffffffff0000}, {0x8, 0x6, 0x1, [], 0xfffffffffffffffd}, {0x2, 0x5, 0x3}, {0x6, 0xe7df, 0x100000000, [], 0x6}, {0xdca, 0x3, 0x1}, {0x9, 0x0, 0xef8, [], 0x101}, {0x4, 0x2, 0x9}, {0x9, 0x0, 0xffff, [], 0xed26}, {0x8001, 0x81, 0x8, [], 0x6}, {0x7f, 0x8, 0x3, [], 0x101}, {0x4, 0x7fffffff, 0x8, [], 0x2}, {0x7, 0x0, 0xfb, [], 0x100000001}, {0x8, 0x7, 0x7fff, [], 0xfffffffffffffffd}, {0x8, 0x2, 0x1, [], 0x3}, {0x3f8000, 0x80, 0x2, [], 0x5}, {0x7f, 0x0, 0xffffffffffffff81, [], 0x8}, {0x8, 0x3, 0xb0, [], 0x2}, {0x4, 0x3, 0x9, [], 0x80000001}, {0x7, 0x9, 0xffffffff, [], 0x4}, {0x100, 0x8, 0xf, [], 0x7f27}]}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000140)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:15:01 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a2d1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff) 2018/04/19 08:15:02 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a281bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:02 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x31, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:02 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x2000000000000000}]) 2018/04/19 08:15:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x500) 2018/04/19 08:15:02 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)={{0xcc, 0x4, 0x2, 0x65, 0x6f, 0x2db76b7a, 0x1be, 0x10000}, "37df5b1ee68b64260e3790abdeb03dd4b32e8954be5d301bbd0a50e73862eb4b187cade10831be59afef8c4c04c74b52c4fe3f2be148c8d9a12f34cec162cda5a6", [[], [], [], [], [], [], [], [], [], []]}, 0xa61) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:15:02 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x6, 0x1a, 0x0, 0xffffffffffffffff}) epoll_create(0x10001) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x10000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000000010400, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x7, 0x4) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000040)=0x6) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x200000a, 0x6012, r2, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000200)=0x6fcec28f) socket$alg(0x26, 0x5, 0x0) mremap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) pipe2(&(0x7f0000000000), 0x0) 2018/04/19 08:15:02 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a061bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:02 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x100000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:02 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000081cc0800000083f50000020000000000000000000000070000c0050000000400000001000000060000000000643e0000faa318b423ff2999c313c628810e1ce0491c137dff65faeabf1514c3e961e05cb1a43d424d8ba4b4dad2fd0af0c149f1e46f560f8e2e509e17e612327dec47e91ec7a0c84d5abc4d7a9515973dd21467bda1be4aa2debe2cfbd57d48c786eb4391916818507a1518d5d960adffee8f0fb5d4dfba9c3d3d22d47727e66e960072c7e9f4c54be7811b8ee815813b2dcd55fa1a1ebb9f59b3c7b363f1c52a0337d03648e7d04d44602c3be570eea252d44c19f2d80fd96d8dce0970"]) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x20000) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000140)=0x5a) ioctl$sock_proto_private(r2, 0x89ef, &(0x7f0000000080)="53b5865d6cdcea8d9a437ea0cfe204c0ef817821b02f679734da94232374e92b7137723f01fd0b1eaf1bf1357e2a7344cc3c1652e6f73d9578252661ac400b98f363baa47e8e4987b478547356907332e58890355c5e4ecb6158b55e4492f3568c15751ff4d9fe32e4c94e84659b0f951e9e24affcbad13f1f90d8f8b5754ccf5bbdd53a2a7fc22548216e2f539da1d855b6db082566f8f7") r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) 2018/04/19 08:15:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x5) 2018/04/19 08:15:02 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xffff030000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:02 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a1e1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:02 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xf000000}]) 2018/04/19 08:15:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:02 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000700)='ceph\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, &(0x7f0000000580), 0x2c, r0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff]) keyctl$chown(0x4, r1, 0x0, r2) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000040)=0x100000) 2018/04/19 08:15:02 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x52, r0, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000040)={0x3, 0x0, [{0x80000007, 0x1, 0x3, 0x6, 0xfffffffffffffff8, 0x2, 0x8}, {0x40000005, 0x424, 0x1, 0x42e9, 0x6, 0x7f, 0x1}, {0x80000007, 0x3f, 0x1, 0x0, 0x26, 0x40, 0x9}]}) 2018/04/19 08:15:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:02 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a261bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:02 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:02 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffdfc, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:02 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x4, 0x400) io_submit(r1, 0x4, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000004c0)="2d9bebd2f37266202ead9522249fa73347c8eaba61b227940d5ceea84b687737346f49ac28081ff1d952e22a16b5d3bc8b0deac795ab69a070708597b374c8fc5c05dd0ec61e7e2de3d4914fc0bd4961d3c63eda93b309606be5d34dbf583f6fe87b0c3f20fccfd8e25bcb2b0c201d0245", 0x71, 0x81, 0x0, 0x1, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x100000000, r0, &(0x7f00000000c0)="ca84f06d94dab9529e2801ea1433e849014fb7ac2ab92e4a0d6c89c0f8c6de542eddca656e53783950d008449fce2d23d3518b677492377c5fba3e367cc25ec1dc06c6b07c1a58361be8f3af0ed01f212196478b16128becc43a6fcd8fae62c6674835a245d142", 0x67, 0x3, 0x0, 0x0, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f0000000300)="b896e9df482ac5c0e5ac051002fe045413a3f3326feef9472c7d38e1da16e75150771f583f9f3b66938df47337499e377f5d7760fd6a0fab277ef6bb2f235afdb0133d15eaca23", 0x47, 0x80000000, 0x0, 0x0, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000380)="62bc0c7494325d5f2d35f80aa05d72c957f0ce70be22d5197a80c115c475bf3a467ae72d7877c422e8ef439ed887c47edca9260268335afe2e180c4c4f84b53607911ebefe3eeb9b2ea3907b16f92fb6c1ec034557d467d9522585ccec813598e28f4af4080451444035e9deb8d6e012", 0x70, 0x8, 0x0, 0x0, r0}]) 2018/04/19 08:15:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) 2018/04/19 08:15:02 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a1c1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:02 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xfe}]) 2018/04/19 08:15:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xc33, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r5, &(0x7f00000000c0)='net/sockstat6\x00') ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:02 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:02 executing program 7: r0 = dup(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x100, 0x9, 0x0, 0x3, 0x5, 0xffffffffffffffff, 0x6, 0x0, 0x9, 0x200, 0x9, 0x2, 0x3, 0x813, 0x400, 0xffffffff], 0x2, 0x20080}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x7f}}}, 0x90) 2018/04/19 08:15:02 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a051bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:02 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xf, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) 2018/04/19 08:15:02 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8000, 0x4000) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000080)={0x9, 0xffffffffffffffe0, 0x8be3, 0x2, 0xf6ab}) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:15:02 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x3f00}]) 2018/04/19 08:15:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x1, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x52, r3, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0xc7, 0x7, 0x6, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:02 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x11, 0x100000804, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffbffffffffffe}, 0x4) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000017ff0)={0x1d, r2}, 0x10, &(0x7f0000012ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="080000000700000000000000000000103b6ef45477378432031918ae17d292e913f40e33ca762f5b938706d2269d60f2d06209ec1376bae290a9e8c94404adc2a5e92c4b974b93e53474ac20a6fbf652afbbe186a3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a3f9fee90201ab9d"], 0x48}, 0x1}, 0x0) 2018/04/19 08:15:02 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a181bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:02 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfcfdffffffffffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:03 executing program 7: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="ed62c9f8bb7b03d2399a65797c3a300304f5300d60ddd26e52a1fc15f7458670f42ffbe4a73b5b29544f62bd7d917dd3bfdfdcd3", 0x34, 0x6}, {&(0x7f0000000100)="08fcfccf4f770937df5df2afeef72c0eea73c2dc0c112e976842f2bac5c35a04f557a415699a3e2208063e88063476850edf17c1575366ac665fc8f1048a75991ccd3ce98e2c47c5e23c20b202e90c4fa40ba2c4544580bf343c8e52be774cf97ab0e275ec08d6867d80568bff383a0348f08020b4d9595680e5b3eb2601206d52a0c4f55021823cd4d808fdc3b4dfc5f0b169253ca9022d3df83309c79fee441e13f931a809ea09b088b702ec5a78fa209322ef9513d665ff3519e858", 0xbd, 0x100000}, {&(0x7f00000001c0)="73fc91154fc68a44b1bc0ae078e6927d298531a2fee19a34d9b24bd2de70b717d4aa4a3d786ae9501b681231c4bdbe3c06771527aa0b193f55038098a7fd506d3a374f2119abe4bf644df44dac010f9b1bf976dc49d5d7244fecd9fb7741", 0x5e, 0x3}, {&(0x7f0000000240)="74d22ef9d89c24a41a04d0650182ba6756e17181af39592781f41ddeac6c483b89f58910e24b47d02a3606edb50aa6b33e1774eadd65911739eb35ba0ad3acc99db1da8e6b2d03622985f0c09bd99326cf072d8a2449af0b5d205591a51194c474392b23aa3324866a4edbc7e20b9630e20cd373f310734cf78490c29c9cd28f46e4478082817fee06dc3d3556cb90f2ddd34f4d7f40ac6ecdb3c9ea8b658520e1bbbc97fc52cc10fc9765b881cc54d9fd4e", 0xb2}], 0x400, &(0x7f0000000380)={[{@flush='flush', 0x2c}, {@fmask={'fmask', 0x3d, [0x35, 0x37, 0x37]}, 0x2c}]}) r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000003c0)=""/227) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) sendmmsg(r1, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000010c0)="04", 0x1}], 0x1, &(0x7f0000000000)}}, {{&(0x7f00000023c0)=@rc={0x1f}, 0x80, &(0x7f0000002880), 0x0, &(0x7f0000002900)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}) 2018/04/19 08:15:03 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a211bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:03 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x3100, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:03 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000080)={"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"}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xffffffffffffffe1, 0x80) 2018/04/19 08:15:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1400) 2018/04/19 08:15:03 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xf00}]) 2018/04/19 08:15:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x4, 0x81, [{0x9, 0x0, 0x4}, {0x5, 0x0, 0x8}, {0x9, 0x0, 0x1f}, {0x7, 0x0, 0x3}]}) 2018/04/19 08:15:03 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a071bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:03 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfe, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:03 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8c, 0x101800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x5, 0x0, 0x7}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x202b8080, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:04 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a111bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:04 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x8, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x31}]) 2018/04/19 08:15:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x8004) 2018/04/19 08:15:04 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:04 executing program 7: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xf00}]) 2018/04/19 08:15:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000040)=""/18) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:04 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a291bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:04 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x81, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:04 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x8000000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) 2018/04/19 08:15:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xf00000000000000}]) 2018/04/19 08:15:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x480) 2018/04/19 08:15:04 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a151bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x40, 0x20100) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000080)={0x6e, 0x5a4, 0x2, 0x70, 0x50e, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0x4, 0xfffffffffffffffc}) 2018/04/19 08:15:04 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:04 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x2000000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x200000000}]) 2018/04/19 08:15:04 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a1d1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:04 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x401, 0x100) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000240)={0x2, &(0x7f0000000080)=""/160, &(0x7f0000000200)=[{0x5e79, 0x50, 0x81, &(0x7f0000000140)=""/80}, {0xffff, 0x23, 0x46fa, &(0x7f00000001c0)=""/35}]}) ioctl$void(r1, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000380), 0xc6) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x460) 2018/04/19 08:15:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 2018/04/19 08:15:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:04 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a121bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:04 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffffdef, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:04 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3, 0x0, 0x1}) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000000c0)={0xf004, 0xf002, 0x9, 0x6, 0x7}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:15:04 executing program 7: r0 = socket(0x10, 0x200000000803, 0x800) write(r0, &(0x7f00007c4000)="2600000022004701050007008980c5ff0200000800000000c0e9ff094a51f10101c71f3500b0", 0x26) recvmsg$netrom(r0, &(0x7f000088dfc8)={&(0x7f000023c000)=@ax25={0x3, {"8434321a3329b5"}}, 0x10, &(0x7f0000e11fd0), 0x0, &(0x7f000071f000)}, 0x0) 2018/04/19 08:15:04 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x400000000000000}]) 2018/04/19 08:15:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1200) 2018/04/19 08:15:05 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a2e1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:05 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x4000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffffffffff01, 0x400) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00000000c0)={r4}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000140)=0x1) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="209abb124c97f812c93049b809000ff5", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="110161d100000000"], 0x20) write$rdma_cm(r5, &(0x7f0000000240)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r6, r5}}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:05 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="2e2f6367726f051d2e6370750078c3d3b4bb875517b599b23f3a301733c550312c06a2acf5029a250d54fe7750f0a57e6cd83eb77c44c125bd802249690c0fe1b712b05769b58d283c43ad767e9e4fcab91fc14f32fab35daabc30c42fc845adc8ecb411fda2c0045faa5ef75a9b92b9705729aa27d0919d57974214f67fad28edad63c6b2b2a92e0bed0046dd95a0776dca34d97e135558f0e7c746da8eb1538155b1c1ea524e3a0e153d5fd7a3ef0db924387bd6d9bd9b5ad1d98240fe24153f8d01e916762001e0147a28c9419213b45b2ce9c57fec21692576e3a8ee256ec0f8270feccfdd25b5c13c641f", 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000300)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) read(r0, &(0x7f0000000340)=""/232, 0xffffffffffffffde) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3f, 0x8000) 2018/04/19 08:15:05 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:15:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1a) 2018/04/19 08:15:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x4}]) 2018/04/19 08:15:05 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a041bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:05 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) flistxattr(r1, &(0x7f0000000000)=""/36, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40000) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x4, 0x0, [{0xfffffffffffffffc, 0x1, 0x0, 0x0, @msi={0x1ff, 0x55de, 0x9}}, {0xe245dd7, 0x7, 0x0, 0x0, @adapter={0x56a1, 0x1f, 0x4, 0x100000001, 0x3}}, {0x0, 0x2, 0x0, 0x0, @sint={0x1, 0x5}}, {0x6, 0x4, 0x0, 0x0, @adapter={0x2, 0x0, 0x2, 0x8b, 0x7}}]}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={@empty, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x20, 0x64, 0x2f2e, 0x100, 0x5, 0x0, r4}) socket$pptp(0x18, 0x1, 0x2) 2018/04/19 08:15:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:05 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfdfc, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:05 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000040)={0x5, 0x0, [{0x0, 0x3ff, 0x8, 0x2b9, 0x1}, {0xb, 0xff, 0x1, 0xd024, 0xffffffff80000000}, {0xc0000002, 0x0, 0x0, 0x4b9, 0x3}, {0xc000001f, 0x5, 0x8, 0x8001, 0xfffffffffffffffa}, {0xe, 0x9, 0xca33, 0x1, 0xffffffffffffffe3}]}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) 2018/04/19 08:15:05 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a141bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xffffffff000}]) 2018/04/19 08:15:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000) 2018/04/19 08:15:05 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) flistxattr(r1, &(0x7f0000000000)=""/36, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40000) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x4, 0x0, [{0xfffffffffffffffc, 0x1, 0x0, 0x0, @msi={0x1ff, 0x55de, 0x9}}, {0xe245dd7, 0x7, 0x0, 0x0, @adapter={0x56a1, 0x1f, 0x4, 0x100000001, 0x3}}, {0x0, 0x2, 0x0, 0x0, @sint={0x1, 0x5}}, {0x6, 0x4, 0x0, 0x0, @adapter={0x2, 0x0, 0x2, 0x8b, 0x7}}]}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={@empty, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, 0x20, 0x64, 0x2f2e, 0x100, 0x5, 0x0, r4}) socket$pptp(0x18, 0x1, 0x2) 2018/04/19 08:15:05 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x4, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000280)={[{0x0, 0x7, 0x5, 0x0, 0x5, 0x8, 0x1, 0x2, 0x200, 0x100000000000000, 0x19, 0xb4, 0xc0c}, {0x4, 0xffffffff00000001, 0xb, 0x100000001, 0x8, 0x8001, 0xe05, 0x0, 0x3, 0x3, 0x100, 0x7fff, 0x4}, {0x7fffffff, 0x100, 0x3, 0xba, 0x56a, 0x3e, 0xfffffffffffffff8, 0x3, 0x0, 0x200, 0xfffffffffffeffff, 0x2, 0x9}], 0x6}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000003c0)='/dev/dmmidi#\x00', 0x0, 0x90000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x100, 0x400) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000000000000400000000000000800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0000001400000000"], @ANYBLOB="00000000000000000240010000000000b100000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000062f5b139f80b1f34c7bc993dfe01ee21b35620efb97c0431707d53534a6f4a3996d47056b2b304f05fd767f30849ea2ad7e49c39f7b42d03bdcdb9ab875bf06da85f5700000000"]) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x40) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r5, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000100)={r6, 0x80000, r5}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000300)) 2018/04/19 08:15:05 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a241bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:05 executing program 6: syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0xced, 0x5, &(0x7f0000000380)=[{&(0x7f0000000100)="a01fbb5ced336d4afc059196b7994cf4cd9c81e1d0d94126bcf7a21f44380bc7a95e90effd4b12a3563232214ae0ec9b6f76ba610ceedc6b54d8abaa6d4b3e71008a", 0x42, 0x10001}, {&(0x7f0000000180)="4b22a70d4ada87128fc1f1a29c285ab0da41b4972cedd63ac431959b7af57905f21d291de9bbbd39a536cff70d8af8d2993764793eaabf98be5dea7efa25e6f627929b304ff2d3bc6283272376634ab8afddb64d96e562565f599679174f20fe1cc63768e9737516ff2c7dbb3ef0fc62246e624cabc0765419a5063bc1570b42a608523571bdef259236702f952cdcfd27f4fd918b8a0c87b9dd695623a83cc2ab767a7664549445", 0xa8, 0x6e27}, {&(0x7f0000000240)="994aed8db72d22e3dc1e64d9cda41009c6a1b6d0c6b244faf4d7420135fc5b40d62fce0c2195a5148e09cdd4059e62571bc8b3588149b6c8b40baa8aaeffd43106532be6bdebec0ac7f024bfd06574da5119d877685b7e4b1e3abb74ee21", 0x5e}, {&(0x7f00000002c0)="f650afbc87b22078", 0x8, 0x101}, {&(0x7f0000000300)="d644d529cc4b20a8431abe744c912283c60194a7dbebd16e2a59633e3cd94f366c631c4d845b3c45454f36ff5d3b2cb695bc59a4d4c69fb8488a5b89d8ad162bc5023168331249f3ae333053850711c990897982bf8fe35fa71668a89ecde049e7576f770df3311d9b", 0x69, 0x100}], 0x1000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7fffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000400)={0x3000, 0x8000}) 2018/04/19 08:15:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x100000000000000}]) 2018/04/19 08:15:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1700000000000000) 2018/04/19 08:15:05 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a0d1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:05 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x81, 0x0, 0x2, 0x7fff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, r1, 0x10001, 0x8001}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:05 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x20202, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x7, 0x1, 0x2, 0x8, 0x8, 0x10001}]}) 2018/04/19 08:15:05 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xfffd, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:05 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a2c1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1a000000) 2018/04/19 08:15:05 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x31000000}]) 2018/04/19 08:15:05 executing program 7: r0 = perf_event_open(&(0x7f0000032000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000123000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00006de000)=""/50, 0x32) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000580)) chown(&(0x7f00000001c0)='./file0\x00', r1, r2) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x80) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="b123f9515746900cdeca8da9266e6cef", 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000009500000091b7946a6257d71646ec8174dc53e6b0448a4825a45f6866c64454e680ddd8dae200be214aefc28350046c6cbd91a3257bef82ec374c0762781d9336638855ebda4c0b723a6f954d2e312c614a05f08e8b411a3f87028b5b450c7878a3d7a37f17279cc02e47a6eb9d258bb06edff6c8015007b9cd8ee6b0dde60d9c4013072a4d59437a959a08180000000000000000000000000008dbb767f6839207a9ceb7cb61ba92944d5cce6c3f3626b35bf39a93c092f9898a8d05ba0d38127c2d43f52a63cf89ae8fc2031839394b27d3fdbbdfc1618f6f16b849dd3997529cd54f16d6bf7261a1cb25bc2c72e60a108133d4593749c3daa028d418185d4705fc225431a30a5fbbe9d115a457648e1ed19b9accdfa720b2625fb5183b990d46973aef498800e618324e1657e526b6160383558e81cb70c005fce2731296e8d6e2d9958e575eb2a4e3979ce6dd3eb41361efe3db111eb6a2c10fdf74b073d88d54b7a9ab7cda"], &(0x7f00000000c0)=0x1) 2018/04/19 08:15:05 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x400000000000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0xcb) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:05 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a171bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:06 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/04/19 08:15:06 executing program 7: socket$inet6_dccp(0xa, 0x6, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000005c0)=""/177) 2018/04/19 08:15:06 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xeffdffff, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:06 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a0c1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 2018/04/19 08:15:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xfe0000}]) 2018/04/19 08:15:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:06 executing program 7: prctl$intptr(0x24, 0x800) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7ff, 0x40000) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x0, 0x7fff, 0x4, &(0x7f0000000040)}) clone(0x0, &(0x7f0000b85fff), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x2, r0}) prctl$intptr(0x24, 0x6) 2018/04/19 08:15:06 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a1b1bed0000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:06 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x4000000000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) 2018/04/19 08:15:06 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0xf00, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffba4, 0x403) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000000c0)=""/237) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x1fffe, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x20000000000}) ioctl(r5, 0x800000000008982, &(0x7f0000000000)) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x284000, 0x0) ioctl$TIOCEXCL(r4, 0x540c) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r6, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) 2018/04/19 08:15:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x3f00000000000000}]) 2018/04/19 08:15:06 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1000000, 0x0, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:06 executing program 6: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r1, 0x0) pread64(r0, &(0x7f0000000040)=""/81, 0x51, 0x0) 2018/04/19 08:15:06 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1700132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:06 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x1, 0x200000) r1 = openat$cgroup_ro(r0, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000440)=r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236939000900210008000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de4411007227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f00000001c0)}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000200)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000003c0)={0xff, 0x10000, 0x0, 0x6, 0x2, 0x5}) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="e542c7c50d8ec730a4c4dca9ca35cfc67d372d0c0517d7704561d46aeace7867acf0d1", 0x23, 0xd}], 0x10, &(0x7f0000000180)={[{@fragment_all='fragment=all', 0x2c}, {@metadata_ratio={'metadata_ratio', 0x3d, [0x3f, 0x31, 0x37, 0x0, 0x7d, 0x35, 0x7a, 0x39]}, 0x2c}]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000000899cf3eccd3a310b0f1a63ea6cfba1a6e68a44b36bac758ce834ffe5b92912042c9854932e0e8d0f5b1cfb747febc90edaf9957c63cb178a0de6c943496a3649104de507ec98c52c8ae58b358879d8e0276df982ac2b44a89e8435c91eb115ed9f734e0943990553b84da46646e8"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000380)={0x0, 0x0, 0x2, &(0x7f0000000340)}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) ioctl$void(r4, 0xc0045c77) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000280)=r5) 2018/04/19 08:15:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r4, &(0x7f0000000080)='net/sctp\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:06 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1600132100f404fffffd9872eff0cf", 0x17) [ 279.254255] binder: 23591:23592 unknown command 8 2018/04/19 08:15:06 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) [ 279.283665] binder: 23591:23592 ioctl c0306201 20008fd0 returned -22 [ 279.369807] binder: 23591:23592 ioctl c0045c77 0 returned -22 2018/04/19 08:15:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:06 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x3f00000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:06 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xfe000000000000}]) 2018/04/19 08:15:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x12) 2018/04/19 08:15:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:06 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2c00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:06 executing program 7: getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280), &(0x7f00000002c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = inotify_init1(0x10000080000) dup2(r0, 0xffffffffffffffff) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9800000000000000) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000dacfc9)) mknod(&(0x7f00000003c0)='./file0/file0\x00', 0x45, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000e2d000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r2, &(0x7f0000b28000)={0x1, {&(0x7f00000001c0)=""/207, 0xcf, &(0x7f000072bfce)=""/50, 0x0, 0x2}}, 0x68) bind$rds(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) write$vnet(r2, &(0x7f0000c51000)={0x1, {&(0x7f0000000140)=""/24, 0x4, &(0x7f00005b3000)=""/101, 0x0, 0x2}}, 0x733) write$vnet(r2, &(0x7f00000000c0)={0x1, {&(0x7f0000000080)=""/28, 0xd4691bcf28b2976e, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={{r3, r4/1000+10000}, {r5, r6/1000+30000}}) r7 = syz_open_procfs(r1, &(0x7f0000000300)='net/wireless\x00') pread64(r7, &(0x7f00009f3000), 0x352, 0x0) lseek(r7, 0x0, 0x0) getpid() read(r7, &(0x7f0000000080)=""/93, 0x5d) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) tee(0xffffffffffffffff, r8, 0x3ff, 0xc) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x2}) 2018/04/19 08:15:06 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0x4004, 0x10000}) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x0, &(0x7f00000000c0), 0x2010, &(0x7f0000000140)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c0000f29fa7d1d56a9cf4e958af37a57fd2b3000000006c652c666c7573682c000000000000000000"]) [ 279.425847] binder: 23591:23612 unknown command 8 [ 279.442624] binder: 23591:23612 ioctl c0306201 20008fd0 returned -22 [ 279.462679] binder: 23591:23592 ioctl c0045c77 0 returned -22 2018/04/19 08:15:06 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1300132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:06 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x800000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:07 executing program 6: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x40000000000000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x52, r0, 0x0) 2018/04/19 08:15:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x4000000}]) 2018/04/19 08:15:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x401, 0x200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000000c0)=""/14) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x10) 2018/04/19 08:15:07 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfcfd, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:07 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0800132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:07 executing program 6: syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000240)="e7d66639cf0570367f717adb23c1086b1465cb45170c29ce42fe1515c0980bba0035b1fc80380c1027a97188b2d887ddcd9ec9bc9f6605ed18d1378866df835ec6a4d130fa210468832b116239d4b291fcdc69212bdb1fac44c18ebab3d5bf8e780c9d67953b8e78cff8c5e9e10c1ab32add455d2d072d0ddf3a727c235283d0e12691cea7f3e7abc3152fe29438586ab27d191897e31ddb550af5bd11942bab3f907ad3ed440d2744e6a8eda6946adb125b7a4c18be1f31846af67e545c57cf4c9dab31c607b794075c72de268cd6fa", 0xd0, 0x316dba38}, {&(0x7f0000000140)="c5d8392fa8e63702bbff6a19bc8652fac913002be4a8a27417fd9f6ef2aaa7b509bb3201c1979ff11b1ac5fd66bd8844f5648876d89c7885a34782b65de0ad8c64acf8bf37384bf42c69ef9e0eb5df4028be8422e7debb118742", 0x5a, 0x2}], 0x800020, &(0x7f00000001c0)={'nouuid,', {[{@nogrpid='nogrpid', 0x2c}, {@ikeep='ikeep', 0x2c}, {@sunit={'sunit', 0x3d, [0x93dbe4444a158175, 0x0]}, 0x2c}, {@usrquota='usrquota', 0x2c}, {@uquota='uquota', 0x2c}, {@discard='discard', 0x2c}]}}) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000014300)=ANY=[@ANYBLOB]) 2018/04/19 08:15:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:07 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed000e132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:07 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x8, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x3100}]) 2018/04/19 08:15:07 executing program 7: unshare(0x60000000) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$KDMKTONE(r2, 0x4b30, 0x6) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000340)={0x8, 0x5a, 0x8, 0x6, 0x8}) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'tunl0\x00', @ifru_addrs=@sco={0x1f}}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000300)={0x0, r2}) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 2018/04/19 08:15:07 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x900000000, 0x48200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000a5f000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="dfffffffff0000090302004b0000000001"]) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000a5f000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="66b9800000c00f326635000800000f30a50f01ca0f10a5177b440f20c0663508000000440f22c0260f20020f0d9c0800660f66d2ba4100b000ee0f8d0000", 0x3e}], 0x1, 0x0, &(0x7f0000000180), 0x0) 2018/04/19 08:15:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x600) 2018/04/19 08:15:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:07 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000000), 0x3cb) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8, 0x228201) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000040)=0x2) 2018/04/19 08:15:07 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xf, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:07 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed002d132100f404fffffd9872eff0cf", 0x17) [ 280.172681] IPVS: ftp: loaded support on port[0] = 21 2018/04/19 08:15:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:07 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0024132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:07 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x31, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x10000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000140)={r4, r5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000040)) 2018/04/19 08:15:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 2018/04/19 08:15:07 executing program 6: r0 = memfd_create(&(0x7f0000000200)='/dev/audio#\x00', 0x1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280)=0x3a5, &(0x7f0000000380)=0x2) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x15, 0x5, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f0000000080)={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001780)) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{}, {}, {}, {}, {}]}) getresuid(&(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) getgroups(0x3, &(0x7f0000001880)=[0x0, 0xffffffffffffffff, 0x0]) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003400)={0x0}, &(0x7f0000003440)=0xc) r4 = getuid() stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003540)={0x0, 0x0}, &(0x7f0000003580)=0xc) stat(&(0x7f00000035c0)='./file0\x00', &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$random(&(0x7f0000003880)='/dev/random\x00', 0x0, 0x3a1000) sendmmsg$unix(r0, &(0x7f0000003900)=[{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000440)="c7e647e7c96e7c4737853c2e74adbb82ea31dddcc24c518caec013fd6cc527b73078e1abcda3efef504b038912f8fca0f64364fae639", 0x36}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001640)="e3c21deef2c7a7d27e76f2bbbba6f57d886292b3fd2b1777faeb589eb809656e1588bfad988559c553ca1d77d98e6a0d655ebb8f59750ffc9dfbbe89b4bb1fc42cc97d40241a467b5522e66ab2e949f9f81f2265596dcd4ef3704f14bed2609d7cf9f8c184e4b2671535eaba70ff5dc309eac039011df1f52a979c99d547671c6bb07a52a14aee15152cdb6cda926858d8c3ba44291b81e780d2a1a1316513bf7ba887bc06a0e5520d1849ba6f449ca5", 0xb0}], 0x3, &(0x7f00000018c0), 0x0, 0x850}, {&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001980)="9113faa746973ca22295c61f891daf4e78f977c5ae1f105b0ed82803847a4c6e51b8e1580d44909b7b528fae2b566ef2c12466879eb8214c562f37bd230575bea2065a966d0423ded73d5b187da7fa615df77e10e6db13fd6ff3acf64864fc312344d3a1f3dc58f9f43c0a6fb0a8416c14", 0x71}, {&(0x7f0000001ac0)="19fa6c7426daa76d11a71f126b4d0232ea055bda744559dbce0fc3bf3ba8473423a35dbdfa54e8ae997e0bcd03785f257b4efb2cb493600ce0c1c146411a0e5e766a314b87324fea44a391f8bb8808406e967c72b77a099c67faae3d0ae8888a24d3623df46a3cf569e5b58e8a0e66ad15e561c294ba842b786a2fc52b569ebff476fe3ee526dffa15c20c4a082d2e8ce061c27c3e8a58e2d223ae7ec861a86fe25cf908372b661e0ead875bcad762b825654c67b7d1407d79b10c60054498d6032e0eded0af3bbb322c2c2ea9cf19b7da5447ff4c086a442deab22e6fc0ea5a06ae8f68ac5eafd1", 0xe8}, {&(0x7f0000001c00)="8c265e6863c182297bc6bff97b2af1d981afeaa8972d745684c4cf8f609e7e89c44413b771cb3d1ae2c4a4de1b55cc7c59120ff05000d4220de723fe1e448b598359b033c208cc9586115e70291fd974de59fa9954683ec209f41d2c312d1a385bba3700849c98105c05c64ace92e93909d77cb866f73d", 0x77}], 0x3, &(0x7f0000001d00), 0x0, 0x11}, {&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000001dc0)="294c7f2f507eebd1933af82f81616830202e3b2c26c2c30567606cdfe34a29d611baa3d0c0c60985fcf9063f4410cb35ba8421bd08", 0x35}, {&(0x7f0000001ec0)="e159936545b360c9d95fecb268fdf8076123f202673137c13f4f5a752af8bfca15a685ce46f2b7d9bb443bb858be5a670facb0aa8bfed02bcf6c4614ae4ce7d8c99d614a204093bbc7492edf27731e6b5dbb9afac83b43a0ea4a4c13a705a42340cdfb2e864ddfd57b2a847d265479537c2639d7574c59e784b2a0e715411e459387c47026ecdc0e229c0158574f3d42bd307702047c797c8693ee78865d3403c7d25e8c", 0xa4}, {&(0x7f0000002080)="54ab7a0269f7e7b44caca79b40876c8823b1d863aa1ba87eb2736a0f99fcfe97b2f35cc861dd4c3748fd7588", 0x2c}, {&(0x7f0000002100)="637420ab6eee5c8eebd757b673532209494a3cf4903d74ebac9cd1f6bc4c451455395197a3e9eac3bb8acba05a00e8eac81b28802f4caaf70fe2fc158411484cb0625d4318001bdaf62f87b2252bf4773ee069e7b0de431b983dfef5f08cea46881a5b169dcf6508f7f203209890c30658da1974b4f425eb9be96aeea6", 0x7d}, {&(0x7f0000003180)="75f9118779e7c7fd0bcc109961f3cd5ea88fc6051217515886f0d0c9ea17d411a599c55212ff21c4d625009a149d6bd4b8fd5c5555f50267c49249ef309583be321cd2abe82e69adf7997ecfbe28f53bb673b24048a6856dfb5742212aa60360d93b1cb9cac0d83675ead0f02237c5b0b5377e8f73ef5e90d0f1d1d2d7ec7c0b409fe4b678d5089c05e05e7774c612230323c2de08f4acfb79ac2b8dc6f6c6bf68a404b1de38bbfed6b363de219a68a329ad7147b252e3725eaff0ffe07095d90feea4ed3a9c86db53d30b3b1752713f2ef7e2efc3cf7d42c21644769b95882c3eda9c6c5d", 0xe5}], 0x5, &(0x7f0000003680)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000000300000000000000001000000011ee952", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}, {&(0x7f0000003780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000003800)}], 0x1, &(0x7f00000038c0), 0x0, 0x40}], 0x4, 0x4000) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x1c) recvmsg(r2, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0x2c3, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) getpid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast, @in=@rand_addr}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0xffff, 0x8080) 2018/04/19 08:15:07 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffc5, 0x0, 0x0, 0xffff8000}, [], {0x95}}, &(0x7f0000e6bffc)="f45010", 0x1, 0x2ae, &(0x7f000000d000)=""/153}, 0x48) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x24b, 0x80080) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000040)=""/8) 2018/04/19 08:15:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x2000000}]) 2018/04/19 08:15:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) [ 280.405301] : renamed from tunl0 [ 280.454421] sock: sock_set_timeout: `syz-executor6' (pid 23751) tries to set negative timeout 2018/04/19 08:15:07 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0015132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:07 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xeffdffffffffffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) [ 280.554470] sock: sock_set_timeout: `syz-executor6' (pid 23751) tries to set negative timeout 2018/04/19 08:15:07 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x2}]) 2018/04/19 08:15:08 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:08 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="f30f6fbe01a9653e0f0766b9690a00000f3226f326260f0f3e5084ae66b9800000c00f326635000800000f30f30f218eb800068ed00f01df640f38f16cffb810058ed0", 0x43}], 0x1, 0x0, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000500)="0f005c0666b8ef0000000f23d00f21f86635300000010f23f866b9770b000066b80000008066ba000000000f30f20f35f30f1bcff4650f01cabaf80c66b8c261a58266efbafc0cb874daef0f236d0f32", 0x50}], 0x0, 0x0, &(0x7f0000000040), 0xffffe1e) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'ipddp0\x00', 0x2000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/19 08:15:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 2018/04/19 08:15:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x2, r1}) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000080)={0x1, 0x80}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) dup(r1) 2018/04/19 08:15:08 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x8000000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:08 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000e8efa7)="dbef803e3d9f5de1e52055bb7c8a326fe46092b6682d9ad789c5d7acad0e771f13d8cb59029b011ded54a09c41c6cfcfbcd743cc665c32af223d42438b496a0304891c88697aff07d4a70f330e6fe3a1c9c76f314ffab329", 0x58) writev(r0, &(0x7f00001b6f90)=[{&(0x7f0000e43000)="e59bc053dce404317bb51f597ea6feb27c6371100ca6f5c53ded1c2f0fd1c92c1f8082c212f7feadb3af", 0x2a}], 0x1) read(r0, &(0x7f0000000040)=""/45, 0x2d) write$evdev(r0, &(0x7f0000d20f58)=[{{0x77359400}}, {}], 0x30) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c699d89463e917ca26b2e643058befa83536e0478408f1d4cfa115dc0a73a2adf7d4620d2187b8d79304c86b5a615204d6694"], 0x2e) 2018/04/19 08:15:08 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2f00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:08 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfefdffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:09 executing program 7: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1d9, &(0x7f0000000080)=[&(0x7f0000000040)={0x5900, 0x0, 0x4, 0x1, 0x0, r0, &(0x7f0000000000), 0x400000}]) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000140)={0x1, 0x8, 0xffff, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x8001, 0x5, 0x401, 0x1, 0x8, 0x401}) 2018/04/19 08:15:09 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000bc2f2c)=""/212) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x8, 0x4, [0xffffffffffff8cfa]}) 2018/04/19 08:15:09 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0f00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x300, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000180)={0x7fffffff, 0x1f, 0x8, 0x5, 0x6, 0x7fff}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0x4, 0x9, 0x4, 0x5, 0x2}, {0x5, 0x9, 0x867, 0x0, 0x4}]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000000040)) 2018/04/19 08:15:09 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xf00, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1b00) 2018/04/19 08:15:09 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x20000000}]) 2018/04/19 08:15:09 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2e00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:09 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfdff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:09 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200002) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000001c0)=""/52) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x15}}, 0x14}, 0x1}, 0x0) 2018/04/19 08:15:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x1700) 2018/04/19 08:15:09 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xf}]) 2018/04/19 08:15:09 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0900132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:09 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfcfdffffffffffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:09 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0x100000004}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000eeb000)={r1, &(0x7f0000eed000), &(0x7f0000eee000)="13"}, 0x20) dup2(r0, r1) 2018/04/19 08:15:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x52, r1, 0xfffffffffffff7fd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:09 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0019132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0xe0fe) 2018/04/19 08:15:09 executing program 7: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x44000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0xb62b}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x5, 0xe2ae, 0x10001}, &(0x7f0000000200)=0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3ff) r3 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x20840) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) 2018/04/19 08:15:09 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x3100000000000000}]) 2018/04/19 08:15:09 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2a00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:09 executing program 6: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'gre0\x00', @ifru_flags=0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0xd, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000002800)={'bridge0\x00', &(0x7f0000000000)=ANY=[]}) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x80a00) ioctl$KIOCSOUND(r0, 0x4b2f, 0xdc4c) 2018/04/19 08:15:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:09 executing program 7: prlimit64(0x0, 0x1, &(0x7f0000000680)={0x1, 0x26}, &(0x7f00000006c0)) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="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", 0x4d1, 0xfffffffffffffffe) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x8b5, 0x8, 0xffffffffffff8000, 0x1}) 2018/04/19 08:15:09 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x700000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:09 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x3f000000}]) 2018/04/19 08:15:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x13000000) 2018/04/19 08:15:10 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2100132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:10 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000fd7000)={&(0x7f0000139ff0)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f000043cfff)=[{&(0x7f0000718f0a)="be", 0x1}], 0x1, &(0x7f000036cfa0)}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)="11", 0x1}], 0x1, &(0x7f00000c3000), 0x0, 0x4}, {&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x20, @remote={0xfe, 0x80, [], 0xbb}, 0x1000}, 0x1c, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x80100) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000180)={r2, 0x1}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x0, r0, 0x1}) ioctl$KDDELIO(r3, 0x4b35, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2018/04/19 08:15:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x0, 0x5, 0x4, 'queue1\x00', 0x5}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000200)=0x3000) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000100)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) 2018/04/19 08:15:10 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffdfc, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xf0ffffff0f0000}]) 2018/04/19 08:15:11 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000bbfe8)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2040) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r4, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x9f42, 0x7fff, 0xffffffff, 0x8, 0x2, 0x2, 0x30ff, 0x4, 0x9, 0x78, 0x1, 0x3}) 2018/04/19 08:15:11 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0d00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) 2018/04/19 08:15:11 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x8000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:11 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0xfffffe84) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x0, &(0x7f0000000180), 0x1040082, &(0x7f00000001c0)={[{@nobarrier='nobarrier', 0x2c}, {@hostdata={'hostdata', 0x3d, '/dev/infiniband/rdma_cm\x00'}, 0x2c}, {@noacl='noacl', 0x2c}]}) write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400a05e68865cfd", @ANYRES32=r1, @ANYBLOB="10000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x90) socket$l2tp(0x18, 0x1, 0x1) write$rdma_cm(r0, &(0x7f0000000000)=@listen={0x7, 0x8, 0xfa00, {r1}}, 0x10) close(r0) 2018/04/19 08:15:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) r4 = shmget(0x1, 0x4000, 0x848, &(0x7f0000001000/0x4000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000080)=""/65) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'gretap0\x00', @random="f05300146b0b"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:11 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed000b132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:11 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffffb, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:11 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ifb0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0xfffffffffffffe49) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 2018/04/19 08:15:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x1000000}]) 2018/04/19 08:15:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:11 executing program 7: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0xfffffe62) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendto$unix(r0, &(0x7f0000000180)="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", 0xe81, 0x0, 0x0, 0x0) 2018/04/19 08:15:11 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0011132100f404fffffd9872eff0cf", 0x17) [ 284.015789] device bridge0 entered promiscuous mode 2018/04/19 08:15:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) [ 284.179251] device bridge0 left promiscuous mode 2018/04/19 08:15:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000080)={0x96, 0x3, 0x3, 'queue1\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = msgget$private(0x0, 0x90) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000180)=""/165) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:11 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xf4ffffff00000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:11 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0017132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:11 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x200, 0x1000, 0x7fffffff, 0x100000001, 0x1ff, 0x15}) fcntl$lock(r0, 0x8, &(0x7f0000013000)) 2018/04/19 08:15:11 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) connect(r0, &(0x7f0000000200)=@hci={0x1f, r1}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000aef80)={0x5, 0x810, 0x0, {}, {}, {0x100000000000000}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x66}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000280)={0x6, 0x1cb, 0x3}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2018/04/19 08:15:11 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x31000000}]) 2018/04/19 08:15:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 2018/04/19 08:15:11 executing program 6: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="9a148be70e76", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0xfffffff5], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x294], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x3, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 2018/04/19 08:15:11 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0xc2040) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000001800)=""/222, 0xde}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) sendmsg$nl_generic(r0, &(0x7f0000016000)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f00000001c0)={0x14, 0x16, 0x301}, 0x14}, 0x1}, 0x0) 2018/04/19 08:15:11 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed000a132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:11 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xeffdffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:11 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev={0xfe, 0x80}}, 0x1f2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00'}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000000000006a00000000000000020000000000000081000000000000000101000000000000040000000000000000800000000000000001010000000000001fa5a81d94e1296fe7b15a4e0fd1da01000000000000008d181511f1adeeab8f8cb20000000092000000000000000000000000000000"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) setsockopt$inet6_mreq(r0, 0x29, 0x19, &(0x7f0000000080)={@empty, r1}, 0xfffffffffffffcc2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000180)={'gre0\x00', 0x9}) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000300)={0x9, 0x577e}) getdents64(r2, &(0x7f00000000c0)=""/99, 0x63) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000002c0)={0x9, 0x8001, 0x0, 0x10001, 0xf40, 0x4, 0x1, 0x3fe0000, 0x5, 0x9, 0x3ff, 0x3}) close(r0) 2018/04/19 08:15:11 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfe, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x604080, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x200000000, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0x100000, 0x108000}) 2018/04/19 08:15:12 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x31}]) 2018/04/19 08:15:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:12 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ioprio_get$pid(0x0, r1) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(r1, &(0x7f0000004580)='net/snmp6\x00') readv(r3, &(0x7f0000000740)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}, {&(0x7f00000005c0)=""/68, 0x44}], 0x5) mkdir(&(0x7f0000000100)='.', 0x0) unlink(&(0x7f0000000640)='.') r4 = getpgrp(0x0) sendto(r3, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/hwrng\x00', 0x0, 0x0) preadv(r3, &(0x7f00000022c0)=[{&(0x7f0000001140)=""/115, 0x73}, {&(0x7f00000011c0)=""/96, 0x60}, {&(0x7f0000001240)=""/71, 0x47}], 0x3, 0x5) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x7, &(0x7f0000002500)=[{&(0x7f00000002c0)="0ea9f74ad8249dcba3fe4e4544ca2697ea5b9b64535c561a714db5b0e39b9089a80e52f5344269a2ed332413d2c015c5fd30d10d24", 0x35, 0x80000001}, {&(0x7f0000000b40)="7bad57655e13e2cf4676b1654570602fef84f37d637ffa6227fef5005b28cf5785b75f3b82292adda6eaaa04d1e2d72a551c5dc94aa479806b2593863e876d59e28209322afdfd2bd400933e783c1f1ba7be900dfef5232a1da8b3dfb230056bdc671242c3097bf8a3647cce18585e09e1508e50662d476f8a387366b8fa08694ecd806bae0373b6685abd6c9281bd7282197978488952e65650b39300902947cf298a9ba5", 0xa5, 0x40}, {&(0x7f0000000c00)="5d082a38e0d51c3bc5598734c93eb58b34d154bb066e61b8b6c81ad22dcf87a58d26b8132759710331d973ca574a24a4205b72bd86356277fac505ca75036a1a935639a4f164f14b9bd5fd44310fe01d91a4e2c19177cf30e79a4bcc390dd4c28e6bba7dfe0af2195552aa4d206b1aa8642eb7f1e209537f0d7515c0a01e5cb5f33ea863deb28c805a8c991b0cc469d4ec2eca0a9a3161a2aa8c44b2", 0x9c, 0x4}, {&(0x7f0000000f40)="60329a52ef348625611413a3647026c71ad729a8330f027dfe81f8c2cb3720550578e5c38832be1b5042be5fa7aeba4985e63b7d16e3bee5265df02bec63872a64825c5574aea101ecc5a8dfc219febf629b105c89464cfd77e99f75641eafd5c4f96ab7fe90b626df25f2a96720d47dadd25674b745abad0be283d810900c62829fabcfe0f345cfdd2bc3dbbd323419d84c020ad6036d92a7c307664857d41f79ac950e354d75a63b13146e2d2bad67c6742c9d282466348407fb160abc0a2322d11f1782b25b5376293bae04de5cf9abeeb30cb3ea632d764718c36969eda9", 0xe0, 0xff}, {&(0x7f0000000cc0)="d26cdb116b1265d6da38ed87c1de768ece03befaf78ee8beefdfd0986132b0cfe287be8bf198bc795b0e8a00b00216566bd7c579e8d4d055b69ecba60bb20964a4fd76f81df40677dbbcd82045b15c9bc13bedc2318985e49ea14304c7bb5c3e", 0x60, 0x1c}, {&(0x7f0000002400)="0ce68b8e7f71abccd6ec58e658ff381a67202c1d5b7e6a771a209c7f2895241ab22c0bac7b080bafca44a2c0c2bf7ede5efe60a6dbe48c1a374355ea910a9875b14f1f177ee366fc3738e9306d3eefa79cf1c57a535f5653e8f8769a66d8811ceea33630b350ab1cf6da148e0a8a33d79fa74a48d8ed7eed694d45b0a23f8e5fdf294081d0387a7526a4f8c2549104140dd248240fe4c4d6f8cd923d678ac460678013eb445fb4e92a486f452bff689e7bcc9ddfd25db474d300129f188933ca808157a0c849ccfb9b1b94934d800377f759187c190554c0a38c42e0214d038747", 0xe1, 0xffff}, {&(0x7f0000000880)="451cd2ad1033afdbba6f64a19f3df6b7ce0057971db84fee38d2a4a67248a0f056e0b352", 0x24, 0x7f}], 0x10, &(0x7f0000000a00)={[{@errors_continue='errors=continue', 0x2c}, {@umask={'umask', 0x3d, [0x30]}, 0x2c}, {@check_strict='check=strict', 0x2c}, {@flush='flush', 0x2c}]}) ptrace$peek(0x1, r4, &(0x7f00000001c0)) sendmsg(r5, &(0x7f0000000d40)={&(0x7f0000000680)=@pptp={0x18, 0x2, {0x3, @loopback=0x7f000001}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000700)="16b9f8f0d0439b4492ebb90f1bd52cda1a4250a764e61d5af3309295788cfe926b23685b7fad7e8ec1538dd162126442ced211237ee5b4649bed6c", 0x3b}], 0x1, &(0x7f0000004a80)=ANY=[], 0x0, 0x40}, 0x4040) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243") r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000004500)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002380)={&(0x7f00000045c0)={0xbc, r6, 0x0, 0x70bd29, 0x25dfdbfd, {0x3}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x21}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x22}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3c0}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80c4}, 0x4) perf_event_open(&(0x7f0000004680)={0x5, 0x70, 0x1, 0xfffffffffffffff8, 0x7fff, 0x2, 0x0, 0x5, 0x4010, 0x9, 0x1, 0x7a45, 0x0, 0xe8a, 0x1ff, 0xe35, 0x7f, 0x4, 0x3d, 0x100, 0x10000, 0x4, 0x0, 0x2, 0x358c, 0xeca, 0x0, 0x4c7, 0xffffffff, 0x885, 0x2f400000000, 0x4, 0xbc4, 0x4, 0xa0000000000000, 0x3f, 0x81, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000004540), 0x1}, 0x800, 0x4, 0x88, 0x1, 0x156c, 0x400, 0x6}, r1, 0x5, r0, 0x3) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f0000000640)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f00000035c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x2a02000}, 0xc, &(0x7f0000003580)={&(0x7f0000003600)=ANY=[@ANYBLOB="18010000"], 0x1}, 0x1, 0x0, 0x0, 0x4004}, 0x80) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000980)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada66630b7c485101aed5445083e730ff8b5440e11cd5f18a8f1073ed79ac9a1b63daac57dee71c79501992acf") ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000dc0)={&(0x7f0000000d80)=[0x8000, 0x0, 0x0, 0x401, 0x8], 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0xbe1, {0x2, 0x5, 0xee63, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd9, 0x80000000, 0xffffffffffffff01, 0x0, 0x0, 0x9025, "8aeb4026b67235fa3e4076f0e017b01b3029555d90b1e479d93de22b0ea450ff"}}) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) syz_open_dev$sndtimer(&(0x7f0000003440)='/dev/snd/timer\x00', 0x0, 0x4000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getgroups(0x6, &(0x7f0000000b00)=[r2, r2, r2, 0xffffffffffffffff, r2, 0x0]) 2018/04/19 08:15:12 executing program 7: mlockall(0x3) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x48740, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x100) 2018/04/19 08:15:12 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xf00000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:12 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed00ff132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:12 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x100000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:12 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed002b132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:12 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x100000001, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000001c0)=""/167) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x4000019980330}, &(0x7f0000000080)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) 2018/04/19 08:15:12 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x700, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:12 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000240)={0xfffffffffffff899, r3, 0x0, 0xb8}) 2018/04/19 08:15:12 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xf000000}]) 2018/04/19 08:15:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0x3f, 0x5, 0xa7cb}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) shmget(0x0, 0x4000, 0x54001400, &(0x7f0000018000/0x4000)=nil) 2018/04/19 08:15:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:12 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x7, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:13 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1400132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:13 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00006cfff5)='/dev/hwrng\x00', 0x0, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000b53000), 0x0, 0x0, &(0x7f00008bcff8), 0x8) mq_getsetattr(0xffffffffffffffff, &(0x7f00007a2fc0)={0x2}, &(0x7f00006aafc0)) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x11c3, 0x362b28ef, 0x6, 'queue0\x00'}) 2018/04/19 08:15:13 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1500132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:13 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000240)="a01a8bd1ca7d78d2afbc9c68c807ca96a7deba9a4e32d420d16ffeb8255a65525cafe8d213f2203016bf6dd652f6af0f6798d64525b6b14324f4a689152201edc9882b5b448fa836041ab803c900c86249ed9786d15f11b3f153099b6dc9d1a7b7efbc3af2c7b7800382a3267764824f6ffe43027d8197acb3fdd2ef5476caeff3570a8e3a2d1fb66eff1e7ff126a18db1cd0d485ec7c8e958181d2fcf2ee33360cbe7a83e43d06241b3ff8a2f1d78bb62742abcba48d446b964b1a488e575edeac9d0cc") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000001c0)=0x116002) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:13 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffdef, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:13 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x100) r2 = semget(0x0, 0x0, 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0x5, 0x4, 0x3f, 0x8000, 0x9, 0x4, 0x6]) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000000c0)={0x5, 0xd3, 0x3f, 0x40}) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[]}, 0x1}, 0x4008080) 2018/04/19 08:15:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:13 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed001c132100f404fffffd9872eff0cf", 0x17) [ 285.898342] QAT: Invalid ioctl 2018/04/19 08:15:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000240)={0xfffffffffffff899, r3, 0x0, 0xb8}) 2018/04/19 08:15:13 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x2000000000000000}]) [ 285.997059] QAT: Invalid ioctl 2018/04/19 08:15:13 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffdfe, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:13 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed001b132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000240)={0xfffffffffffff899, r3, 0x0, 0xb8}) 2018/04/19 08:15:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000240)={0xfffffffffffff899, r3, 0x0, 0xb8}) 2018/04/19 08:15:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) write(r0, &(0x7f0000000240)="b5de45370766485b595427f278968c1c55a78c02c550f5beb1cf5c603de70bf194fe1ed386af11da47adbf22e2cc20936815398264e4b4533b5249e55ce37618b4e023cd1a2ae3da439138433bbecf73a0aa3cf9d93532072192570b008091c40e7cf870d49a849bb69fa59fb7698026baa72050ee00f5131fe5b198ef9a5d397d9bc19c5993bd3aeeb751c9e76b7fa897d734e9fb8a84e410cb1556ba7b6bac408c6ffa8845e3127d952e3952f987c85d02b3073fe8fd98b4db270a11d6e42e24fbbcf45a752c3b508b", 0xca) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'sit0\x00', 0x100}) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000018000/0x4000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000340)=""/88) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000001c0)={r2}) 2018/04/19 08:15:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:13 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x400000000000000}]) 2018/04/19 08:15:13 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed002a132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:13 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x31000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:13 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000240)={0xfffffffffffff899, r3, 0x0, 0xb8}) 2018/04/19 08:15:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:13 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000240)={0xfffffffffffff899, r3, 0x0, 0xb8}) 2018/04/19 08:15:13 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x200000000}]) 2018/04/19 08:15:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000000c0)={0xddf, 0xbff, &(0x7f0000000240)="b276ebb1c21518b44705fe3f2506d0c2b70ca012817de7ee64c1089d7491c30d640c2dcd2cc504a14c35e41bd93585783c163fff9a6072a77f3c335ae1db5656e3db5e27afcfc9223db888216f63755acff4b5163d479b89ffa38155", &(0x7f00000002c0)="17637dd9be884305a00591b37a401f0392ccd7bdfd0fd2b8f0f249f8442714fb17c5e505f65ab7b1787ef733400826ef0847c180d503ad16215d810c423983af52e00c9cc20dd15c5098fa7ed6ac837843b59e3b18733e7b84575dd5f4176466284f46be34e87e99805d095f16ee3881fb9c0696b8a2cf88787c1dbbf58cca394beabf8463c03aab134b79c94f7c6634a120a62903d16935008ae4162e7d3650b95680b136a5be685e6c41448b1be31989c29cc2efe90714d44e5853710f04b9", 0x5c, 0xc0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) r4 = msgget(0x3, 0x2) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000380)=""/130) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:13 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed000c132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:14 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x2000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000080)=r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x28dd, 0x3) ioctl$void(r2, 0xc0045878) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406400, &(0x7f0000000280)={0x10000, 0x7, 0x6, 0x76, &(0x7f00000000c0)=""/118, 0xa7, &(0x7f0000000140)=""/167, 0x77, &(0x7f0000000200)=""/119}) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000240)={0xfffffffffffff899, r3, 0x0, 0xb8}) 2018/04/19 08:15:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) 2018/04/19 08:15:14 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed001e132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:14 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x3f000000}]) 2018/04/19 08:15:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:14 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0a00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:14 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xffff030000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) 2018/04/19 08:15:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7, 0x0, 0x10001, 0x5}) 2018/04/19 08:15:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:14 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0200132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:14 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfcfdffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:14 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xfe0000}]) 2018/04/19 08:15:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) prctl$void(0x20) 2018/04/19 08:15:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r5 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f000031aff8)={r3, r4}) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000240), 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) 2018/04/19 08:15:14 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0016132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:14 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfbffffff00000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) prctl$void(0x20) 2018/04/19 08:15:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x20) 2018/04/19 08:15:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:14 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0009132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:14 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) prctl$void(0x20) 2018/04/19 08:15:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:14 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfbffffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:14 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bedf000132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:14 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xf00}]) 2018/04/19 08:15:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x290040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x6) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 2018/04/19 08:15:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/19 08:15:15 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2600132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) prctl$void(0x20) 2018/04/19 08:15:15 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x3f00, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2018/04/19 08:15:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x42001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:15 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xf}]) 2018/04/19 08:15:15 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0400132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:15 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x501002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x1fd, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'yam0\x00', 0x2000}) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000140)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000080)) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000000c0)) 2018/04/19 08:15:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) prctl$void(0x20) 2018/04/19 08:15:15 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x4, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200100, 0x0) 2018/04/19 08:15:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000080)={0x401, 0x100, 0x9, 0x1, 0x7fffffff, 0x47}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:15 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2800132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:15 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfdef, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:15 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x4}]) 2018/04/19 08:15:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x1f, 0x0, 0x0, 0x0, 0xa35, 0x0, 0x0, 0x0, 0x47, 0x0, 0x800, 0x0, 0x10000, 0x0, 0x800000000000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:15 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2900132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:15 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xeffd, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 2018/04/19 08:15:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x4000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xffffffff) 2018/04/19 08:15:15 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0013132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:15 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xf000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000240)={0x4, 0x0, [{}, {}, {}, {}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:15 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$void(0x20) 2018/04/19 08:15:15 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x2000000}]) 2018/04/19 08:15:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x45, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x4000) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0xfff, 0x2, 0x7, 0xff, 0x7, 0xff, 0x1, 0x0, 0x7, 0x9, 0x1f, 0x101, 0x5}, {0x52, 0x7, 0x40, 0x0, 0x800, 0xa87c, 0x6e1, 0xffffffffffff7fff, 0x1, 0x100000001, 0xfffffffffffffffe, 0x40, 0xf0}, {0xfffffffffffffffc, 0x0, 0x8, 0x200, 0x1, 0xffffffffffffff34, 0x9, 0x101, 0x2, 0x6, 0x117b, 0x7ff, 0x3}], 0x8}) 2018/04/19 08:15:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:15 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:16 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffff4, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$void(0x20) 2018/04/19 08:15:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:16 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed002f132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$void(0x20) 2018/04/19 08:15:16 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x2000000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:16 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0026132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:16 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xf00000000000000}]) 2018/04/19 08:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) 2018/04/19 08:15:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xb26c, 0x20000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x7a2, 0x9, 0x9, 0x3, 0x8000, 0x9, 0x7, 0x8010, 0x8, 0x7fffffff, 0x9, 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:16 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffd0000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:16 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0023132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:16 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x3100000000000000}]) 2018/04/19 08:15:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1ff, 0x100) 2018/04/19 08:15:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) 2018/04/19 08:15:16 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1900132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:16 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x3f000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:16 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) fchmod(r3, 0x101) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x0, 0xc, [0x8, 0x1, 0x54ab57b7]}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:16 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bedc00e132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) 2018/04/19 08:15:16 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfefdffffffffffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:16 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x3100}]) 2018/04/19 08:15:16 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed3904132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:16 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:16 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x4000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:16 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0x0, 0x4, 0x144d}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 2018/04/19 08:15:17 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2b00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:17 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:17 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x3f00}]) 2018/04/19 08:15:17 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xf4ffffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:17 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0021132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:17 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x10001, 0x5, 0x5, 0x1, 0x8000, 0x200, 0x4, 0x9, 0xc, 0x5, 0x8000, 0x4}, {0x35, 0x3, 0x40, 0x32, 0x7fffffff, 0x804f9f7, 0x100000001, 0x56, 0xf1, 0x8, 0x8869, 0x10000, 0x7c00000000000}, {0x5, 0xfffffffffffffff9, 0x7, 0x3, 0x8, 0x0, 0x10000, 0xfffffffffffffc00, 0x10000, 0x0, 0x6, 0x80, 0x2}], 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x1, 0xf6, &(0x7f0000000040)="88269c3af3d62fba24484ef9c3de6fb0e87748c62db14a8f93ff27cf4c3b8e50fc927658dcd956d07e87687941fe5a26244d558461a04ddbabcb00acb5d5a9652b67d16d2c099d3574aa45dc54845cb6a1475a492af6d83ba7405d9a7913bf25b31919b049136b6b0fc53e74419d8c40e589da48072b2c817bd27e2e3df3b62fdc3a9e78d550bf0f0cab09b8127c217d5e6da9e4448fdeaeee695859c3a0d56e2c5659f15680d6afb8df166642a6eeb2a5981afd9de23edb45e32d5fb795dca93f8fc90b862773467ed60435eb51a64859806a2ca98fe5235f1e5cc96544778baedd2345976cafb97d9552101fe12e252db3c9d8c1d8"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) 2018/04/19 08:15:17 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xffffffff000}]) 2018/04/19 08:15:17 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed000f132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:17 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfdfe, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x10001, 0x2, 0x800, 0x400, 0x3, 0x3e, 0x4, 0x337, 0x40, 0x3dc, 0x800, 0x20, 0x38, 0x2, 0x8, 0x9, 0x9c}, [{0x2, 0x10000, 0x7, 0x100, 0x1, 0xa7fd, 0x0, 0xa668}], "7c01f55b5a425f6947085d00469bb93892faf89cb30f3e3ca5863ab72c8e9adc2fb7089288ecadef2b1745ca2e863be7fdf641ca896b", [[], [], [], [], [], [], [], []]}, 0x8ae) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:17 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed001a132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:17 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x4000000}]) 2018/04/19 08:15:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000040)=""/81) 2018/04/19 08:15:17 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffffffffffe00, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:17 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0003132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xdc, 0x1) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000001c0)={0x9, 0x8, 0x7, 0x41, 0x7fffffff, 0x9}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:17 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1e00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:17 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:17 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfeffffffffffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:17 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:18 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2400132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:18 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x2}]) 2018/04/19 08:15:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0x0, 0x7, 0x20, 0x29c, 0x320, 0x4, 0x38f, 0x6}, "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", [[], [], [], [], [], [], [], [], []]}, 0xa1c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000c80)={[{0x9, 0x5d, 0x5, 0x5, 0x4, 0x0, 0x9, 0x8, 0x7e, 0x80, 0x0, 0x83, 0x80}, {0x4, 0x8, 0x2, 0x9, 0x1000, 0x7c, 0x7ff, 0x5, 0x1f, 0x6000000000000, 0x0, 0x5, 0xe09f}, {0x80, 0x4, 0x3f, 0xff, 0x8001, 0x2, 0xad, 0x8, 0x7ff, 0x8, 0x100000000, 0x0, 0xc4ab}], 0xfff}) 2018/04/19 08:15:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x400203) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000100)={r3, r4, 0xfffffffffffffffa, 0x9, &(0x7f00000003c0)="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", 0x4, 0xffffffff, 0x9, 0x4, 0x0, 0x7fff, 0x5, "c713621547434f2539e5a1f5eec50558f6b28e5544e4f11dac2a2dd984ccbcd86d258cd8bb289a7a480075bddf3719370eda5b26c0ec7faacacac0fd5bfe9f583eff667015d6d3e05b2fed1f206a03960a356911209e5a1f54d3d3e30ddc7c00b82cbc01571b525a52a4d0156327c8e09b7cf510f6dc5c8038f7aaab93e5536b92e52f5d2d7b247d8e70b3a479cde6eca41ecbace37ddf32693c4769d7ddb661b2e94ec7f01e031b98a78a9210ec46b35578612891381ace78d21d2fd6de657cfbce3e6e57e5e603a7208b75596ee85ce5c52a9d20921f70e05d15d2d964c85d3ddf6d0c92f51382311d086d9230"}) 2018/04/19 08:15:18 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x100000000000000}]) 2018/04/19 08:15:18 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x20000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:18 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0300132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:18 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfdfc, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:18 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0700132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=""/4096, &(0x7f0000002240)=""/4096, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003280)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_pts(r3, 0x111000) 2018/04/19 08:15:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:18 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x18001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20000, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000080)=[0x83, 0x5]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:18 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x3f00000000000000}]) 2018/04/19 08:15:18 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x3100, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:18 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1d00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:18 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:18 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x7000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:18 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x101000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000280)=""/120) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x7) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) sync_file_range(r4, 0x100000000, 0x1b72, 0x1) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/19 08:15:18 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0029132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:18 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:18 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x20000000}]) 2018/04/19 08:15:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:19 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x400000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:19 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1100132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0', "22172e3d1bfa49371a1ccf1b3a6c59ec7bf1cdffa7273e9e91a00d1d901a77b5fdf9cdf555a2672e9ed50e9af0d63e42c855b311159d697aebf4805b078bf27f7533c8c3c18e76c2f972d4df35ca5e76044ac2916b70458266acafada5cca342a1d593925fd4dcaf57d105bbd95c3b9d13ae8584b99758ab9ef5f87520f5d412f8251fdcda1f65c36759d0187d8126aadd60e2dea502d2a9e985a86e2e57163691637affbef4b4ff9b9a96c54e6a758a6c"}, 0xb5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', r4}) 2018/04/19 08:15:19 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x2000}]) 2018/04/19 08:15:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:19 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0007132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147}) prctl$void(0x20) 2018/04/19 08:15:19 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xffff0300, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:19 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed001d132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000240)={{0x3, 0x3, 0x0, 0x0, 0x5}, 0x3, 0xf5, 0x40}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:19 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xfe}]) 2018/04/19 08:15:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x5) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:19 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfe00, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147}) prctl$void(0x20) 2018/04/19 08:15:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147}) prctl$void(0x20) 2018/04/19 08:15:19 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0500132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:19 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffffffffffdef, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000000c0)={0x3ff, 0x2, 0x67}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x2002) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000280)=0x3) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x5, r1}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000240)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000100)={{0x0, 0x1, 0x4, 0x81, "30f28a64dbe7c8e2e4e68f19956bf944baf13370bcfe117fedcffb3cb1857b4b082f37077640c14df3a9e17d", 0xffffffff}, 0x0, 0x0, 0xea0, r4, 0xfffffffffffff801, 0x8, "2ff2ee99ec6900f41d62521e998a2e46f35f3f4251bce2c10e4d24b139f2fec698d44baab65bc6369c820830e11bc54d9d80056b578091df2bed4854608c27d9", &(0x7f00000000c0)='/dev/kvm\x00', 0x9, [], [0x48, 0x8001, 0x81, 0x100000000]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f00000002c0)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:19 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xfe00}]) 2018/04/19 08:15:19 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1a00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:19 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x0) 2018/04/19 08:15:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x218}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:19 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:20 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x3ffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:20 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0005132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0xfffffdef}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) r4 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0xffffffffffff8000, 0x40000) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000280)={0x8, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) 2018/04/19 08:15:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x40081271, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000010000e300001bf3ffffff000065000000edff00017db0e6330ee7f9b319d8000018e58d1c43473000e05026fb0000008001d1a7335d5bffff0601d7", "cea40005403500f7ff0002ff000000697ea2d04624edf300dc01867dfffe0200"}) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000000000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:20 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xfe000000000000}]) 2018/04/19 08:15:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:20 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0439132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:20 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffffffffffdfc, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:20 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0014132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1000, 0x80) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000001c0)={0x0, 0x1, 0x5, 0x0, 0x1f}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) syz_open_procfs(r4, &(0x7f0000000280)='net/igmp6\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:20 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x3100000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:20 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0xf0ffffff0f0000}]) 2018/04/19 08:15:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0) ioctl$EVIOCSABS20(r5, 0x401845e0, &(0x7f0000000080)={0x100000001, 0xfffffffffffffffc, 0x9, 0x4, 0x2, 0x8}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:20 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:20 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffd000000000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:20 executing program 6 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:20 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x8}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:20 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x8000000000000000}]) 2018/04/19 08:15:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:20 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0027132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:20 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1b00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:20 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x20) 2018/04/19 08:15:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:21 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffd, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x1300}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:21 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0e00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x10000, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x28) 2018/04/19 08:15:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000000c0)='bond0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) r6 = msgget$private(0x0, 0x310) msgctl$MSG_STAT(r6, 0xb, &(0x7f0000000040)=""/70) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r5, 0xc0086421, &(0x7f0000000180)={r7, 0x2}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:21 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfefd, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147}) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:21 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x4000000}]) 2018/04/19 08:15:21 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2500132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x17) 2018/04/19 08:15:21 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffffffffffdfe, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0xa}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:21 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0600132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = msgget(0x2, 0x40) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000040)=""/35) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0xf) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 2018/04/19 08:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x3}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:21 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x3100}]) 2018/04/19 08:15:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0xd) 2018/04/19 08:15:21 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xffffffff00000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:21 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0018132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0xf}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)=0x8, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:21 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x7) 2018/04/19 08:15:21 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfffffe00, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xeb, 0x60000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffff45}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x400000) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000280)={r4, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:21 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0xfe000000000000}]) 2018/04/19 08:15:21 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed000d132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000040)={'bridge_slave_1\x00', 0xdf9d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x20e0c001}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:21 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x800, 0x0) 2018/04/19 08:15:22 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0xfeffff, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x27) 2018/04/19 08:15:22 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x3100000000000000}]) 2018/04/19 08:15:22 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0c00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/04/19 08:15:22 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 08:15:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x2}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:22 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x3) 2018/04/19 08:15:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0x0, 0x7fff, 0x3ff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:22 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x1000000, r0, &(0x7f0000000000), 0xfe00}]) 2018/04/19 08:15:22 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1800132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:22 executing program 7 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 08:15:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x40000}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:22 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x3f00}]) 2018/04/19 08:15:23 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe08}]) 2018/04/19 08:15:23 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0022132100f404fffffd9872eff0cf", 0x17) [ 295.664672] FAULT_INJECTION: forcing a failure. [ 295.664672] name failslab, interval 1, probability 0, space 0, times 0 [ 295.676393] CPU: 0 PID: 25328 Comm: syz-executor7 Not tainted 4.17.0-rc1+ #7 [ 295.683600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.692966] Call Trace: [ 295.695578] dump_stack+0x1b9/0x294 [ 295.699237] ? dump_stack_print_info.cold.2+0x52/0x52 [ 295.704898] ? perf_trace_lock_acquire+0xe3/0x980 [ 295.709784] should_fail.cold.4+0xa/0x1a 2018/04/19 08:15:23 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0012132100f404fffffd9872eff0cf", 0x17) [ 295.713884] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 295.719022] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 295.724150] ? graph_lock+0x170/0x170 [ 295.727980] ? __might_sleep+0x95/0x190 [ 295.731985] ? find_held_lock+0x36/0x1c0 [ 295.736080] ? __lock_is_held+0xb5/0x140 [ 295.740188] ? check_same_owner+0x320/0x320 [ 295.744527] ? lock_release+0xa10/0xa10 [ 295.748524] ? rcu_note_context_switch+0x710/0x710 [ 295.753486] __should_failslab+0x124/0x180 [ 295.757746] should_failslab+0x9/0x14 [ 295.761565] __kmalloc+0x2c8/0x760 2018/04/19 08:15:23 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed001f132100f404fffffd9872eff0cf", 0x17) [ 295.765136] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 295.770692] ? br_ioctl_deviceless_stub+0x415/0xad0 [ 295.775740] br_ioctl_deviceless_stub+0x415/0xad0 [ 295.780601] ? graph_lock+0x170/0x170 [ 295.784425] ? find_held_lock+0x36/0x1c0 [ 295.788513] ? old_dev_ioctl.isra.2+0x20c0/0x20c0 [ 295.793392] ? lock_downgrade+0x8e0/0x8e0 [ 295.797575] ? rcu_is_watching+0x85/0x140 [ 295.801749] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 295.806980] ? old_dev_ioctl.isra.2+0x20c0/0x20c0 [ 295.811842] sock_ioctl+0x2d5/0x680 2018/04/19 08:15:23 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2d00132100f404fffffd9872eff0cf", 0x17) [ 295.815511] ? dlci_ioctl_set+0x40/0x40 [ 295.819511] ? expand_files.part.8+0x9a0/0x9a0 [ 295.824114] ? kasan_check_write+0x14/0x20 [ 295.828367] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 295.833329] ? wait_for_completion+0x870/0x870 [ 295.837945] ? dlci_ioctl_set+0x40/0x40 [ 295.841941] do_vfs_ioctl+0x1cf/0x16a0 [ 295.845854] ? ioctl_preallocate+0x2e0/0x2e0 [ 295.850285] ? fget_raw+0x20/0x20 [ 295.853757] ? __sb_end_write+0xac/0xe0 [ 295.857756] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 295.863302] ? fput+0x130/0x1a0 [ 295.866603] ? ksys_write+0x1a6/0x250 [ 295.870430] ? security_file_ioctl+0x94/0xc0 [ 295.874867] ksys_ioctl+0xa9/0xd0 [ 295.878347] __x64_sys_ioctl+0x73/0xb0 [ 295.882255] do_syscall_64+0x1b1/0x800 [ 295.886165] ? finish_task_switch+0x1ca/0x810 [ 295.890679] ? syscall_return_slowpath+0x5c0/0x5c0 [ 295.895630] ? syscall_return_slowpath+0x30f/0x5c0 [ 295.900587] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 295.905977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.910850] entry_SYSCALL_64_after_hwframe+0x49/0xbe 2018/04/19 08:15:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) r4 = shmget$private(0x0, 0x4000, 0x810, &(0x7f0000027000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x25) 2018/04/19 08:15:23 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2300132100f404fffffd9872eff0cf", 0x17) [ 295.916051] RIP: 0033:0x455329 [ 295.919248] RSP: 002b:00007efc56c41c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.926977] RAX: ffffffffffffffda RBX: 00007efc56c426d4 RCX: 0000000000455329 [ 295.934259] RDX: 0000000020000040 RSI: 0000000000008941 RDI: 0000000000000014 [ 295.941537] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 295.948817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 295.956101] R13: 0000000000000370 R14: 00000000006f8320 R15: 0000000000000000 2018/04/19 08:15:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x2f) 2018/04/19 08:15:23 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe04}]) 2018/04/19 08:15:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7, 0x2000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x131000, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) r5 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:23 executing program 7 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 08:15:23 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe0f}]) 2018/04/19 08:15:23 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0028132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:23 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x4}]) 2018/04/19 08:15:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x1e) 2018/04/19 08:15:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x10}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235004000000f300f3044da7e3b66ba4300ed6540c075000066ba2100ed363e36f20f013966f3a7410f21802666470f38808145000000", 0x3d}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:23 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2700132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:23 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 08:15:23 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe31}]) 2018/04/19 08:15:23 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x16) 2018/04/19 08:15:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x10002}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x8) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x6, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/19 08:15:24 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x2000000000000000}]) 2018/04/19 08:15:24 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed00f0132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000040)=""/42) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x1, 0x7f}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000000c0)={0x6, r4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2018/04/19 08:15:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0xc0045877, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 08:15:24 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x1d) 2018/04/19 08:15:24 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0b00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x7ffff000}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:24 executing program 3: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x6bd394dc, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000240)={0x2, 0x0, [0x8, 0x80000000, 0x40, 0x3, 0x8000, 0x7, 0x3, 0x1ff]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f00000002c0)={0x80000000, 0x6788, 0x7}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/19 08:15:24 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x3f00000000000000}]) 2018/04/19 08:15:24 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0x2000fe00}]) 2018/04/19 08:15:24 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0025132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:24 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x2a) 2018/04/19 08:15:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x2, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) [ 297.551917] syz-executor2 (25457) used greatest stack depth: 13336 bytes left 2018/04/19 08:15:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000240)={0x10001, 0x6e3f, 0x40}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x3, 0x0, [{0x8eb, 0x0, 0x8}, {0xbef, 0x0, 0x100000001}, {0xbff, 0x0, 0x101}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x17, 0x7, 0x40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:25 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe07}]) 2018/04/19 08:15:25 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed0020132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x901}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:25 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x1000000}]) 2018/04/19 08:15:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 08:15:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x21) 2018/04/19 08:15:25 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x400000000000000}]) 2018/04/19 08:15:25 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed002e132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f00000000c0)={{0x5, 0x9, 0x40, 0xe6, 0x0, 0x101}, 0x1ff, 0x0, 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/19 08:15:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000040)=""/165) 2018/04/19 08:15:25 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x2000000000000000}]) 2018/04/19 08:15:25 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1200132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x5460, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) 2018/04/19 08:15:25 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) prctl$void(0x4) 2018/04/19 08:15:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000080)='M!', 0x2, 0x20000000, &(0x7f0000385ff0)={0x2, 0x1, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000f43ffc)=0xfffffffffffffffc, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x2000000007fff, 0x80000001}, 0x14) sendmmsg(r0, &(0x7f0000278000)=[{{&(0x7f00002b8000)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x80, &(0x7f0000282f90)=[{&(0x7f0000e0c000)='3', 0x7}], 0x1, &(0x7f0000942e20)}}], 0x1, 0x0) 2018/04/19 08:15:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x4bcb0000000000, r4, 0x0, 0x4}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0x8) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="66b90602000066b80000000066ba008000000f3061dbd466b9800000c00f326635004000000f306567650fc79f00000000660f3817ec440f20c0663505000000440f22c0ba4100b80000ef66b9a00b000066b80a00010066ba000000000f300f01cf", 0x62}], 0x1, 0x2, &(0x7f00000000c0)=[@cr0={0x0, 0x80000004}], 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000003c0)={r3, r3, 0x7, 0x3, &(0x7f00000002c0)="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", 0x720cbb8e, 0x14d6, 0x1, 0x1ff, 0xd2b7, 0x1, 0x3, "909890b51cc42ae39dee2be0cc960b53b2aca9db7a98402cf90fcb60272193733352221548dabb095eb83c5e205a0f6612afc4a5226cd92190adc658d6eb09b9aab78b8797f4903a642edbca47b7a646358944e4eb4cc24d549b4c2070a4481f70d9864379c77504fef2f7ce65a75f6ddff68fc1019e56086a9572e7"}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/04/19 08:15:25 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0xfe00, 0xfe00}]) 2018/04/19 08:15:25 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x8c002, 0x0) io_setup(0xc12, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x8800, 0x0, 0x9, 0x1, 0x0, r0, &(0x7f0000000000), 0xfe00, 0x0, 0x0, 0x3f000000}]) 2018/04/19 08:15:25 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed2200132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000080)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x52, r3, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x82, 0x200000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x7) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="d94922b67beb", 'bond_slave_0\x00'}}) 2018/04/19 08:15:26 executing program 0: r0 = socket(0x10, 0x400000000003, 0x0) write(r0, &(0x7f0000000140)="170000001a001bed1c00132100f404fffffd9872eff0cf", 0x17) 2018/04/19 08:15:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x40000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFBR(r0, 0x8983, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/147, 0x8}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) [ 298.710696] BUG: sleeping function called from invalid context at arch/x86/mm/fault.c:1342 [ 298.719139] in_atomic(): 0, irqs_disabled(): 1, pid: 25547, name: syz-executor3 [ 298.726575] 1 lock held by syz-executor3/25547: [ 298.731224] #0: 00000000c27bc5ba (&mm->mmap_sem){++++}, at: __do_page_fault+0x381/0xe40 [ 298.739471] irq event stamp: 9780 [ 298.742912] hardirqs last enabled at (9779): [] kmem_cache_alloc+0x26f/0x760 [ 298.751821] hardirqs last disabled at (9780): [] error_entry+0x76/0xd0 [ 298.760036] softirqs last enabled at (9638): [] __do_softirq+0x778/0xaf5 [ 298.768510] softirqs last disabled at (9557): [] irq_exit+0x1d1/0x200 [ 298.776637] CPU: 0 PID: 25547 Comm: syz-executor3 Not tainted 4.17.0-rc1+ #7 [ 298.783805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.793138] Call Trace: [ 298.795714] dump_stack+0x1b9/0x294 [ 298.799333] ? dump_stack_print_info.cold.2+0x52/0x52 [ 298.804508] ? print_lock+0xd1/0xd6 [ 298.808130] ? irq_exit+0x1d1/0x200 [ 298.811750] ? irq_exit+0x1d1/0x200 [ 298.815371] ___might_sleep.cold.87+0x11f/0x13a [ 298.820035] ? check_same_owner+0x320/0x320 [ 298.824350] __might_sleep+0x95/0x190 [ 298.828139] __do_page_fault+0x3ae/0xe40 [ 298.832195] ? mm_fault_error+0x380/0x380 [ 298.836340] ? update_load_avg+0x2d9/0x2570 [ 298.840648] ? print_usage_bug+0xc0/0xc0 [ 298.844698] do_page_fault+0xee/0x8a7 [ 298.848484] ? vmalloc_sync_all+0x30/0x30 [ 298.852622] ? __lock_acquire+0x7f5/0x5140 [ 298.856844] ? __lock_is_held+0xb5/0x140 [ 298.860895] ? __lock_acquire+0x7f5/0x5140 [ 298.865127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.869963] page_fault+0x1e/0x30 [ 298.873404] RIP: 0010:vmx_vcpu_run+0xa3d/0x25f0 [ 298.878054] RSP: 0018:ffff8801af6373b0 EFLAGS: 00010046 [ 298.883414] RAX: 0000000041b58ab3 RBX: 0000000010000000 RCX: ffffc900032d2000 [ 298.890668] RDX: 1ffffffff10f33a0 RSI: ffffffff811f64ec RDI: 0000000000000005 [ 298.897919] RBP: ffff8801af637588 R08: ffff8801d40dc040 R09: 0000000000000000 [ 298.905172] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 298.912424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.919692] ? vmx_vcpu_run+0xa1c/0x25f0 [ 298.923746] ? debug_check_no_locks_freed+0x310/0x310 [ 298.928932] ? zap_class+0x720/0x720 [ 298.932635] ? perf_trace_lock+0x900/0x900 [ 298.936862] ? zap_class+0x720/0x720 [ 298.940568] ? graph_lock+0x170/0x170 [ 298.944371] ? debug_check_no_locks_freed+0x310/0x310 [ 298.949551] ? perf_trace_lock+0xd6/0x900 [ 298.953684] ? perf_trace_lock_acquire+0xe3/0x980 [ 298.958518] ? find_held_lock+0x36/0x1c0 [ 298.962572] ? lock_downgrade+0x8e0/0x8e0 [ 298.966713] ? rcu_is_watching+0x85/0x140 [ 298.970847] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 298.976030] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 298.981207] ? find_held_lock+0x36/0x1c0 [ 298.985258] ? is_bpf_text_address+0xd7/0x170 [ 298.989738] ? kernel_text_address+0x79/0xf0 [ 298.994133] ? __unwind_start+0x166/0x330 [ 298.998267] ? __kernel_text_address+0xd/0x40 [ 299.002751] ? unwind_get_return_address+0x61/0xa0 [ 299.007665] ? __save_stack_trace+0x7e/0xd0 [ 299.011984] ? save_stack+0xa9/0xd0 [ 299.015600] ? save_stack+0x43/0xd0 [ 299.019211] ? kasan_kmalloc+0xc4/0xe0 [ 299.023086] ? kasan_slab_alloc+0x12/0x20 [ 299.027218] ? kmem_cache_alloc+0x11b/0x760 [ 299.031527] ? sock_alloc_inode+0x6f/0x300 [ 299.035746] ? alloc_inode+0x63/0x190 [ 299.039540] ? new_inode_pseudo+0x69/0x1a0 [ 299.043760] ? sock_alloc+0x41/0x270 [ 299.047471] ? __sock_create+0x161/0x920 [ 299.051515] ? __sys_socket+0x100/0x250 [ 299.055482] ? __x64_sys_socket+0x73/0xb0 [ 299.059615] ? do_syscall_64+0x1b1/0x800 [ 299.063662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.069027] ? rcu_read_unlock+0x35/0x70 [ 299.073076] ? memcg_kmem_get_cache+0x3f1/0x870 [ 299.077745] ? check_same_owner+0x320/0x320 [ 299.082055] ? kasan_unpoison_shadow+0x35/0x50 [ 299.086625] ? kasan_kmalloc+0xc4/0xe0 [ 299.090504] ? kasan_slab_alloc+0x12/0x20 [ 299.094644] ? kmem_cache_alloc+0x11b/0x760 [ 299.098952] ? __schedule+0x809/0x1e30 [ 299.102827] ? save_stack+0x43/0xd0 [ 299.106440] ? sock_alloc_inode+0x6f/0x300 [ 299.110660] ? sock_destroy_inode+0x70/0x70 [ 299.114969] ? kasan_check_read+0x11/0x20 [ 299.119109] ? do_raw_spin_unlock+0x9e/0x2e0 [ 299.123512] ? sock_destroy_inode+0x70/0x70 [ 299.127819] ? alloc_inode+0x63/0x190 [ 299.131605] ? new_inode_pseudo+0x69/0x1a0 [ 299.135826] ? prune_icache_sb+0x1a0/0x1a0 [ 299.140043] ? trace_hardirqs_off+0xd/0x10 [ 299.144264] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 299.149357] ? debug_check_no_obj_freed+0x2ff/0x584 [ 299.154364] ? sock_alloc+0x41/0x270 [ 299.158065] ? __sock_create+0x161/0x920 [ 299.162111] ? schedule+0xef/0x430 [ 299.165641] ? kernel_sock_ip_overhead+0x570/0x570 [ 299.170555] ? putname+0xf2/0x130 [ 299.173996] ? rcu_read_lock_sched_held+0x108/0x120 [ 299.179009] ? kmem_cache_free+0x25c/0x2d0 [ 299.183241] ? __sys_socket+0x100/0x250 [ 299.187202] ? move_addr_to_kernel+0x70/0x70 [ 299.191597] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 299.196423] ? ksys_ioctl+0x81/0xd0 [ 299.200041] ? __x64_sys_socket+0x73/0xb0 [ 299.204180] ? do_syscall_64+0x1b1/0x800 [ 299.208234] ? finish_task_switch+0x1ca/0x810 [ 299.212715] ? syscall_return_slowpath+0x5c0/0x5c0 [ 299.217629] ? syscall_return_slowpath+0x30f/0x5c0 [ 299.222550] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 299.227906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.232739] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.238110] BUG: unable to handle kernel paging request at 0000000041b5e1f3 [ 299.245196] PGD 1b6869067 P4D 1b6869067 PUD 0 [ 299.249771] Oops: 0000 [#1] SMP KASAN [ 299.253551] Dumping ftrace buffer: [ 299.257076] (ftrace buffer empty) [ 299.260764] Modules linked in: [ 299.263944] CPU: 0 PID: 25547 Comm: syz-executor3 Tainted: G W 4.17.0-rc1+ #7 [ 299.272497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.281837] RIP: 0010:vmx_vcpu_run+0xa3d/0x25f0 [ 299.286485] RSP: 0018:ffff8801af6373b0 EFLAGS: 00010046 [ 299.291833] RAX: 0000000041b58ab3 RBX: 0000000010000000 RCX: ffffc900032d2000 [ 299.299086] RDX: 1ffffffff10f33a0 RSI: ffffffff811f64ec RDI: 0000000000000005 [ 299.306336] RBP: ffff8801af637588 R08: ffff8801d40dc040 R09: 0000000000000000 [ 299.313589] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 299.320839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.328100] FS: 00007fbc46b72700(0000) GS:ffff8801db000000(0000) knlGS:0000000000000000 [ 299.336307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.342179] CR2: 0000000041b5e1f3 CR3: 00000001c71db000 CR4: 00000000001426f0 [ 299.349442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 299.356693] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 299.363940] Call Trace: [ 299.366515] ? debug_check_no_locks_freed+0x310/0x310 [ 299.371690] ? zap_class+0x720/0x720 [ 299.375386] ? perf_trace_lock+0x900/0x900 [ 299.379603] ? zap_class+0x720/0x720 [ 299.383300] ? graph_lock+0x170/0x170 [ 299.387085] ? debug_check_no_locks_freed+0x310/0x310 [ 299.392257] ? perf_trace_lock+0xd6/0x900 [ 299.396388] ? perf_trace_lock_acquire+0xe3/0x980 [ 299.401216] ? find_held_lock+0x36/0x1c0 [ 299.405266] ? lock_downgrade+0x8e0/0x8e0 [ 299.409404] ? rcu_is_watching+0x85/0x140 [ 299.413535] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 299.418710] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 299.423882] ? find_held_lock+0x36/0x1c0 [ 299.428281] ? is_bpf_text_address+0xd7/0x170 [ 299.432759] ? kernel_text_address+0x79/0xf0 [ 299.437153] ? __unwind_start+0x166/0x330 [ 299.441282] ? __kernel_text_address+0xd/0x40 [ 299.445765] ? unwind_get_return_address+0x61/0xa0 [ 299.450684] ? __save_stack_trace+0x7e/0xd0 [ 299.454996] ? save_stack+0xa9/0xd0 [ 299.458610] ? save_stack+0x43/0xd0 [ 299.462219] ? kasan_kmalloc+0xc4/0xe0 [ 299.466101] ? kasan_slab_alloc+0x12/0x20 [ 299.470232] ? kmem_cache_alloc+0x11b/0x760 [ 299.474545] ? sock_alloc_inode+0x6f/0x300 [ 299.478763] ? alloc_inode+0x63/0x190 [ 299.482551] ? new_inode_pseudo+0x69/0x1a0 [ 299.486767] ? sock_alloc+0x41/0x270 [ 299.490462] ? __sock_create+0x161/0x920 [ 299.494505] ? __sys_socket+0x100/0x250 [ 299.498461] ? __x64_sys_socket+0x73/0xb0 [ 299.502608] ? do_syscall_64+0x1b1/0x800 [ 299.506653] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.512023] ? rcu_read_unlock+0x35/0x70 [ 299.516066] ? memcg_kmem_get_cache+0x3f1/0x870 [ 299.520731] ? check_same_owner+0x320/0x320 [ 299.525037] ? kasan_unpoison_shadow+0x35/0x50 [ 299.529602] ? kasan_kmalloc+0xc4/0xe0 [ 299.533475] ? kasan_slab_alloc+0x12/0x20 [ 299.537607] ? kmem_cache_alloc+0x11b/0x760 [ 299.541912] ? __schedule+0x809/0x1e30 [ 299.545789] ? save_stack+0x43/0xd0 [ 299.549401] ? sock_alloc_inode+0x6f/0x300 [ 299.553618] ? sock_destroy_inode+0x70/0x70 [ 299.557923] ? kasan_check_read+0x11/0x20 [ 299.562056] ? do_raw_spin_unlock+0x9e/0x2e0 [ 299.566449] ? sock_destroy_inode+0x70/0x70 [ 299.570754] ? alloc_inode+0x63/0x190 [ 299.574542] ? new_inode_pseudo+0x69/0x1a0 [ 299.578762] ? prune_icache_sb+0x1a0/0x1a0 [ 299.582976] ? trace_hardirqs_off+0xd/0x10 [ 299.587194] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 299.592282] ? debug_check_no_obj_freed+0x2ff/0x584 [ 299.597284] ? sock_alloc+0x41/0x270 [ 299.600984] ? __sock_create+0x161/0x920 [ 299.605033] ? schedule+0xef/0x430 [ 299.608561] ? kernel_sock_ip_overhead+0x570/0x570 [ 299.613475] ? putname+0xf2/0x130 [ 299.616914] ? rcu_read_lock_sched_held+0x108/0x120 [ 299.621917] ? kmem_cache_free+0x25c/0x2d0 [ 299.626138] ? __sys_socket+0x100/0x250 [ 299.630099] ? move_addr_to_kernel+0x70/0x70 [ 299.634960] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 299.639788] ? ksys_ioctl+0x81/0xd0 [ 299.643413] ? __x64_sys_socket+0x73/0xb0 [ 299.647555] ? do_syscall_64+0x1b1/0x800 [ 299.651603] ? finish_task_switch+0x1ca/0x810 [ 299.656085] ? syscall_return_slowpath+0x5c0/0x5c0 [ 299.661002] ? syscall_return_slowpath+0x30f/0x5c0 [ 299.665931] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 299.671280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.676109] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.681453] Code: 84 91 00 00 00 e8 a4 ca 59 00 48 8b 54 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 36 19 00 00 48 8b 04 24 <48> 8b 98 40 57 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 40 [ 299.700714] RIP: vmx_vcpu_run+0xa3d/0x25f0 RSP: ffff8801af6373b0 [ 299.706837] CR2: 0000000041b5e1f3 [ 299.710281] ---[ end trace 1a38035a17117b2b ]--- [ 299.715015] Kernel panic - not syncing: Fatal exception [ 299.720797] Dumping ftrace buffer: [ 299.724320] (ftrace buffer empty) [ 299.728019] Kernel Offset: disabled [ 299.731624] Rebooting in 86400 seconds..