# https://syzkaller.appspot.com/bug?id=90cd06695bd4650a5228385b4b02f370ef9c219f
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"procs":1,"sandbox":"","fault_call":-1}
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc080aebe, &(0x7f0000000240)={0x2, 0x0, [0x486, 0xfffffffffffffffd]})
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r3, &(0x7f0000002740)=ANY=[@ANYBLOB], 0x0)
move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000140)=[0x7, 0xa6, 0x5, 0x7, 0x7944, 0x8, 0x80000000, 0x9, 0xfff, 0x3], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xf00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da19}}, 0x14}}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]})
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xaead, &(0x7f0000000240)={0x2, 0x0, [0x486, 0xfffffffffffffffd]})
r6 = add_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280), &(0x7f00000002c0)="a0", 0x1, 0xfffffffffffffffb)
keyctl$link(0x8, 0x0, r6)
timer_create(0x7, &(0x7f0000000300)={0x0, 0xd, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000340)=<r7=>0x0)
timer_delete(r7)
add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140), 0x0, 0x0)
r8 = socket$inet6(0xa, 0x1000000000002, 0x1fe)
ioctl(r8, 0x8912, &(0x7f0000000080))
unshare(0x2000400)
r9 = memfd_create(&(0x7f0000000080)='ppp0\x00', 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r9, 0x2)
ioctl$FICLONE(r9, 0x40049409, r9)
futex(&(0x7f0000fd4000), 0x5, 0x0, &(0x7f00001f3000), &(0x7f0000000000), 0x41000000)
ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000080)={0xffff})
syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00')
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/174)
r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$binfmt_elf64(r10, &(0x7f0000002740)=ANY=[@ANYBLOB], 0x0)
fallocate(r10, 0xfffffffffffffffe, 0x0, 0x4003ff)
fallocate(r10, 0x3, 0x5e89, 0xfff9)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da19}}, 0x14}}, 0x0)