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", 0x1000}, {&(0x7f0000002c80)="2f7accb6a3d52b2edfbdfd2d1250524f504b5c8e1dbd6ea1e0bf01cb5b24607ad8665543a6a1ef90c730e3b4c4953513f72c2239c7a96df147a69e0812d0abb363f29ba75c84e44f7c186b4a61a9fc0b2b3fc17e1f600b1b18877668ed859ff77198e39e", 0x64}, {&(0x7f0000002d00)="e4513f9a1f", 0x5}, {&(0x7f0000002d40)="549cf782e2d7d6488005d5f3dcd8c030fee87e095657e40ac30e9cbf96be9c40a42718e5939a2f886f3e6eb852dc144d298f7ba9025a6f87c6d181d46616270772de2fdad85cc2c5cde8498305dd808c8c3d05b254b8c642390714090d3d6bab0c45621f247500864b52e6a62936775f8db9df5318d442431ce0803f785b6c4fedb71227baff497c8643f00a962e895c2c68ad7fdccc7ca1e0cc9d4f1d881ab2f151c126f9eaa67a88b3e4e0bed3d1cbb5f856c0e8de1fc2dbd845c4be87a875843ff77c8aec60a5b5c858c5e1f5285131b80ca8a59890643831bb2d24192062603803f9e86cce45373a291bfbaa1c1ef38e664d7fedb2fabcb53443db3e45430fd1c0e64386dd574111538334cb692e7168a1de5b2b59db9e79cd569d2b3888067e9ae17a1afc8ce253d0a5c36110fc4b6b973af53ac1fb4df4d23a3b5e6f79fd1d017b2ec0a916633d164c17bbcae0c765305b9243915f84295b38a526b3bdc9ad8923a41bd8cc8b0ee863fdddc1a061477c02fdd6f6cb827e09970adb15c922d1242ec0a44361a1765f6fa1201f8e0b1839f0abbff3d041f9dc9399aaacf6fcfb52ae4176be6bd1df91c7c612abce9fb452a5d86660f5c0fd4f4eb226a816722df4edf44d2bc8ea6efae2b6541f8041ba3a973dee0a5bd1be4fd8de632320b9af9d6e015439e47e3c9c8383ba70e37bc4677ec59f10a470661ae61829bc6c7143dfb1aa0d0a6f695e96f344a79969a389a9263c872d7e47d2d88366e98ffe638560ce0095f3034890c173f5a53e0833bae28c7d2176817131cfe8110dc3b9f85697d6fc73592206680d59b1a34cf518f58f995fcda9affbb57cb06cd4241e7dbee81233698c1164591d37116657b1a648b7e07b88269bdb28cd7e22991e66c8792c109d2c5f6609f0365c741e293f599e7b26882f2c0a33234ac585c927926c3bf2114c6d85c1b88b7ce1701a37383401ada66608b9f772e5e99e0432bdb71302d3771ad8edab47a7a47884298536d052800cc1379148a96bae733e23a30d3853e1f496876a909fc1c9e60668c04f88662e7a3a7ef519b01b8cb90b9d6c61353deb61696c1998575546d9b9eaf47264c703c790cacfe648ae23557bed1c1ea99b0634139d2ce2479f97ba798f3ac0b6702e056691f92c3404bee68d16089e4137b3cbf94c67aebb9a4ccb932d2bb7485fa416c4ae6e16d83aace997f6e65bc6d9dbd31f3c24ebc04e38b07cd50396861e9d433e8c442b8b31b0ba634aee5e30402a31fa781408eeaccd90e0339669d260b4214a5e27ac5bdb2b71bbe497265d5a1aa9e632468f474a6f62814faaeff79d978555decc09ea13c4220824d801e6be2551c23ed544055a49e67cc6d31ffe9005d04d11a46f2a513fae549af3a807f48041b1059832bf08da50935db2af2571438cb48957ac8a7b546390b35fbc4bda156ff0f8e9c6f941e352ccb76c0c1587e2c3c7c961da96a6a3f8ff6201679f59b5f815bb92ba554290daa99b6d5ed9e33243221df8fea19677761e9caff47054de3059a0757868d08741a0fdfa8363a8b6796a09f0d714d58065f4509a9cfa27114f23ce1ed7756e2ef19031608ae47000175b4cba6bbd99d29f9a0bd3661be7ec9dd932908dbb4da5a560a152221813cda85371f98639be94de9ea3ec8fc06936b095a4812e156835dc1507dab01cedf4797790e24145c4fadb36a56d27aee0b0caeee2f03163084bd6885fd67e499d9fa0d9e8dab06cd3d86b809a2c9b982ba0a2fcac77ad6060aeb4cc7dda4d46831b0970dd0fcc550ace6019bbf01fea178390f93a4a1037075dc57dc8ec93bef8817c77a9f05bace2e0e8858a6e800ee9fefd9cb475a9823a1f28228498d1b91f66772fa7033c2503b5cefd4da8a6b1bad8c8ca8dae98bf6a7c7ededfec385b9ece19ae4fba2593f58993df0d5f2fc04e091fe684a1482d5bae3a4fe9c2fe64feefa119f3b5668598c4a9dead500925eaa413b5882f010b55544b2ed4cc8ad74aec532fd25ec491793332bb68409359ccdec6f4ba1fb5208689280bca5a35ee647ffb5f04bb5968c151ccd3fc62a089f7c013b59b7ba2907e7576b0393bf4464b23ef57330d7c6214c2ae2076bd07bf74ce9a18eef0c85d3964b99e1603fefb4d4deb012459d3898bd2699964a437a8612d023cb66d5716c56c4fafc3abe8bd819dd96ec6433524fc2965ea55c9d252e34a43ba4deef5b6f6c95cae58a96d1014b94c0f40249ffbc2e874c3152da0c63a60177cc8dac2450054492cb0fdce17f5478d522239381414cd0d323d9b3713700ebf129816b3677748564a4b1974b7a312d1e9485e37efd053ae9d5050625819f6045dacae0ba816726d454c0b29ed582ec631ae86d09883cb72e8dec83cdfb67a46f3a44bc79419bbd42fb6eca43c104648cfe592348ba1eb7d78a566555cffb4a3c97ddb31c897b3e2fd33864710890f1c607007393b621e0f8284a057db32e9fc21e7c0c8c907b9234f7299d61a8d1c210b12742987f118035c8ba5c36832fee29082526f3bbe68e7707314c0249cdaa4921ef8b31b11a1a2f51dea59c86e4c8bbb5ff7a73d6fd2b1c5c0d4136ff183242b95fd5bc98e6249f6dbf44298b1b6b6f987ee8400a976b5f29d627423e143d1f58c9430cc13606d041dd0e7e69b8640c79c33713f71da4bd51ed1593094ec866902f3c396475fcde0b9cb285db6a1ae865ef2e1710ff9753336220a82be9125ac61e9d40e5ee570bbedf2bde3c620f954df46463b1401a951d41623dbaecf2996adc9dfbc1eac9ae18ee5acf246302ccc712ebf8f3adb3a663ba4cb534ba1cd977fe461c98c41918f4d3dac32b59dc4a58f72128e8fae4de34e0f77a2c88618cf80ab5142fd39758b9006f2a3f85311db2bc795af101923cdb7c09328e72d5de64cdcbb318d8b3ce4d3149db8e5b090400ec08832908752dc301130a5ec5da4bec8db59bb001df22883c794873e8b9c131b5d5a942e480060f9daf08fe59cb8da525a7710d212101997d40ad550e37f8863e3abf538631031af058d698374f5070ad2576e69d7c4a19ff1243d7ad8a7d358f8a9b95fa30e258926dc3c1702b0eeaafeeda35a83bc8b60d6e844e3d50ded86242ed462a71121b8bb0ab22b53721c8d185a5b092233e7ed0c2a94e96de2c1ad6131560474f7e5fb039c4f041819752ba81d90e3e8798bb79dfce54a50ff79458a8c783cfa86de9a772a04607ccf722c600b955902962bac8bee2d1c0f7abc1b47406afdd2692b78344302e94123f66e5f52369b8e92c9340d1d93dc8bf7dbc27da452e46f896f6b1a2527c80110014747fceb50a009d67d88ed638ee97f8b7e91a46175246d65c159e221a46097ae8845e54cad31a58c05bd42238dc82c3b2dc1963679ba83832e58f8a6b0f4769e8117ffbc96db582d1b09cdfcb50e3054feb20fc7401a9d8475b26116c19f033cd1b3c2381ba999ea1acbbe8df3cdfb37dd2ffe971910755aedd5f9c988b4cb9982b6f14135d0ac2ff1a0a1a6386c1a0f4fff58cc3554f752b8473dbe816fd7e5b570f778b6d255b1b1246152f1b39e78670c1a2d89591bafadc11fba766ffc60621999eb5dadb674d1585bf02559d0aeb9729c1f9703536b42d0669cfd46a52886fa045e1797b4f81124278933160d94242def8d12d6f5cd6eff606835a92277bf2446319376fed6ac174ddac58da6a0735ad68c999d8358e6f42ab5eaa7b8ff37d0d4a29bebb0fe6cb4fcdb75b53cc2751df5f566d0fe5c4d99e52951ebaf7917e8f223c1b59e5797cc10dd574034855e09499043e9b8893f4caeb95959cdf92f586d10e53343204c0a3a9fa25db21f9a2c47f0801c0993c40a5ba429aca84e92553fd0aa292a0d2ff8ab4aad083d2f7d2dac2aa445015c347f09251b2e7325e1a76dc1a3f9f69643dd84b79728432fde5e29571cc5f8ded78d617854a1a1497655af75b046e47c8696060290845d828491eefc936fce6e30dc0b864498755ec713cda542caea41786c64500ae0075289b85008d30f7daffcad742ca14c8b383d42bdd2758b61ac6b6be5aab9342368024c9c832b1a54994ed71bad569400d2017eef2f8e30c930e3d52247c46464d447773ad17405172833afb7e61c98abaa22c8539084f99a326a6a2dc1b549c671f6bb3bd7934a240972bcf4d9df68417ccd5bf49a304dc035112cb03da3d9e54b8ad4b9e2345398057a2e2bdfff390b3a657f78f42226a90f50062de96d56e7d510288bb88b2ead5865279f5b3f24a6be477de94305fd721d65027bbf334b8271d7f16faedc407e6b49a4f345579b6514e2a0974500b6af12aa961b554650d97f7875ecc98526a0d25180608eb75c1edf3975d323cc3f9ec00ed28244f25ea7c55d20df03fa391ca388b52be5bfe1c6bcc2813007db29c02fd45dff65df40c5f245576f472b913b0f6e8a265b1ab59486819b37f930e28e25f1a9c841072743b9459d9e8733e29b0b004a71208d6a8cebce4bd6526928fd284c5a38eafc292dd0d81255656679c60932cad3626bd7c085963dedcf4d9121d121bf97b9668609b5d6a3e88e38b4a6a62a3be29be45cd81d1b5e7655cde45205ba7709a1943bfc81575a75dfc52082f6a936307ed41ccffebe034b4d6e298545247505f69c73a905c8900e2d2cbd86b16a13bcd5190044b1c9440254e12061ca75844495a209baff402a9118610a49731c063a4501ee9e6bd4b84696f3af33cfcafdca0e97f58c9b0de5a07768ce9cd24018f79d726583896dcbe283fcf0d060800d6dc30e0211a41becd84cccd30798bd35d6540781893c47f4cc208e100ec1a6758db7df783819177097cb68ff50be02fd2f0cd97d850bcc1343e0511d241478659a7c0194bc16a31f54aa62e7d8fad5c187da3787626b1396e4cbf1c826317417758c978f3fc2d132c019e9a12b6fa93d6ced4e66580a34c5d376be01e48a7b4c83a70049301f945630eb5ae40c85b4715d253a40e61f49abebf9d86053ec61d6f8e5c79a8ec6baf9dade989233f702184ee55edeef7660bc2b3f7becf397de1b515faeff4cce86832637a87a25dbf9a16343cfae44207fb91fb33e0b199a7949efa79be8c4af936071d1c4a10798f7695809323db3d319f728a575dbeb01d5bcd82ae9f4d75a7bdc79bec37a5c1a047352c45e7417f345b331d9037be5b22ed88a1da5e00002b133be51472fe2604106044413fd58718fea93640b06bf5f908541226a8042e32bab163e1a6ec0acc9a44a5a5ec7517f97d4262fd32316ac57d526661afc79a8c283dd105c2cd895bc9b7290422c16c15e092cf1fb77c71d19717e7415911f9ea8d34d06595a0de5d4ed6d10118d34fe6b6ba99a14580c59e0ed5c594f6711be319f1052739f6a85b7353963bd88202403a7c82770ba6454b699d1b56b6793c51a484b63f421921dd3c1b636bb871c682dfdd8f41cfa7fe0520342f87fcb2f9c7af498e5d4c101c2d1aac8c4c46be682b2dfaddffb4ae62b0efd60f47ddc427c6427255463fb8c56159191f12b2da6a09e7d315adf2545d29f4808f5ce1973571ed6cb93e34dee01b9691d8b0b444cd5baf8cab1017affad5d0b149b399f9965562f62fb33a7d900778822b388ee0ab0ae0d2f122eebcf40b93667595d6f6b6c6b6f21f202dbbbd3e22e2a2ee8a438c19d8fa36c216aed7e0a495252087a452d31f6d494f04b36c91a497e57f19a9cebb1ebb39e247d6e864a6e696ea5cea3d81dbf160b81ec52e21b67c893e1b2d22454166a021b9ad1df9d2dc2", 0x1000}, {&(0x7f0000003d40)="fd4af157c4c0b1c99c2a0d9123871f1bc472c88beebf0965d9ab0e695768b77feba7b1bf5ee833d8287f3451b0297c3865eb794766ed714628ae6399c9908f5e5231a07b8cbe46722f41e8445de2bfd26d53a3398f67a04056936b7166f040f178fc2c24c5b5dad505003e74038cd8a31239f3103d8a0a9efde8684ba811b974d0f3e0352bc98f520813f717b51546d8ed72b35d7ed5d8d61fa9aebc50b30ca75f48858c28ccf28d8b05d3b40cfbc5cd7463b0209d49246de78ee9ac6d4bcf0ee9a6eaf55be1ea9b04ca2f850f8e655060ecd518c45adf9bb0abc74e5b6ce9d8347dc897c729ce0de42a372a95c9c835f64d", 0xf2}], 0x9, &(0x7f00000043c0)=ANY=[@ANYBLOB="200000000040000001000200020e0000", @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r50, @ANYRES32=r51, @ANYRES32=r52, @ANYRES32=r53, @ANYRES32=r54, @ANYRES32=r55, @ANYRES32=r56, @ANYRES32=r57, @ANYRES32=r58, @ANYRES32=r59, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r60, @ANYRES32=r61, @ANYRES32=r62, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r63, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4008001}], 0x4, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR(r64, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000040)=""/164, 0xa4}, &(0x7f0000000100), 0x20}, 0x20) 2018/05/07 22:44:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x0, &(0x7f0000000000)={0x0, 0x5, 0x6, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_getoverrun(r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, &(0x7f000045c000)=0x10) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x400000) r4 = gettid() r5 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000006c0)=0xe8) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={0xffffffffffffff9c, 0x3, 0x1, 0x7ff, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000840)=0x0) getresuid(&(0x7f0000000880), &(0x7f00000008c0)=0x0, &(0x7f0000000900)) getgroups(0x7, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) sendmsg$netlink(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)={0x314, 0x34, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x184, 0x76, [@typed={0x8, 0x2f, @ipv4}, @generic="9f7472f581206c28bd5436b8b47142ecd7d4a190d321fa3d75202326332472521051d3495edd06a6bc4d0ed4cc549f3d25e27a6ace71e2650c696fcd4d0fd483959d35cc81f7a5ee9779822fe92eb94eb0addb9c77faded0ea6ee45c4132874da50f55d20ae8278cb6e9c738413311483da5666d75f254b034a6f4ac5ed86d91883ce6b3c3999e82b84314", @typed={0xc, 0x17, @u64=0x5}, @generic="0e0dc223ea26c9e6eb1c784535e26c30c504772c6b200cd04c40219996a2c9d0607bc39784535d6a680d0ab5b9ea93efe2ace87f51298ddbce958fb7da8c57ba0b4b2f8cc87e3aed4a99e37235a960ee7ca8291e", @typed={0x8, 0x46, @u32=0xffffffffffffff80}, @generic="45b2c1bbe8797d3435127337cba87819354da95a577abc9bee4542637310fbc28e3e0c9802fd7e199f8877acde21c904693c9b05a4b0f0678c8e42d5bb008a4225730708572c5d2409e94a83d2d3dc1f30e299782b1aa59132b609660650ea27edea418885c1153206c5017ed4bd68cf20", @typed={0x14, 0x11, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}]}, @typed={0xc, 0x58, @u64=0x649}, @generic="b643d151b6ea208d9cbc54d98bec346371e3fcb6c5335b9cdbb3cbf9d7856aa879372653243cbc69599413a67170fbfed46da17c1ae086f11808f15979d26a4238e85f22b29ad8cf9144bb693047bf313d5002065e0d9e7bbac4872fb56292a479bcfeac90ac1d130fe71e6f26fc8f4bc9c4bdddbc7585b06fa5edfe7c53fd59a837550813", @generic="e39c61a580bafc251135d1060997f5c3b34f06257537942d146d0d14692ed36c7778036714ee3f826fb741177af590ea901ee61af2a8230973d36a5cc9002de98ce3285f7b94a2d81b98984363e5686ebed7493dc1fb8f7b15aa80fe8a5329ec35a3470f7821f4566b069960f3a1b7f371fe046a464db32efc7372", @nested={0x74, 0x93, [@generic="7c0206ade9bfe8306d4f76ca75a38938c7d0db6bc2cca13418b7de0d3b189fe7db3db2625eb30a0d04f4aa8ca65be416d76874c6c252b0c0d5334ff07682e2b5b91d05d186e1daf5aebc98737989248939759a", @typed={0x8, 0x8e, @pid=r4}, @typed={0x14, 0x6, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}]}]}, 0x314}, {&(0x7f0000000480)={0xa4, 0x1b, 0x4, 0x70bd28, 0x25dfdbff, "", [@generic="b4c80f5e5dc3a340f23f18846063812d1187a3b77458aa7b95966efb6d5f66a650713e87c15070ce424245575fa46adff2ed519e91dc7464b5355c4294c93dfd3095543431a828cbe2ced30bcb0008277d1228999e13cad6cb566c4b79b5bcf9fb1bf700ed81e38dae72884790ba55bc8529d196dbd77b091f6a30c88813edf42e21537af19e3ad456c7b59c90737a5056"]}, 0xa4}, {&(0x7f0000000540)={0x1c, 0x3f, 0x502, 0x70bd29, 0x25dfdbfd, "", [@typed={0xc, 0x87, @u64=0x7fffffff}]}, 0x1c}], 0x3, &(0x7f0000000980)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r8, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x88, 0x40000}, 0x0) shutdown(r0, 0x2000000000000002) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0xc) 2018/05/07 22:44:32 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704f"], &(0x7f0000000000)) 2018/05/07 22:44:32 executing program 5 (fault-call:5 fault-nth:20): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 168.917719] FAULT_INJECTION: forcing a failure. [ 168.917719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.929835] CPU: 0 PID: 12141 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 168.936811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.946217] Call Trace: [ 168.948572] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 168.948865] dump_stack+0x185/0x1d0 [ 168.948903] should_fail+0x87b/0xab0 [ 168.948953] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 168.969426] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 168.974863] ? is_bpf_text_address+0xb4/0x4b0 [ 168.979426] ? __is_insn_slot_addr+0x198/0x1c0 [ 168.984077] ? kernel_text_address+0x34d/0x3a0 [ 168.988723] ? __kernel_text_address+0x34/0xe0 [ 168.993416] ? __save_stack_trace+0x90d/0xb00 [ 168.997976] alloc_pages_current+0x6b5/0x970 [ 169.002506] __page_cache_alloc+0x95/0x320 [ 169.006855] __do_page_cache_readahead+0x401/0xf20 [ 169.011909] ? kmsan_set_origin_inline+0x6b/0x120 2018/05/07 22:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 169.016875] ondemand_readahead+0xc6a/0x1210 [ 169.021414] ? generic_file_read_iter+0xb43/0x4440 [ 169.026465] page_cache_sync_readahead+0x1e6/0x740 [ 169.031526] generic_file_read_iter+0xc3c/0x4440 [ 169.036401] blkdev_read_iter+0x20d/0x280 [ 169.040647] ? blkdev_write_iter+0x5f0/0x5f0 [ 169.045118] generic_file_splice_read+0x5d2/0x900 [ 169.050080] ? splice_shrink_spd+0x100/0x100 [ 169.054552] splice_direct_to_actor+0x4c6/0x1040 [ 169.059479] ? do_splice_direct+0x540/0x540 [ 169.063901] ? security_file_permission+0x28f/0x4b0 [ 169.069032] ? rw_verify_area+0x35e/0x580 [ 169.073288] do_splice_direct+0x335/0x540 [ 169.077579] do_sendfile+0x1067/0x1e40 [ 169.081610] SYSC_sendfile64+0x1b3/0x300 [ 169.085783] SyS_sendfile64+0x64/0x90 [ 169.089695] do_syscall_64+0x309/0x430 [ 169.093648] ? SYSC_sendfile+0x320/0x320 [ 169.097767] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 169.103001] RIP: 0033:0x455979 [ 169.106227] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:44:33 executing program 0: r0 = socket(0xa, 0x802, 0x0) sendto$inet6(r0, &(0x7f000060ffff), 0x0, 0x0, &(0x7f00006b1000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) close(r0) 2018/05/07 22:44:33 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x8, 0x3, 0x0]}, 0xa) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:33 executing program 7: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev, 0x0}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2, 0x0}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00', 0x0}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can={0x0, 0x0}, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci={0x0, 0x0}, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci={0x0, 0x0}, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000011d00)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000011d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000011d80)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000011dc0)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000011ec0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000011f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011f40)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000011f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011fc0)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000012d40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000012d00)={&(0x7f0000001700)=ANY=[@ANYBLOB="e40c0000", @ANYRES16=r1, @ANYBLOB="140128bd7000fcdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="b80002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="1402020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000700000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="f00002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff0700003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="1c02020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004001c00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004001804000008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000101000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000008000100", @ANYRES32=r18, @ANYBLOB="f800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="7801020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400f9ffffff080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r25, @ANYBLOB="4000ba3d0d87c535c7ffc46d3471516abc000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r26, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r27, @ANYBLOB="cc0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c00040000007d0104000000ff7f031f000000000101000100000000010100cf04000000010401810300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff03000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r30, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r31, @ANYBLOB="08000100", @ANYRES32=r32, @ANYBLOB="38010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r33, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400f9ffffff38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400d6a100004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000"], 0xce4}, 0x1, 0x0, 0x0, 0x20004055}, 0x24000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 169.113989] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 169.121316] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 169.129436] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 169.136766] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 169.144090] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000014 2018/05/07 22:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:33 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x188, 0x30, 0x200, 0x70bd2d, 0x25dfdbfb, {0x14}, [@nested={0xc8, 0xf, [@generic="6d4f831563926140acfbc7157a651e4e45283100b82f4c55e25b297f52bed407e57660740c59337e6e8daa5638db19c8f74bdb641500375e6530d491cf0d0210f4edebf42eac7035adae6e3e97066c18e306694c7c3c9e0a453fb5ed0c80417ad0dc9f3419c13ddd4fc2ebbdfdf639bd68d045f18888fcb8698b6533e4733c48930867e9a07345232c407b4cec88ce0d88c3a76fe15ab59033f61240ac280f46404bdada091418083eb8f152521f4cf2b13f81e08092375f13858dbacf7fc67f09f6"]}, @typed={0xc, 0x5b, @u64=0x3}, @generic="9473f87b4c1e0896371e293a796e08aec6500889f65f5dc95c7588209d7f87881fe866", @generic="62dcaa54b67cf68d6b1e556d9f241295d41533ccbd64d251bf22759627722379c628571e48243c89a6d27d0c35673bb284912e29b7aee895dc118dd24a2d9aad66765cd81c01f02b8a6d1987d010058d9553f344522e3386ef615d539dd5913cfb651a1ad4ae013dec12b6495840d9ec1b1abb81", @typed={0x8, 0x1d, @u32=0x80000001}]}, 0x188}, 0x1}, 0x4000000) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x2, 0x4, [0x6, 0x1, 0x7fff, 0x6]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000400)={r4, 0x10000}, &(0x7f0000000440)=0x8) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200808026c83dd797ee8154cd6a766634c5eaf62c61ca8908dae974ec59aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e58000000000000000e4207f40a6e43d1de54ec42084cdc3704fb60000000000000000000000000000000000000000000010000000"], &(0x7f0000000000)) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x285c, 0x2000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000480)=0xffffffffffffff6b) r7 = add_key(&(0x7f0000000a00)='ceph\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000a80)="e27831217bbab812402de5711d77eee84c26643197a4197544620ac24a083249002485d32a3e17bf6d716c77b6564fc6c1edc0ba5eae479bab391b671c385877da37382dd81274a6fd1e4c583d4409524ce9ef99383174c92dd983a4db559c5216606bd1c992d138d9e7b36165fadd70e1ae547dea64228bae7fe2a716fef907d827509d50b1b35c672e3fe7b8fc482ac1777f9cc472", 0x96, 0xfffffffffffffffb) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000d00)) r8 = request_key(&(0x7f0000000c40)='trusted\x00', &(0x7f0000000c80)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000cc0)='vmnet0vmnet1mime_type\x00', 0xfffffffffffffffe) keyctl$instantiate(0xc, r7, &(0x7f0000000b40)="a755b303a743d1684f6fcbe8fe4b8584bb9413b87e048055743a5ea9e3695ff78c4d9fc0130c5149149c830a04c4f0b4dd818c0411df803923f4296feccbe695ae2335169b6d7a55d5f8f0f559275d54fcbe4c02d5ed4e5babb12f0f3192ebebc8eac8c0e7bc93de6bac022b1b87c7a9cc8f269f6013c1252a24344fbe99b48df39265191ea3255aef143fa9f764ca70264fe770912735507dd542b2683ede4b7e2b7925ed422284e33e428250bdab9e9b0778b379c59a42b386e2f4c81e9fbfe37fe002dae45983106e245e7fe469", 0xcf, r8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x8}, &(0x7f0000000280)=0x8) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x200040, 0x400) write(r0, &(0x7f00000006c0)="44d7f79450b34ff56e320df43b3f6b25b85fd7e859d07f07f171d3fea091d8c91c52c381ff2e583feb0c7c94714cc46c4e257ac577d56e452eb560a7d9218dcb2c739b5d26d85102144776c25c2ac9f9cf469e81202174df536ea37b2f9b3caa049f0a36d2a6d6020dd675716cc975c350c716e2de71bd", 0x77) getpeername$ipx(r9, &(0x7f0000000080), &(0x7f0000000140)=0x10) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000680)=0x4, 0x4) getgroups(0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0x0, 0x0, 0x0]) syz_fuseblk_mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0xc000, r10, r11, 0x6, 0x6, 0x8000) 2018/05/07 22:44:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmsg(r3, &(0x7f0000000200)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000240)=[{&(0x7f0000f80f9a)=""/102, 0x66}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fdatasync(r1) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000015000)=0x20000000000004, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r4, 0x0) 2018/05/07 22:44:33 executing program 0: unshare(0x40600) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000006700), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000000c0)={0x42, &(0x7f0000000040)=""/66}) uselib(&(0x7f0000000100)='./file0\x00') 2018/05/07 22:44:33 executing program 5 (fault-call:5 fault-nth:21): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:33 executing program 7: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev, 0x0}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2, 0x0}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00', 0x0}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can={0x0, 0x0}, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci={0x0, 0x0}, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci={0x0, 0x0}, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000011d00)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000011d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000011d80)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000011dc0)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000011ec0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000011f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011f40)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000011f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011fc0)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000012d40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000012d00)={&(0x7f0000001700)=ANY=[@ANYBLOB="e40c0000", @ANYRES16=r1, @ANYBLOB="140128bd7000fcdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="b80002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="1402020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400c901000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400010000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c00040000000900600f000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040000080000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000008008000600", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000700000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="f00002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff0700003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="1c02020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004001c00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004001804000008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000101000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000008000100", @ANYRES32=r18, @ANYBLOB="f800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="7801020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400f9ffffff080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r25, @ANYBLOB="4000ba3d0d87c535c7ffc46d3471516abc000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r26, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r27, @ANYBLOB="cc0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c00040000007d0104000000ff7f031f000000000101000100000000010100cf04000000010401810300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff03000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r30, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r31, @ANYBLOB="08000100", @ANYRES32=r32, @ANYBLOB="38010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r33, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400f9ffffff38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400d6a100004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000"], 0xce4}, 0x1, 0x0, 0x0, 0x20004055}, 0x24000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:33 executing program 6: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) 2018/05/07 22:44:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f00000002c0)=@bind={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x90) [ 169.879586] FAULT_INJECTION: forcing a failure. [ 169.879586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 169.891781] CPU: 0 PID: 12208 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 169.898755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.908158] Call Trace: [ 169.910833] dump_stack+0x185/0x1d0 [ 169.914531] should_fail+0x87b/0xab0 [ 169.918336] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 169.923177] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 169.928629] ? is_bpf_text_address+0xb4/0x4b0 [ 169.933209] ? __is_insn_slot_addr+0x198/0x1c0 [ 169.937868] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 169.943350] ? update_cfs_rq_load_avg+0x662/0x1aa0 [ 169.948379] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 169.953827] alloc_pages_current+0x6b5/0x970 [ 169.958387] __page_cache_alloc+0x95/0x320 [ 169.962748] __do_page_cache_readahead+0x401/0xf20 [ 169.967804] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 169.973285] ? __list_add_valid+0xb8/0x450 2018/05/07 22:44:33 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000002c0)={0x7, 0x9}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000ae4000)={0xaa}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x301040, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000300)={{0x62, @broadcast=0xffffffff, 0x4e24, 0x3, 'lc\x00', 0x24, 0x7, 0x32}, {@empty, 0x4e24, 0x10004, 0x0, 0x10001, 0x7}}, 0x44) ioprio_set$uid(0x3, r3, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0x9, 0xfffffffffffff800, 0x401, 0x9], 0x5, 0x8, 0x8, 0x8, 0x1ff, 0x800000000000000, {0x4, 0xfffffffffffffffd, 0x36, 0x3, 0x9, 0x4a1, 0x3, 0x5, 0x101, 0x86f8, 0x0, 0x0, 0x2, 0x3, "2dde0cf7fd1802ee07b9745922564cbbeb77942bf04896040a6227ea0f7d740a"}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000f8dfe0)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000240)={&(0x7f00009a1000/0x1000)=nil, 0x1000}) 2018/05/07 22:44:33 executing program 7: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev, 0x0}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2, 0x0}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00', 0x0}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can={0x0, 0x0}, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci={0x0, 0x0}, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci={0x0, 0x0}, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000011d00)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000011d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000011d80)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000011dc0)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000011ec0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000011f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011f40)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000011f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011fc0)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000012d40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000012d00)={&(0x7f0000001700)=ANY=[@ANYBLOB="e40c0000", @ANYRES16=r1, @ANYBLOB="140128bd7000fcdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="b80002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000008000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="1402020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000700000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="f00002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff0700003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="1c02020038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004001c00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004001804000008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000101000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000008000100", @ANYRES32=r18, @ANYBLOB="f800020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r21, @ANYBLOB="08000100", @ANYRES32=r22, @ANYBLOB="7801020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400f9ffffff080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r25, @ANYBLOB="4000ba3d0d87c535c7ffc46d3471516abc000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r26, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r27, @ANYBLOB="cc0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r28, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c00040000007d0104000000ff7f031f000000000101000100000000010100cf04000000010401810300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400ff03000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r30, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000300000008000600", @ANYRES32=r31, @ANYBLOB="08000100", @ANYRES32=r32, @ANYBLOB="38010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r33, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400f9ffffff38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400d6a100004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040009000000"], 0xce4}, 0x1, 0x0, 0x0, 0x20004055}, 0x24000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 169.977654] ondemand_readahead+0xc6a/0x1210 [ 169.982194] ? generic_file_read_iter+0xb43/0x4440 [ 169.987243] page_cache_sync_readahead+0x1e6/0x740 [ 169.992308] generic_file_read_iter+0xc3c/0x4440 [ 169.997183] blkdev_read_iter+0x20d/0x280 [ 170.001422] ? blkdev_write_iter+0x5f0/0x5f0 [ 170.005898] generic_file_splice_read+0x5d2/0x900 [ 170.010870] ? splice_shrink_spd+0x100/0x100 [ 170.015363] splice_direct_to_actor+0x4c6/0x1040 [ 170.020215] ? do_splice_direct+0x540/0x540 [ 170.024655] ? security_file_permission+0x28f/0x4b0 [ 170.029799] ? rw_verify_area+0x35e/0x580 [ 170.034062] do_splice_direct+0x335/0x540 [ 170.038363] do_sendfile+0x1067/0x1e40 [ 170.042408] SYSC_sendfile64+0x1b3/0x300 [ 170.046594] SyS_sendfile64+0x64/0x90 [ 170.050533] do_syscall_64+0x309/0x430 [ 170.054504] ? SYSC_sendfile+0x320/0x320 [ 170.058641] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 170.063878] RIP: 0033:0x455979 [ 170.067105] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:44:34 executing program 1: r0 = epoll_create1(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000180)={0x80000003}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) 2018/05/07 22:44:34 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) syz_emit_ethernet(0xd8, &(0x7f0000000100)={@random="7c5f1dcbf205", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipx={0x8137, {0xffff, 0xca, 0x3, 0x5, {@random=0xb7, @random="dfc9b61b655b", 0xf8}, {@broadcast=0xffffffff, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x3}, "9bfcedf9004dd161a7c644c424283e6ad401832c718beea925c35ead094f4bd73b9d29b862fcf056801bb42b0ec112f29b63886f259d3a098b8cb97ae870266810460607f2f566e0ad80d49f7137d384f959ae18e21a2f7ece9ce3d20aef35b2a2be9c1da863e36a8165abca9eda9824669a9d89538d16cc28f46e31d7db7099f8ff6cb607ece647b077a6f3599de51a306f67b22e69d9e028429b3bdb1f8f9702dc8a91ab4f028faf92917f"}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:34 executing program 0: r0 = socket(0x1e, 0x2, 0x0) getsockname(r0, &(0x7f0000000000)=@pptp, &(0x7f0000000080)=0x80) timer_create(0x3, &(0x7f0000000200)={0x0, 0x37, 0x3, @thr={&(0x7f00000000c0)="5ff6eef8a6", &(0x7f0000000100)="7b494c355b44c81e22edca8c3dfa8e6aff2118cf668b9bdb91de0f36da771c83f1902f7383ab7a581b508a023df38bc38fe540702b0e9f10d8f17d4f7f9809c89e74c82f7f6eec4bbb43fbb4c2c90ae11d656a8f13e97ebe2028dbf08b707c6ce243550330c33c77f50b4bec3964f7f07290d8fc4633ec12033b45130123c4d4bd139f2e86eaf91ea235e247ff03e95f87c54178d46bbe56f9ce08cf027d33642104a12ec428877cc1e21989ba7fd4d96f17d17157205bf6f5278ace307808e018ec84d159a06a79c2b49f1f726dd14e0d46af"}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) socket(0x1e, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000f08fc0)={0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x4}, &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000d0a000)={&(0x7f00001da000), 0x8}) 2018/05/07 22:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 170.074878] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 170.082205] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 170.089524] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 170.096840] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 170.104172] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000015 2018/05/07 22:44:34 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 2018/05/07 22:44:34 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff0700000000000000000000000000000000000000000000001f0000ffffffffffffffef000003ff00000000000012000000000000000000000600", 0xc3, 0x80003}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0308f7d4745e7abb9a2e145c78a3a5962f89799ac429556e0e167ae43a79bdc6000000800000006157329d3f90ebdcfe5c7fd45ba9e3a8ee0e41bba92b19e75248e442ba4397da694ae40000000000000000000000"], 0x1) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xfff) accept4$alg(r1, 0x0, 0x0, 0x800) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) modify_ldt$read(0x0, &(0x7f0000000740)=""/199, 0xc7) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/200, 0xc8}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000100)=""/4, 0x4}], 0x8, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) close(r2) 2018/05/07 22:44:34 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x101100) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="58e1ab59c07366a73c30e45b4d14a2c8c5aeda57f30c2729a702a9543f65e905c8a8a284644e0a162d73980a53d34d08b02c1f0161a3c8df027e89aa801f0789afef4a8f1693280674225e95fc9f287823031fc70d9c6b3ab40b6450d7fd12ec9da0189cf748ed4ef54730c37a52800b6cded87c80a38a312eb6a164c2d4518808704dab2a68213ea809869b4f812265321f1d3c6c88072f560200a4e8b6992144fb7e4b61cf1bcc4d49b224c427d4312255b9c150ba6ad08c58f5d14a6a1b69dc2a7a7bb59dd4b3043acd65a8714f26a59ea59ab5ea42e5ff57638d4c60a7474562c08e68549ca0cbbc3706d26ccc4caac9621b8efb98c1", 0xf8, 0x0) keyctl$setperm(0x5, r3, 0x10000000) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)={0x0, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x6b1]}) 2018/05/07 22:44:34 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000011d00)={'team0\x00'}) accept4$packet(0xffffffffffffff9c, &(0x7f0000011d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000011d80)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000011dc0)={{{@in=@dev, @in=@rand_addr}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000011ec0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000011f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011f40)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000011f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011fc0)=0x14, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f00000000c0), 0x401) openat$cgroup_ro(r1, &(0x7f0000000380)="6300000000004220000000000000000002004afa15ee90d63d3ea0f72244f7fac7da87df6ae300618f351560cddf80e74258cbe32fc679a65b9889306bac95a8f0a80b6828b106d35a2088a77d3bb327676a35a025badbf14cf3d5b3f7f6b5f2818b40cd1892c56df487d34775e79d0100c97d3b60b50fbf9100010000001000000000000000000000", 0x0, 0x0) [ 170.485586] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:34 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x400000000000, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0xffffff4c) sendmmsg$inet_sctp(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=@in={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2=0xe0000002}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x40}}], 0x48}], 0x1, 0x0) 2018/05/07 22:44:34 executing program 6: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="036b3333728f4cf51ad51b68877b045882a3a3cb2755fbce317d297df41b22787fd7367dff76bfa2664222138f67cfe725318e335636") 2018/05/07 22:44:34 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000011d00)={'team0\x00'}) accept4$packet(0xffffffffffffff9c, &(0x7f0000011d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000011d80)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000011dc0)={{{@in=@dev, @in=@rand_addr}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000011ec0)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000011f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000011f40)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:34 executing program 1: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x14000, 0x0, &(0x7f0000fec000/0x14000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x305f]}, 0x2c) 2018/05/07 22:44:34 executing program 2: io_setup(0x9, &(0x7f0000000140)) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = dup3(r0, r0, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x10000008}) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000340)=0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000001c0)={'syzkaller1\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0x81, @time, 0x0, {0x0, 0x7}, 0x0, 0x0, 0x100000000000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/07 22:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:34 executing program 5 (fault-call:5 fault-nth:22): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:34 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) r3 = msgget(0x0, 0x203) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000140)=""/48) 2018/05/07 22:44:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000003180)='./file0\x00', 0x2) bind$inet(r0, &(0x7f00000031c0)={0x2, 0x4000000000004e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0xffffffffffffff62) r2 = syz_open_dev$adsp(&(0x7f0000000740)='/dev/adsp#\x00', 0x2, 0xc0000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}}, &(0x7f0000000840)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000880)={r3, 0x9}, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000003100)={'IDLETIMER\x00'}, &(0x7f0000003140)=0x1e) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000003200)={r3, 0xffffffffffffffe1}, &(0x7f0000003280)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x200000000000a, &(0x7f0000003240)=0x400000000005, 0x4) sendto$inet(r0, &(0x7f0000de1fff), 0x4e, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000000c00)=""/43, 0x2b}, {&(0x7f0000000c40)=""/137, 0x89}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/216, 0xd8}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/57, 0x39}, {&(0x7f0000002e40)=""/255, 0xff}], 0x7, &(0x7f0000002fc0)=""/205, 0xcd, 0x7f}, 0x100) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000defffc), 0x4) recvmsg(r0, &(0x7f0000000b40)={&(0x7f00000008c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/139, 0xffc4}], 0x1, &(0x7f0000000a40)=""/242, 0xf2}, 0x0) getsockopt$ipx_IPX_TYPE(r2, 0x100, 0x1, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) sendto$inet(r0, &(0x7f0000000040)="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", 0x6c1, 0x0, 0x0, 0x0) 2018/05/07 22:44:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 170.766628] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:34 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae159aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfad72e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) fchdir(r2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@host=0x2}) 2018/05/07 22:44:34 executing program 6: socketpair(0x1, 0x3, 0x8000, &(0x7f0000000040)={0xffffffffffffffff}) connect$ax25(r0, &(0x7f0000000000)={0x3, {"9d22c1da5497ad"}, 0x8b}, 0x10) 2018/05/07 22:44:34 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000011d00)={'team0\x00'}) accept4$packet(0xffffffffffffff9c, &(0x7f0000011d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000011d80)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000011dc0)={{{@in=@dev, @in=@rand_addr}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000011ec0)=0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 171.081150] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 171.189137] FAULT_INJECTION: forcing a failure. [ 171.189137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.201196] CPU: 1 PID: 12286 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 171.208172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.217580] Call Trace: [ 171.220222] dump_stack+0x185/0x1d0 [ 171.223888] should_fail+0x87b/0xab0 [ 171.227630] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 171.232415] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 171.237809] ? is_bpf_text_address+0xb4/0x4b0 [ 171.242339] ? __is_insn_slot_addr+0x198/0x1c0 [ 171.246941] ? kernel_text_address+0x34d/0x3a0 [ 171.251543] ? __kernel_text_address+0x34/0xe0 [ 171.256183] ? __save_stack_trace+0x90d/0xb00 [ 171.260704] alloc_pages_current+0x6b5/0x970 [ 171.265172] __page_cache_alloc+0x95/0x320 [ 171.269462] __do_page_cache_readahead+0x401/0xf20 [ 171.274448] ? kmsan_set_origin_inline+0x6b/0x120 [ 171.279383] ondemand_readahead+0xc6a/0x1210 [ 171.283852] ? generic_file_read_iter+0xb43/0x4440 [ 171.288881] page_cache_sync_readahead+0x1e6/0x740 [ 171.293881] generic_file_read_iter+0xc3c/0x4440 [ 171.298711] blkdev_read_iter+0x20d/0x280 [ 171.302903] ? blkdev_write_iter+0x5f0/0x5f0 [ 171.307326] generic_file_splice_read+0x5d2/0x900 [ 171.312258] ? splice_shrink_spd+0x100/0x100 [ 171.316700] splice_direct_to_actor+0x4c6/0x1040 [ 171.321495] ? do_splice_direct+0x540/0x540 [ 171.325890] ? security_file_permission+0x28f/0x4b0 [ 171.330963] ? rw_verify_area+0x35e/0x580 [ 171.335164] do_splice_direct+0x335/0x540 [ 171.339427] do_sendfile+0x1067/0x1e40 [ 171.343383] SYSC_sendfile64+0x1b3/0x300 [ 171.347521] SyS_sendfile64+0x64/0x90 [ 171.351377] do_syscall_64+0x309/0x430 [ 171.355299] ? SYSC_sendfile+0x320/0x320 [ 171.359403] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 171.364615] RIP: 0033:0x455979 [ 171.367801] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 171.375528] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 171.382809] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 171.390096] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 171.397373] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 171.404654] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000016 2018/05/07 22:44:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0xfffffffffffffffe, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) ioperm(0x0, 0x800, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000140)=0x2) ftruncate(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/07 22:44:35 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2c100, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2=0xe0000002}], 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) 2018/05/07 22:44:35 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffffff4, 0x42) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') prctl$setptracer(0x59616d61, r2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:35 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000f48)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4}}, &(0x7f0000b0a000)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa}}, 0x5}, 0xffffffaa) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) 2018/05/07 22:44:35 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2", 0x19}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2800, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x0, 0x0, 0x1ff, 0x7}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 2018/05/07 22:44:35 executing program 5 (fault-call:5 fault-nth:23): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:35 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000011d00)={'team0\x00'}) accept4$packet(0xffffffffffffff9c, &(0x7f0000011d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000011d80)=0x14, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 171.850714] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 171.886705] FAULT_INJECTION: forcing a failure. [ 171.886705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 171.898718] CPU: 1 PID: 12345 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 171.905695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.915102] Call Trace: [ 171.917768] dump_stack+0x185/0x1d0 [ 171.921481] should_fail+0x87b/0xab0 [ 171.925288] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 171.930133] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 171.935572] ? is_bpf_text_address+0xb4/0x4b0 [ 171.940143] ? __is_insn_slot_addr+0x198/0x1c0 [ 171.944791] ? kernel_text_address+0x34d/0x3a0 [ 171.949435] ? __kernel_text_address+0x34/0xe0 [ 171.954133] ? __save_stack_trace+0x90d/0xb00 [ 171.958713] alloc_pages_current+0x6b5/0x970 [ 171.963262] __page_cache_alloc+0x95/0x320 [ 171.967604] __do_page_cache_readahead+0x401/0xf20 [ 171.972751] ? kmsan_set_origin_inline+0x6b/0x120 [ 171.977719] ondemand_readahead+0xc6a/0x1210 [ 171.982267] ? generic_file_read_iter+0xb43/0x4440 [ 171.987324] page_cache_sync_readahead+0x1e6/0x740 [ 171.992391] generic_file_read_iter+0xc3c/0x4440 [ 171.997270] blkdev_read_iter+0x20d/0x280 2018/05/07 22:44:35 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x100ffd, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000200)=""/53) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xfffffffffffff000) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:36 executing program 6: socketpair(0x0, 0x0, 0x7f, &(0x7f0000000000)) 2018/05/07 22:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) [ 172.001516] ? blkdev_write_iter+0x5f0/0x5f0 [ 172.005990] generic_file_splice_read+0x5d2/0x900 [ 172.010956] ? splice_shrink_spd+0x100/0x100 [ 172.015694] splice_direct_to_actor+0x4c6/0x1040 [ 172.020550] ? do_splice_direct+0x540/0x540 [ 172.024984] ? security_file_permission+0x28f/0x4b0 [ 172.030084] ? rw_verify_area+0x35e/0x580 [ 172.034350] do_splice_direct+0x335/0x540 [ 172.038646] do_sendfile+0x1067/0x1e40 [ 172.042694] SYSC_sendfile64+0x1b3/0x300 [ 172.046900] SyS_sendfile64+0x64/0x90 2018/05/07 22:44:36 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000001aff4)='/dev/rfkill\x00', 0x0, 0x0) readv(r0, &(0x7f0000afd000)=[{&(0x7f0000309f9d)=""/1, 0x1}], 0x1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/170, 0xfffffffffffffd60}], 0x1) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) close(r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x7, 0x10, [0xfff, 0x0, 0x25, 0x83]}) [ 172.050834] do_syscall_64+0x309/0x430 [ 172.054811] ? SYSC_sendfile+0x320/0x320 [ 172.058957] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 172.064198] RIP: 0033:0x455979 [ 172.067423] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 172.075196] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 172.082518] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 172.089845] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 172.097168] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 172.104493] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000017 2018/05/07 22:44:36 executing program 1: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r0, &(0x7f00000000c0)="d25d5b27f1a963053a42afda850d73ffc94b0559e6b0ccf460cd6cd88a025346b4bf774fd76aa62d562d51c9de51c2298bd0c996ebe9c23ac345c0def8b298491e6da9feac45f1d2ce626e8c172786ef63e95b1f393fc7bccb6541d7bcc8ed30a5", 0x61, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x7}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/07 22:44:36 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"73797a5f74756e0000000000ae8200", 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:36 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000011d00)={'team0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x30, 0x0) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$packet_buf(r2, 0x107, 0x40000000000c, &(0x7f0000001840)=""/182, &(0x7f00000000c0)=0x484) 2018/05/07 22:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r1, 0x0) 2018/05/07 22:44:36 executing program 5 (fault-call:5 fault-nth:24): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 172.449618] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 172.631650] FAULT_INJECTION: forcing a failure. [ 172.631650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.643713] CPU: 1 PID: 12389 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 172.650693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.660093] Call Trace: [ 172.662713] dump_stack+0x185/0x1d0 [ 172.666355] should_fail+0x87b/0xab0 [ 172.670111] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 172.674899] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 172.680291] ? is_bpf_text_address+0xb4/0x4b0 [ 172.684809] ? __is_insn_slot_addr+0x198/0x1c0 [ 172.689420] ? kernel_text_address+0x34d/0x3a0 [ 172.694045] ? __kernel_text_address+0x34/0xe0 [ 172.698697] ? __save_stack_trace+0x90d/0xb00 [ 172.703247] alloc_pages_current+0x6b5/0x970 [ 172.707736] __page_cache_alloc+0x95/0x320 [ 172.712041] __do_page_cache_readahead+0x401/0xf20 [ 172.717058] ? kmsan_set_origin_inline+0x6b/0x120 [ 172.721965] ondemand_readahead+0xc6a/0x1210 [ 172.726452] ? generic_file_read_iter+0xb43/0x4440 [ 172.731429] page_cache_sync_readahead+0x1e6/0x740 [ 172.736415] generic_file_read_iter+0xc3c/0x4440 [ 172.741241] blkdev_read_iter+0x20d/0x280 [ 172.745427] ? blkdev_write_iter+0x5f0/0x5f0 [ 172.749849] generic_file_splice_read+0x5d2/0x900 [ 172.754735] ? splice_shrink_spd+0x100/0x100 [ 172.759159] splice_direct_to_actor+0x4c6/0x1040 [ 172.763943] ? do_splice_direct+0x540/0x540 [ 172.768303] ? security_file_permission+0x28f/0x4b0 [ 172.773371] ? rw_verify_area+0x35e/0x580 [ 172.777556] do_splice_direct+0x335/0x540 [ 172.781765] do_sendfile+0x1067/0x1e40 [ 172.785747] SYSC_sendfile64+0x1b3/0x300 [ 172.789868] SyS_sendfile64+0x64/0x90 [ 172.793719] do_syscall_64+0x309/0x430 [ 172.797639] ? SYSC_sendfile+0x320/0x320 [ 172.801728] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 172.806926] RIP: 0033:0x455979 [ 172.810124] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 172.817870] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 172.825153] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 2018/05/07 22:44:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000619ff3)='/dev/snd/seq\x00', 0x0, 0x80001) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="04", 0x1}], 0x1) r1 = epoll_create1(0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r1, 0x89e3, &(0x7f0000000000)=0x81) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000004}) epoll_pwait(r1, &(0x7f00004a2ff4)=[{}], 0x1, 0x0, &(0x7f0000f6b000), 0x8) 2018/05/07 22:44:36 executing program 6: socketpair(0x11, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/120) 2018/05/07 22:44:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x16}]}, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x800) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0xf4) sendmsg$nl_route(r0, &(0x7f0000007940)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000007900)={&(0x7f0000000100)=ANY=[@ANYBLOB="210000001100040000000000ec000000070000002e3ce5e4d34cd530bd76c90ec72626e1b7a0b940c64222403946895600a35730f8bf39ff756ad38826c21cd933504b6563fc7d7ff0fbcdd74660af42002142b83cdda0176e272cf874d6578f9cf423ada116e997e8d0d75c725dcddd21850f8de29e86a3a988a86a6aa627cb60eb1532eaf3", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1}, 0x0) 2018/05/07 22:44:36 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"6c6f00000000000000f300", 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0xffffffffffffffff, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x3) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2e2c2e47d374b98464d534e548e4207f40a6e43d2715338038e1244ec42084cdc3704fb69dc48defecaabf86d10ff5c27be2ec71eaad40129206860af84548d6ec597a2aeda377c9f2b912d2dfacb2af22a1ebd6cede45ffc3b6534e74a3937494887ef76536cac0bbdcf3660e6d523a850f3e05d912062e1eb75be9a207be53120a240efd09753ca4ce88dd61f0e408525e50f8c1275014"], &(0x7f0000000000)) 2018/05/07 22:44:36 executing program 5 (fault-call:5 fault-nth:25): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r1, 0x0) 2018/05/07 22:44:36 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) connect(r0, &(0x7f0000000140)=@in6={0xa, 0x4e21, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0x80) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r1 = inotify_init() r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x90202) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xbf0e}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x4, 0x6}, &(0x7f0000000100)=0x10) dup2(r1, r0) 2018/05/07 22:44:36 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000011ac0)={{{@in, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000011bc0)=0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 172.832429] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 172.839720] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 172.846993] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000018 [ 172.995939] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 172.996267] FAULT_INJECTION: forcing a failure. [ 172.996267] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.015591] CPU: 0 PID: 12414 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 173.022561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.031965] Call Trace: [ 173.034627] dump_stack+0x185/0x1d0 [ 173.038332] should_fail+0x87b/0xab0 [ 173.042131] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 173.046963] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 173.052397] ? is_bpf_text_address+0xb4/0x4b0 [ 173.056969] ? __is_insn_slot_addr+0x198/0x1c0 [ 173.061625] ? kernel_text_address+0x34d/0x3a0 [ 173.066273] ? __kernel_text_address+0x34/0xe0 [ 173.070983] ? __save_stack_trace+0x90d/0xb00 [ 173.075560] alloc_pages_current+0x6b5/0x970 [ 173.080099] __page_cache_alloc+0x95/0x320 [ 173.084456] __do_page_cache_readahead+0x401/0xf20 [ 173.089507] ? kmsan_set_origin_inline+0x6b/0x120 [ 173.094733] ondemand_readahead+0xc6a/0x1210 [ 173.099263] ? generic_file_read_iter+0xb43/0x4440 [ 173.104309] page_cache_sync_readahead+0x1e6/0x740 [ 173.109380] generic_file_read_iter+0xc3c/0x4440 [ 173.114295] blkdev_read_iter+0x20d/0x280 [ 173.118541] ? blkdev_write_iter+0x5f0/0x5f0 [ 173.123776] generic_file_splice_read+0x5d2/0x900 [ 173.128701] ? splice_shrink_spd+0x100/0x100 [ 173.133185] splice_direct_to_actor+0x4c6/0x1040 [ 173.138035] ? do_splice_direct+0x540/0x540 [ 173.142436] ? security_file_permission+0x28f/0x4b0 [ 173.147536] ? rw_verify_area+0x35e/0x580 [ 173.151797] do_splice_direct+0x335/0x540 [ 173.156104] do_sendfile+0x1067/0x1e40 [ 173.160141] SYSC_sendfile64+0x1b3/0x300 [ 173.164377] SyS_sendfile64+0x64/0x90 [ 173.168309] do_syscall_64+0x309/0x430 [ 173.172290] ? SYSC_sendfile+0x320/0x320 [ 173.176440] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 173.181682] RIP: 0033:0x455979 [ 173.184914] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:44:37 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000adc000)="6e756d615f6d61707300b5c62eeedbc2799e2c854cfb9ead220e698a9e8de9f243640adf803c64577aa9e4e33f9f72e5185191246f8fe224cc925050e2a9e57dbf6b530a5ebbec861baf4dc4f84bb1df13f0b152aa3b6e781c81b6a8d091f88658ef4f16a21417d83d") mlock(&(0x7f0000003000/0x2000)=nil, 0x2000) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000003c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400002, 0x0) pread64(r2, &(0x7f0000df6000), 0x140, 0x800000000000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='ip_vti0\x00', 0x10) accept4$nfc_llcp(r2, 0x0, &(0x7f0000000340), 0x0) setreuid(r3, r4) 2018/05/07 22:44:37 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000011880)=[{{0x0, 0x0, &(0x7f000000ad80)=[{&(0x7f0000008d80)=""/4096, 0x1000}, {&(0x7f0000009d80)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x4}, 0x9}, {{&(0x7f000000adc0)=@pptp, 0x80, &(0x7f000000d000)=[{&(0x7f000000ae40)=""/17, 0x11}, {&(0x7f000000ae80)=""/145, 0x91}, {&(0x7f000000af40)=""/79, 0x4f}, {&(0x7f000000afc0)=""/4096, 0x1000}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/3, 0x3}], 0x6, &(0x7f000000d080)=""/244, 0xf4, 0x3}, 0x1}, {{&(0x7f000000d180)=@alg, 0x80, &(0x7f000000d3c0)=[{&(0x7f000000d200)=""/193, 0xc1}, {&(0x7f000000d300)=""/151, 0x97}], 0x2, &(0x7f000000d400)=""/20, 0x14, 0x6}, 0x3ace12d2}, {{&(0x7f000000d440)=@un=@abs, 0x80, &(0x7f000000eac0)=[{&(0x7f000000d4c0)=""/166, 0xa6}, {&(0x7f000000d580)=""/192, 0xc0}, {&(0x7f000000d640)=""/44, 0x2c}, {&(0x7f000000d680)=""/80, 0x50}, {&(0x7f000000d700)=""/198, 0xc6}, {&(0x7f000000d800)=""/180, 0xb4}, {&(0x7f000000d8c0)=""/231, 0xe7}, {&(0x7f000000d9c0)=""/201, 0xc9}, {&(0x7f000000dac0)=""/4096, 0x1000}], 0x9, &(0x7f000000eb80)=""/199, 0xc7}, 0x2}, {{&(0x7f000000ec80)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f000000ee00)=[{&(0x7f000000ed00)=""/86, 0x56}, {&(0x7f000000ed80)=""/74, 0x4a}], 0x2, &(0x7f000000ee40)=""/53, 0x35, 0x3f1}}, {{&(0x7f000000ee80)=@hci, 0x80, &(0x7f00000100c0)=[{&(0x7f000000ef00)=""/4096, 0x1000}, {&(0x7f000000ff00)=""/140, 0x8c}, {&(0x7f000000ffc0)=""/134, 0x86}, {&(0x7f0000010080)=""/21, 0x15}], 0x4, &(0x7f0000010100)=""/122, 0x7a, 0x7}, 0x2e580000000000}, {{&(0x7f0000010180)=@ipx, 0x80, &(0x7f0000011380)=[{&(0x7f0000010200)=""/14, 0xe}, {&(0x7f0000010240)=""/4096, 0x1000}, {&(0x7f0000011240)=""/103, 0x67}, {&(0x7f00000112c0)=""/138, 0x8a}], 0x4, &(0x7f00000113c0)=""/124, 0x7c, 0x200}}, {{&(0x7f0000011440)=@nl=@unspec, 0x80, &(0x7f0000011740)=[{&(0x7f00000114c0)=""/82, 0x52}, {&(0x7f0000011540)=""/67, 0x43}, {&(0x7f00000115c0)=""/165, 0xa5}, {&(0x7f0000011680)=""/156, 0x9c}], 0x4, &(0x7f0000011780)=""/254, 0xfe, 0x9}, 0x1ff}], 0x8, 0x40012022, &(0x7f0000011a80)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:37 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = memfd_create(&(0x7f0000000080)='@(-.%eth0\x00', 0x3) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000001c0)={{0xff, 0x5, 0x3, 0x4e, 0x9, 0x8000}, 0xff}) sysfs$2(0x2, 0x5, &(0x7f0000000100)=""/153) 2018/05/07 22:44:37 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getpid() ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) set_robust_list(&(0x7f0000000080)={&(0x7f0000000040), 0x2}, 0x18) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 173.192688] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 173.200004] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 173.207328] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 173.214645] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 173.221965] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000019 2018/05/07 22:44:37 executing program 6: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_cmd={0x1c}}) 2018/05/07 22:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r1, 0x0) 2018/05/07 22:44:37 executing program 2: mlockall(0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000001000)=""/4096) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x5f, r0, 0x3) futex(&(0x7f0000000ffc), 0x86, 0x0, &(0x7f0000fd3ff0)={0xffff, 0x4}, &(0x7f0000000ffc), 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x3, r1}) 2018/05/07 22:44:37 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000100)=0x4, 0x4) setrlimit(0xe, &(0x7f00000000c0)={0x10000, 0xc0}) io_setup(0x2, &(0x7f00000004c0)=0x0) io_getevents(r1, 0x2, 0x1, &(0x7f00000001c0)=[{}], &(0x7f00000003c0)) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0xa200) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000002c0)=""/235) getsockopt$inet6_int(r0, 0x29, 0x4000000000ce, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = getuid() quotactl(0x4, &(0x7f0000000440)='./file0\x00', r3, &(0x7f0000000200)="ca218f86e49e4ea94802000000da126251bc9ac6c6c73f0f672ad933d43ad4ab8a607088c4a2372e8f59ab3c1fbe8ca01aff647f3f8e800287c645e37fd380e47da6e6bab3b1a6698069b253aa6d901505556607ba6a23f6bc7f3447eb5a531b328a7b8965fee08da580ef53c61380c9441c68615bd33762949940c7bf3e5edcdbd5d02c7673b82ba848b700bef1fda41f84467ea7") [ 173.336722] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001380)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001340)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000040)=@destroy_id={0x1, 0x0, 0xfa00, {&(0x7f0000000000), r1}}, 0x1758ee903a753cb7) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000880000fa", @ANYRES32=r1, @ANYBLOB="300000001b00000000000000cb9e109dd87566b60a26c29a940f18490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008febf2c265ed552a648d00000000000000000000000000000000000000"], 0x90) 2018/05/07 22:44:37 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000040)={@mcast2}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ifb0\x00', 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x10001, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"ef8d52f95f4f89e6d5babd507f3100", r1}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:37 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="030000002d402e05126df6297312eca4f475abffaefb1d69a64252b08b54ff4621963615d48944e537a060b71f804f079f5e576b29f2e72395bb2d096c3393baa8119a1f3ac87293ef688be2c2aef6d7ac2e0562c269ed4e187bb2b797333ab1c1d1a4d4e1ab539bbf314fa11065bf1703839dbb1f07dc4e979bf35364bf9ffc21d5e44b18a29881416ef5e0a6112c51dddcd99feb1379dfa32b004b633a21de23b0dab5fc865ad7a340e24aafea9495000039788bcc0000000000000000000000000000"]}) 2018/05/07 22:44:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x7, 0xfffffffffffffff7, 0x1ff}, 0xc) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 2018/05/07 22:44:37 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_mr_cache\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz0', "cd9554c1aef3eac30c7d74e52c8989080c8b40a35fc1dffee8dfa2be4b362ab13ffd508442d5a3641b5a5bbc1b856e42474451457c1b4b"}, 0x3b) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002a1, 0x10400003) 2018/05/07 22:44:37 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000008d40)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10}, 0xffffffffffffff8c, &(0x7f0000007880)={&(0x7f0000000180)=@newsa={0x13c, 0x10, 0x3, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@loopback=0x7f000001}, {@in6=@loopback={0x0, 0x1}, 0x0, 0x32}, @in=@loopback=0x7f000001, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x4c, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, 'F'}}]}, 0xfffffffffffffeea}, 0x1}, 0x3) 2018/05/07 22:44:37 executing program 2: unshare(0x60000000) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x80, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xf9, 0x9, "ca42f6110d60f5f420e5e12898eceb71c6ce3c0023784ac237e949d8120dc028dedf866652cf2eb755fcf4f68b016daad49ae276e2c984d1bf40f2e154df6179432728b3da5f42781bd19238c93a975a7c3b0f55a1b0a2091b2003399a4e54a8c9db396fbf311cfdf528a8a610aaca5cfd3b8b8037a6301a0e91b8d3910592071a9246e0fef04e45287cdd901dc63822399d5957fbf646078b684f6ee0d1ee9496172a4fd6633e8dd6d956045cf3c0d77d76982a7ecd227f2f64a6e0292856e4ec283120d6aca0c6ce7c5a387818854a087ce1514ff528060aa96318d5079c7c795da6df41d8972fe4c36afea6d162d467"}, &(0x7f0000000200), 0x1000) r1 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)='net/route\x00', 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={0x0, 0x5, 0x20}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={r3, 0x9, 0x10000}, &(0x7f0000000480)=0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/route\x00') set_thread_area(&(0x7f0000000240)={0x88e, 0x20101800, 0x1000, 0xeb0, 0x5, 0x1f, 0x0, 0x5, 0x100000001}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000500)=""/145) sendfile(r0, r0, &(0x7f00000002c0)=0x1, 0x85) write$cgroup_pid(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="308d407ed3740817917c"], 0xa) 2018/05/07 22:44:37 executing program 6: r0 = socket(0x18, 0x0, 0x1) bind(r0, &(0x7f0000000080)=@generic={0x19, "e1b80454086c2fd74ed1394264cd97f23436fe661bda6f872163ffc19b26e1e27bc7da5d8f96d160e89cd4fd248691f42d379cecaf1ccb7587352908d5771b3fedbf21a2e1ec84b489d76223a677b68dde641d654ece0681b1e28e7fff61654f4b539a637e716248a27ca53a6747d6bd17e1e05ff9aa3a6a55cb7f6959fb"}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x7, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000140)=""/129) sendmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000001900)=@ax25={0x3, {"4cbbce24cf627c"}}, 0x80, &(0x7f0000001bc0), 0x10000000000000d3, &(0x7f0000004080), 0xfffffffffffffd7f}}], 0x1, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) 2018/05/07 22:44:37 executing program 3: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:37 executing program 5 (fault-call:5 fault-nth:26): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:37 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x100000000501001, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x6, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r1, 0xd1, "195214497e2302d9c65e7f639eb06200e561bf230501077977ead08761eb90a228d92f518fb863b84b1fff70efbb89dc29beb395bcba8d65a4b511fdcb00ee7b05566b74819ef7444a54d67449c20845862224c60edd6d1d8dd1cc9ab43f3b0e1896e9808d91f803f656d33af137efd80dfe8b93013234aa6d5902e019a400afed4475aa76e7b8b7fe31a90308d2c40ddd66e15b470da302c526c2ad39a2335a83306f1213749ed4863049a20d57d639758447faa5d5ff351f3b3081e2761c9cd6788e2c5ae81621218c1d4f258b2a20a0"}, &(0x7f00000000c0)=0xd9) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r1, @in={{0x2, 0x4e23}}, 0x0, 0x1}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x4) r3 = accept$alg(r2, 0x0, 0x0) finit_module(r3, &(0x7f0000000140)='\x00', 0x3) sendmmsg$alg(r3, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000640), 0x107, &(0x7f0000000680), 0x66}], 0xc95d03eb8aea92df, 0x0) sendmmsg$alg(r3, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000040)}], 0x1, 0x8000) [ 173.920404] IPVS: ftp: loaded support on port[0] = 21 [ 173.967716] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 174.005712] FAULT_INJECTION: forcing a failure. [ 174.005712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.017884] CPU: 0 PID: 12495 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 174.024854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.034250] Call Trace: [ 174.036913] dump_stack+0x185/0x1d0 [ 174.040606] should_fail+0x87b/0xab0 [ 174.044403] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 174.049244] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 174.054678] ? is_bpf_text_address+0xb4/0x4b0 [ 174.059287] ? __is_insn_slot_addr+0x198/0x1c0 [ 174.063958] ? kernel_text_address+0x34d/0x3a0 [ 174.068626] ? __kernel_text_address+0x34/0xe0 [ 174.073347] ? __save_stack_trace+0x90d/0xb00 [ 174.077939] alloc_pages_current+0x6b5/0x970 [ 174.082503] __page_cache_alloc+0x95/0x320 [ 174.086867] __do_page_cache_readahead+0x401/0xf20 [ 174.091928] ? kmsan_set_origin_inline+0x6b/0x120 [ 174.096898] ondemand_readahead+0xc6a/0x1210 [ 174.101444] ? generic_file_read_iter+0xb43/0x4440 [ 174.106495] page_cache_sync_readahead+0x1e6/0x740 [ 174.111572] generic_file_read_iter+0xc3c/0x4440 [ 174.116505] blkdev_read_iter+0x20d/0x280 [ 174.120754] ? blkdev_write_iter+0x5f0/0x5f0 [ 174.125237] generic_file_splice_read+0x5d2/0x900 [ 174.130166] ? splice_shrink_spd+0x100/0x100 [ 174.134649] splice_direct_to_actor+0x4c6/0x1040 [ 174.139500] ? do_splice_direct+0x540/0x540 [ 174.141564] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 174.143889] ? security_file_permission+0x28f/0x4b0 [ 174.143943] ? rw_verify_area+0x35e/0x580 [ 174.160583] do_splice_direct+0x335/0x540 [ 174.164887] do_sendfile+0x1067/0x1e40 [ 174.168927] SYSC_sendfile64+0x1b3/0x300 [ 174.173118] SyS_sendfile64+0x64/0x90 [ 174.177046] do_syscall_64+0x309/0x430 [ 174.181016] ? SYSC_sendfile+0x320/0x320 [ 174.185151] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 174.190392] RIP: 0033:0x455979 [ 174.193619] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 174.201387] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 174.208708] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 2018/05/07 22:44:38 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008bc0)={{{@in=@remote, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000008cc0)=0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:38 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008b40)={0x0, @multicast1, @local}, &(0x7f0000008b80)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:38 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x800) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x5, 0x55, &(0x7f0000000080)="fc44d6cd45b3464a09ac7dfbdfdaff672764e964866cb02061e6695d0972e77afe51b44b162bb1cdfcc49c5e49de2cf3d85f7d1c7b0cadf3dea8643f3ed077a3c431baf69b754182fac78b9c7d5473c12ff4df2f0b"}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 2018/05/07 22:44:38 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200040, 0x0) r2 = accept$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6}, 0xfffffffffffffe18) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf22c61278925dae959aafc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4c50ce03e207f40a6e43d2715338038e12499e9e31de54ec42084cd00000000000000"], &(0x7f0000000000)) fremovexattr(r2, &(0x7f00000000c0)=@random={'os2.', 'md5sum&^\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000001300100127bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="00c800002000020014001a0004000f00040000000a00020004001f0008001f0001000000080027000600000028001a000400000004001e0004001f000400020004000a0004001f00040002000400020004a3000000001d00080000000800050002000000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) [ 174.216026] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 174.223373] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 174.230693] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001a [ 174.382701] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:38 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0/file0\x00', 0x41) chdir(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x20, &(0x7f0000a06000)) 2018/05/07 22:44:38 executing program 1: fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0xf4520666e7b4e451, 0x107) getpeername$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xb4b, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000540)=""/4096) ioperm(0x0, 0x8, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000480)=""/124, 0x7c}], 0x1) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0xffffffffffffff81) 2018/05/07 22:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:38 executing program 2: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) getsockname$packet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x14) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x1000010, &(0x7f000000a000)) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = creat(&(0x7f000002cff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f000001bff4)='./file0/bus\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x10) write(r1, &(0x7f000002d000)="e0", 0x1) preadv(r2, &(0x7f0000001ff0)=[{&(0x7f0000000f15)=""/235, 0xeb}], 0x1, 0x27ffffffd) 2018/05/07 22:44:38 executing program 0: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x0) write$tun(r0, &(0x7f00000000c0)={@void, @hdr, @mpls={[], @llc={@snap={0x0, 0x0, "aa", "6f7199"}}}}, 0x12) capset(&(0x7f0000000040)={0x20080520}, &(0x7f0000000000)={0x1000, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffff0f}) 2018/05/07 22:44:38 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008800)={'team0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:38 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x440200, 0x0) write$tun(r1, &(0x7f0000000100)={@pi={0x0, 0xa00}, @void, @llc={@snap={0x1, 0x1, "fb", "f2fd53", 0x3, "aa6a52d2c5ccf1bd94fc1763bc500ad78e13bc4bac0ecc6207c415f1d08ef15ac63d302e363ac111d84a23830185fd1c70f75fd6bbb3cfcd21bff55e1280f8bfcae0ffa32cdd1f4d5a52fcc41484149d569b538b7b98dc6077238b928e671ea9"}}}, 0x6c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000380)=""/217, &(0x7f0000000180)=0xd9) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x61f0, 0x20100) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:38 executing program 5 (fault-call:5 fault-nth:27): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 174.661905] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 174.709133] FAULT_INJECTION: forcing a failure. [ 174.709133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.721237] CPU: 1 PID: 12542 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 174.728208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.737609] Call Trace: [ 174.740266] dump_stack+0x185/0x1d0 [ 174.743967] should_fail+0x87b/0xab0 [ 174.747752] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 174.752582] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 174.758026] ? is_bpf_text_address+0xb4/0x4b0 [ 174.762614] ? __is_insn_slot_addr+0x198/0x1c0 [ 174.767274] ? kernel_text_address+0x34d/0x3a0 [ 174.771932] ? __kernel_text_address+0x34/0xe0 [ 174.776653] ? __save_stack_trace+0x90d/0xb00 [ 174.781244] alloc_pages_current+0x6b5/0x970 [ 174.785805] __page_cache_alloc+0x95/0x320 [ 174.790178] __do_page_cache_readahead+0x401/0xf20 [ 174.795253] ? kmsan_set_origin_inline+0x6b/0x120 [ 174.800239] ondemand_readahead+0xc6a/0x1210 [ 174.804788] ? generic_file_read_iter+0xb43/0x4440 2018/05/07 22:44:38 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newroute={0x30, 0x18, 0x501, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1}}]}, 0x9d}, 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x0) mq_timedsend(r1, &(0x7f0000000200)="f8248a366197e88518ceea814d75d2779882ee78f131b0ac08703e4df7afaea4e91eac7da7138af44bcbf8924d4c63ec37956720cbe999946f7735eb2f98d5142c210e7d22c2fa1061f640961b01b83932316e5e7eb2dcc75b6bf8442a26be32112871fdc19eb1e154ac29adabdd8a901fa47dc43fa497b39f14b1f746dbdf6ac70d720176e0b17da3d454be752acfba28ce633020116d446ca774ff87085ac425286ade585f27ac84d5e8165d0be80e58ac8fa75ec619d7729e296f4f239a1db034", 0xc2, 0x20000db3, &(0x7f0000000180)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@remote={0xfe, 0x80, [], 0xbb}, 0x80000000, 0x2, 0x0, 0x0, 0x6, 0x200, 0x8}, &(0x7f0000000340)=0x20) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x108) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xc6, 0x10000, 0xfffffffffffffffc, 0x8, 0x6, 0x340, 0x1, 0x0, 0x10001, 0x8001, 0x18}, 0xb) 2018/05/07 22:44:38 executing program 0: unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) connect$unix(r0, &(0x7f000017a000)=@abs, 0x1) [ 174.809846] page_cache_sync_readahead+0x1e6/0x740 [ 174.814927] generic_file_read_iter+0xc3c/0x4440 [ 174.819873] blkdev_read_iter+0x20d/0x280 [ 174.824127] ? blkdev_write_iter+0x5f0/0x5f0 [ 174.828619] generic_file_splice_read+0x5d2/0x900 [ 174.833594] ? splice_shrink_spd+0x100/0x100 [ 174.838107] splice_direct_to_actor+0x4c6/0x1040 [ 174.838167] ? do_splice_direct+0x540/0x540 [ 174.838241] ? security_file_permission+0x28f/0x4b0 [ 174.838318] ? rw_verify_area+0x35e/0x580 2018/05/07 22:44:38 executing program 4: close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(0xffffffffffffffff, 0x0) listen(r1, 0x0) 2018/05/07 22:44:38 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80000001, 0x141002) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x752f, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000000c0)={0x2, 0x8, 0x7b7e23db, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'team_slave_1\x00'}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x9) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004600001c000000000000907800000000e00000010000907800000000a2a35ae6598f33985a89afda66ddee5d940e55d7e37f5f2471ca8431317fb27dca729052bd1adeb471cb02cf7ae484313a7cf87d93cd814a4939d40173baa23cdaa7d36aa9db64d4d79afa980408e2176cb4c2262a27da75ad57f8423ae171b02c0c66e6b28bc4993a2fcc2037bb356d19a32c22b867bd707b9d759a8ceab0097fb4954500000000000000000000000000"], &(0x7f00003b5000)) 2018/05/07 22:44:38 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x90800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x28) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) name_to_handle_at(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0xef, 0x1200000000000000, "6c42fce72be74366cf9d2f7e01e7be88ede8d2e9b9d6c80058b2f4f8be4636558e52e15d736cd464806921341ab4d4dbdfbe4ea3765b10ad31863e05405ed25d222346ac646a6c7f7b97132d53f5e08c3753f5240861b8f8933c06c03a516844143623b1be765abe2917a973efa6cd02cb8a9aafb5dea08c70202ca654ab4ab12cf1fcdfc11f05259a6016a8e6f39c02cb58587dc0d1bc9df334fddad1e610b8f60c0ef76ad3c7c0ad0d4e479b1943a082b5fe6eab9f0678c3205ed15dd5b8ac3eecb13d0b008d0c1a589477bd2680d874230f792b004843fed0174cfec6cf6ee03e727c16fa9e"}, &(0x7f0000000180), 0x0) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 174.838382] do_splice_direct+0x335/0x540 [ 174.860933] do_sendfile+0x1067/0x1e40 [ 174.864973] SYSC_sendfile64+0x1b3/0x300 [ 174.869181] SyS_sendfile64+0x64/0x90 [ 174.873120] do_syscall_64+0x309/0x430 [ 174.877096] ? SYSC_sendfile+0x320/0x320 [ 174.881236] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 174.886483] RIP: 0033:0x455979 [ 174.889729] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:44:38 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000087c0)={'team0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 174.889768] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 174.889787] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 2018/05/07 22:44:39 executing program 4: close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(0xffffffffffffffff, 0x0) listen(r1, 0x0) 2018/05/07 22:44:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@rand_addr, 0x0, 0x6c}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}}}, 0x207) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e20, @rand_addr=0x7000000000000000}}}, 0x108) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) [ 174.889804] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/07 22:44:39 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@broadcast, @in=@local}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', r1}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 174.889830] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 174.889848] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001b [ 175.092488] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:39 executing program 5 (fault-call:5 fault-nth:28): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:39 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:39 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000000)=0x100000000) futex(&(0x7f000000cffc), 0x8, 0x0, &(0x7f0000dac000)={0x77359400}, &(0x7f0000000040), 0x0) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000080)=0x1, 0x4) 2018/05/07 22:44:39 executing program 4: close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(0xffffffffffffffff, 0x0) listen(r1, 0x0) 2018/05/07 22:44:39 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/233, 0xe9, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x440000, 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_crypto(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@del={0xe8, 0x11, 0x400, 0x70bd2b, 0x25dfdbfd, {{'rmd128-generic\x00'}, [], [], 0x400}, [{0x8, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000008c0)=[@in6={0xa, 0x4e23, 0x6, @loopback={0x0, 0x1}}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}, 0x100000000}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x21a}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x3}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}], 0x90) unshare(0x28060400) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7005, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1) mkdir(&(0x7f0000000780)='./file0\x00', 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f000039c000)=0x3, 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/28, 0x1c, 0x20, &(0x7f0000000340)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f00000017c0), 0x4) set_robust_list(&(0x7f0000000740)={0x0, 0xf5dd, &(0x7f0000000700)}, 0xc) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000002c0)=""/35) dup2(r0, r0) close(r5) 2018/05/07 22:44:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x21ff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'bridge_slave_1\x00', 0x2001}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x80000000}}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x30800) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000100)=""/103) dup2(r0, r1) ioctl$TIOCCBRK(r2, 0x5428) 2018/05/07 22:44:39 executing program 1: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) unshare(0x400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) fadvise64(r0, 0x0, 0x8, 0x5) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='syzkaller0\x00') 2018/05/07 22:44:39 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYBLOB="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"], @ANYBLOB="c5a514281bacb6be427f9a92894332831eb76ae6936c2c2f0e1586bc5159009fbe921eb268b6057933e2df81c5db20a17c4c66f1f32d26f1db5453b789ebec556c1419ba95e8c013cd655f80698cba2f74f88a08d1e991dc069372", @ANYRES64=r0, @ANYPTR64, @ANYBLOB="4d3c39e46b2f861b66b49c7220e0b07f7496ac8b00bf05a02b2707fd3a986cde5b5ae9b99c2503983f9cbb3039d8e6d44e04872d1868fcf2389344b0ae7b84a9ee7092555fab5708", @ANYBLOB="3a017f354bc98f01754bd81c3a3477d22b2434603d150d3aeaa8fea5362dd19059fda82c1f43d6233865bad440187ca976076ea85f14a126dfeac859a19a7c51d7d8629a8fca63b10e68e1fbc0183809ca9f9bafb4789e1668090902c96ebcbb43374bb798d319bea6eb4756c6dc10cb0fca013f6ab51f7efd4009bf519fa84d0477cc6b4192fb7236495110e54f471f2fd3188aabb322c43ca1f6ed811832bd98aa4ef970e20149e23af41a3d3383893d7fa6b61a5643a902ec67d41e703da86d94ea5a932ba32a6e5f8288e1c0701d"]], &(0x7f0000000000)) 2018/05/07 22:44:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:39 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x4200) ioctl$sock_ipx_SIOCIPXCFGDATA(r1, 0x89e2, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef9f392efa4f91e28026c83dee8154cd6a766636c5eaf12c6127e74184fc85fb707b49b7fac4108a38059d46a635d129576718cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3cd9aa07163ebdbec9862cdfd62974a7e10b6e1dfe11b5b0ce70a00af08048d56ca2cfd3742b91a47a64dfeb48fc61d7f0330c39b68836d77804550bc21a4b9b29124bbef1c89b7ecefc1a8cb539ddba46cb37c4f932bf229f1577ce85950fdab511c1b9f11fea2"], &(0x7f0000000000)) [ 175.611654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.774477] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 175.792262] FAULT_INJECTION: forcing a failure. [ 175.792262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.804338] CPU: 0 PID: 12607 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 175.811319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.820719] Call Trace: [ 175.823391] dump_stack+0x185/0x1d0 [ 175.827097] should_fail+0x87b/0xab0 [ 175.830900] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 175.835742] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 175.841183] ? is_bpf_text_address+0xb4/0x4b0 [ 175.845758] ? __is_insn_slot_addr+0x198/0x1c0 [ 175.850419] ? kernel_text_address+0x34d/0x3a0 [ 175.855079] ? __kernel_text_address+0x34/0xe0 [ 175.859794] ? __save_stack_trace+0x90d/0xb00 [ 175.864389] alloc_pages_current+0x6b5/0x970 [ 175.868944] __page_cache_alloc+0x95/0x320 [ 175.873317] __do_page_cache_readahead+0x401/0xf20 [ 175.878401] ondemand_readahead+0xc6a/0x1210 [ 175.882962] page_cache_sync_readahead+0x1e6/0x740 [ 175.888046] generic_file_read_iter+0xc3c/0x4440 [ 175.892987] blkdev_read_iter+0x20d/0x280 [ 175.897272] ? blkdev_write_iter+0x5f0/0x5f0 [ 175.901779] generic_file_splice_read+0x5d2/0x900 [ 175.906722] ? splice_shrink_spd+0x100/0x100 [ 175.911203] splice_direct_to_actor+0x4c6/0x1040 [ 175.916040] ? do_splice_direct+0x540/0x540 [ 175.920437] ? security_file_permission+0x28f/0x4b0 [ 175.925529] ? rw_verify_area+0x35e/0x580 [ 175.929749] do_splice_direct+0x335/0x540 [ 175.934048] do_sendfile+0x1067/0x1e40 [ 175.938094] SYSC_sendfile64+0x1b3/0x300 [ 175.942296] SyS_sendfile64+0x64/0x90 [ 175.946234] do_syscall_64+0x309/0x430 [ 175.950204] ? SYSC_sendfile+0x320/0x320 [ 175.954349] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 175.959593] RIP: 0033:0x455979 [ 175.962815] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:44:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:39 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) fcntl$setstatus(r1, 0x4, 0x40c00) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/202, 0xca}], 0x1) ioctl(r0, 0x40044104, &(0x7f0000000300)) 2018/05/07 22:44:39 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 175.970588] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 175.977906] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 175.985227] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 175.992548] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 175.994357] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 175.999855] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001c 2018/05/07 22:44:40 executing program 1: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008540)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000008640)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008740)={0x0, @multicast2, @multicast2}, &(0x7f0000008780)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:40 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = syz_open_dev$sndpcmp(&(0x7f0000001500)='/dev/snd/pcmC#D#p\x00', 0x81, 0x220840) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001540)='/dev/nullb0\x00', 0x400, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001580)='/dev/dsp\x00', 0x40000, 0x0) r4 = eventfd(0xfffffffffffffffd) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/ppp\x00', 0x80, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001600)=0x0) r8 = getuid() getresgid(&(0x7f0000001640)=0x0, &(0x7f0000001680), &(0x7f00000016c0)) r10 = gettid() r11 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001780)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000001880)=0xe8) r15 = getegid() r16 = socket$vsock_dgram(0x28, 0x2, 0x0) r17 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x8, 0x0, 0x400, &(0x7f0000002e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000002e40)={0x0, 0x80000, 0xffffffffffffffff}) r20 = syz_fuse_mount(&(0x7f0000002e80)='./file0\x00', 0x2, 0x0, 0xffffffffffffffff, 0x2, 0x2004000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002ec0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002f00)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000003000)=0xe8) r23 = getgid() sendmmsg$unix(r0, &(0x7f00000030c0)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="ccc007e7aa7fe12ed3a16cf8c3faf4efca0380295db2045564edb5389a78b411eb7bf97b6aa73ba83ae819b260fb6bfaba561383740d2cc4542e462187fcabf6c07f26e9c099528ddea743e15e58c225bcec7a56daf00a54bdb7fd21c6faae893bf2ef11f17cdb720406c8c0a69b2936b3b0594307d64a9249b748b9b1d016e5faf79977da36be2c9d1fc27c3feb1e5ca07a2d3f8941b75ef4717748dac1181584807961804d9f34d56c9ab1fb1d6a1809810902b22f1a8fb14ce55cb6dae08bf0efa5896384cb995a3aaf5b3825e124730d5364aa45e7d671be", 0xda}], 0x2, &(0x7f00000018c0)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5]}, @rights={0x18, 0x1, 0x1, [r6]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0xa0, 0x240040d5}, {&(0x7f0000001980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001a00)="9b6e1eead010db8db0d8b30f37a991d27ddb3a332d40b5daceb8a30394521bb5835e00a620fe2a52531f56acf735fb70e7e69d585b0f27e426960aa88b04ee1e22e08d979aaff4124adef694cce532c8f00db334fe4a378c0cfbf71fddd5f7e3d7065221402e12", 0x67}, {&(0x7f0000001a80)="5fcf3394d16bb432dde881f9f841400ed290bf61f3bf10f0e53749bad6f5e9d8111e17a98633f775874e3cedc5608d67a675a53d298dfadc736b3e70001ec1996a83abb38814d780a2b489997859feb6de210063d9d0c4ac55a1bdfd141b07b99cad609de7c3cfb101fdb19ea3f471aa8f442dcc67a2368733a776bac741424b8366eab6b49545dc8cf7eceafc5a7994fb44344b8e66d538bb443ae9b598", 0x9e}, {&(0x7f0000001b40)="f9b752484b7ae5e205165a920bf8f43f10d31e0af1ffa555f2e867f8816ffbfc56b44ffa54d1429e44f75234fea56d34b17818d1b42175c6c2d7a8ad18c62406ec90b831c7f7de30145c68099eb6bcd2f17a20ca80958b0cf8e4fec648027f45becc0d04d8cc905bb13c104ddd4dd516dd4aee90354b98f3bb1f9fe0ed6ab988e894a9d5e67439727033d77d9043909ad32f892fb2083df927b768cc9f1245e91d80", 0xa2}, {&(0x7f0000001c00)="2d1832843ff737d8ca3ace1dd18f65cf2695673c2be79b600a36663d031bdeea5a463a7cf34f391c2d4edef6e418e396", 0x30}, {&(0x7f0000001c40)="cc374745367fb78cff06d573417d5f89863ff10e89d83b51f519a9c4a59b29a33c92541812f87a7a7d0f324dbab1b88455ed59f7b40353720200ff9fab6e37c7e3fe250a8e6278a8e6aa6ff3eee32d2f7b26b1a4337f88a9d1f5ef339c243749b3b9aa00200c419bddb7740e3b7b27c37f08fc562953b1822563a422f0b81c2f924d4ffe2c79e52c66958501b2c95c521367462b113e7b22d037e9c16060208e50", 0xa1}, {&(0x7f0000001d00)="585d0e7830a1f46c8942238ba5337f91147bae08d29050939120adc4049719ff08ce8672a28d6e9067fb6e617af84bad5cb5b3032b1f41e13d5e2b2811ef39d6603765ea63d82eec0524363adbc84524ade194a14b4439cdc27dd2", 0x5b}, {&(0x7f0000001d80)="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", 0x1000}], 0x7, &(0x7f0000003040)=[@rights={0x28, 0x1, 0x1, [r16, r17, r18, r19, r20]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}], 0x48, 0x20000080}], 0x2, 0x4000000) r24 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r24, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r24, &(0x7f0000000240)={0x11, 0x0, r25, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb7050618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d27153380389f69258d53f65a49e12499e9e31de54ec420070000004fb60ae84fb0d38d823dbe77141c98c08b62d586a3816506a8f5e98d49868272b8177223267870dc66ffb288c24a301d5e513e034ebde01299050000007e960458302a0d1ae4e599f96ff55c5af94b4bd302b9279e5de386db3856a4afb72b7c78ff5e7d11c142839326d292cb4defc54a11a177729ca773"], &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r24, 0xc04c5349, &(0x7f0000000040)={0x2, 0x1ff, 0x7}) r26 = dup2(r24, r24) getsockopt$inet_udp_int(r26, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r26, 0xc04c5349, &(0x7f0000000280)={0x2, 0xffffffffffffff7f, 0x639e}) 2018/05/07 22:44:40 executing program 5 (fault-call:5 fault-nth:29): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:40 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/233, 0xe9, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x440000, 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_crypto(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@del={0xe8, 0x11, 0x400, 0x70bd2b, 0x25dfdbfd, {{'rmd128-generic\x00'}, [], [], 0x400}, [{0x8, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000008c0)=[@in6={0xa, 0x4e23, 0x6, @loopback={0x0, 0x1}}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}, 0x100000000}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x21a}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x3}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}], 0x90) unshare(0x28060400) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7005, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1) mkdir(&(0x7f0000000780)='./file0\x00', 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f000039c000)=0x3, 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/28, 0x1c, 0x20, &(0x7f0000000340)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f00000017c0), 0x4) set_robust_list(&(0x7f0000000740)={0x0, 0xf5dd, &(0x7f0000000700)}, 0xc) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000002c0)=""/35) dup2(r0, r0) close(r5) 2018/05/07 22:44:40 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008500)={'bond_slave_1\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:40 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x4200) ioctl$sock_ipx_SIOCIPXCFGDATA(r1, 0x89e2, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef9f392efa4f91e28026c83dee8154cd6a766636c5eaf12c6127e74184fc85fb707b49b7fac4108a38059d46a635d129576718cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3cd9aa07163ebdbec9862cdfd62974a7e10b6e1dfe11b5b0ce70a00af08048d56ca2cfd3742b91a47a64dfeb48fc61d7f0330c39b68836d77804550bc21a4b9b29124bbef1c89b7ecefc1a8cb539ddba46cb37c4f932bf229f1577ce85950fdab511c1b9f11fea2"], &(0x7f0000000000)) 2018/05/07 22:44:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/233, 0xe9, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x440000, 0x0) getpeername(r0, &(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_int(r2, 0x0, 0xe, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_crypto(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@del={0xe8, 0x11, 0x400, 0x70bd2b, 0x25dfdbfd, {{'rmd128-generic\x00'}, [], [], 0x400}, [{0x8, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd}, @IFLA_GROUP={0x8, 0x1b}]}, 0x30}, 0x1}, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000008c0)=[@in6={0xa, 0x4e23, 0x6, @loopback={0x0, 0x1}}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e24, 0x3, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}, 0x100000000}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xa}, 0x21a}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x3}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}], 0x90) unshare(0x28060400) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7005, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1) mkdir(&(0x7f0000000780)='./file0\x00', 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f000039c000)=0x3, 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/28, 0x1c, 0x20, &(0x7f0000000340)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f00000017c0), 0x4) set_robust_list(&(0x7f0000000740)={0x0, 0xf5dd, &(0x7f0000000700)}, 0xc) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000002c0)=""/35) dup2(r0, r0) close(r5) 2018/05/07 22:44:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000401fea)='net/ip_tables_matches\x00') r1 = socket$kcm(0x29, 0x2, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x1}) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg$kcm(r1, &(0x7f0000002540)={&(0x7f0000000100)=@sco={0x1f}, 0x80, &(0x7f0000000080), 0x2f9, &(0x7f0000000080)}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) [ 176.955933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.109926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.160708] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 177.173131] FAULT_INJECTION: forcing a failure. [ 177.173131] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.185135] CPU: 1 PID: 12659 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 177.192107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.201507] Call Trace: [ 177.204168] dump_stack+0x185/0x1d0 [ 177.207866] should_fail+0x87b/0xab0 [ 177.211657] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 177.216495] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 177.221935] ? is_bpf_text_address+0xb4/0x4b0 [ 177.226514] ? __is_insn_slot_addr+0x198/0x1c0 [ 177.231180] ? kernel_text_address+0x34d/0x3a0 [ 177.235858] ? __kernel_text_address+0x34/0xe0 [ 177.240582] ? __save_stack_trace+0x90d/0xb00 [ 177.245178] alloc_pages_current+0x6b5/0x970 [ 177.249738] __page_cache_alloc+0x95/0x320 [ 177.254111] __do_page_cache_readahead+0x401/0xf20 [ 177.259194] ondemand_readahead+0xc6a/0x1210 [ 177.263845] page_cache_sync_readahead+0x1e6/0x740 [ 177.268920] generic_file_read_iter+0xc3c/0x4440 [ 177.273853] blkdev_read_iter+0x20d/0x280 [ 177.278112] ? blkdev_write_iter+0x5f0/0x5f0 [ 177.282601] generic_file_splice_read+0x5d2/0x900 [ 177.287536] ? splice_shrink_spd+0x100/0x100 [ 177.292016] splice_direct_to_actor+0x4c6/0x1040 [ 177.296883] ? do_splice_direct+0x540/0x540 [ 177.301332] ? security_file_permission+0x28f/0x4b0 [ 177.306492] ? rw_verify_area+0x35e/0x580 [ 177.310766] do_splice_direct+0x335/0x540 [ 177.315029] do_sendfile+0x1067/0x1e40 [ 177.319083] SYSC_sendfile64+0x1b3/0x300 [ 177.323234] SyS_sendfile64+0x64/0x90 [ 177.327148] do_syscall_64+0x309/0x430 [ 177.331116] ? SYSC_sendfile+0x320/0x320 [ 177.335248] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 177.340484] RIP: 0033:0x455979 [ 177.343706] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 177.351471] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 177.358780] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 177.366103] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.373396] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 177.380684] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001d 2018/05/07 22:44:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000401fea)='net/ip_tables_matches\x00') r1 = socket$kcm(0x29, 0x2, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x1}) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) sendmsg$kcm(r1, &(0x7f0000002540)={&(0x7f0000000100)=@sco={0x1f}, 0x80, &(0x7f0000000080), 0x2f9, &(0x7f0000000080)}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) 2018/05/07 22:44:41 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000dc6000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000b82000)) connect$unix(r0, &(0x7f0000000040)=@abs, 0x8) syz_extract_tcp_res(&(0x7f0000000000), 0x15e, 0xffffffffffffff81) 2018/05/07 22:44:41 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x2}}, 0x401, 0x8001}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0xc000000000000, 0x0, 0x1, 0x1, r1}, &(0x7f00000001c0)=0x10) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:41 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) getsockname(0xffffffffffffffff, &(0x7f0000008440)=@hci, &(0x7f00000084c0)=0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:41 executing program 5 (fault-call:5 fault-nth:30): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:41 executing program 2: mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000980)='bcsf0\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006ec0)={'veth1_to_bridge\x00', 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000006f00)=0x0) sendmsg$nl_route(r2, &(0x7f0000007080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007040)={&(0x7f0000006f40)=@bridge_getlink={0xd8, 0x12, 0x2, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x2, 0x10}, [@IFLA_PORT_SELF={0x30, 0x19, [@generic="b7e3b0e835a89c7f995342d1c73ecde0e3e898f9d700c8adecebd970ce9a29f9c9223a579f428334e2f1"]}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "bf7a87d82916af5bb4f1"}, @IFLA_ADDRESS={0xc, 0x1, @random="b63b5a056f03"}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_LINKMODE={0x8, 0x11, 0xc4}, @IFLA_LINKINFO={0x4c, 0x12, [@IFLA_INFO_SLAVE_DATA={0x48, 0x5, "db99ce75ab0c4c030e2ae5cfaaa0deb40e785f26128e06a16c121e5a0e04c387fc95c42f0fb345311dfcd6529c0e12d86daf77e12962995c4225e2d0576e73c38cfa3d"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='bcsf0\x00') 2018/05/07 22:44:41 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) timer_create(0x2, &(0x7f0000000100)={0x0, 0x41, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000001c0)={{r2, r3+30000000}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) 2018/05/07 22:44:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000440), &(0x7f00000004c0)=0x68) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x7fffffff, 0x20000) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000001c0)=0x8, 0x4) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xa, 0x40000) bind$packet(r4, &(0x7f0000000180)={0x11, 0xfffffffffffffffe, r3, 0x1, 0xfffffffffffffffc, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}}, 0x14) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000240)=""/77, &(0x7f00000002c0)=0x4d) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000300)={0xfffffffffffffff7, 0x100000000, 0x81, 0x8, 0x6, 0x8000}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_ifreq(r2, 0x8971, &(0x7f0000000200)={'veth0_to_team\x00', @ifru_mtu=0xffffffffffffb689}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x67f3, 0x40, 0x100, 0xfffffffffffffffc, 0x3, 0x6}) syz_emit_ethernet(0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c800ee8154e60888cd6a766636c50f242c1d4aec118a24b0bb97b95aa86aa1e5b0a8fc1ceaf62c61278925dae959aa9918d51fe74184fc85fb700600000418cbf1c150616692650707662e4a72e5772ee4207f40a6e43d2715338038e124730bd2ee6eb28cdeae48ff4bd8ba2d"], &(0x7f0000000000)) [ 177.720196] FAULT_INJECTION: forcing a failure. [ 177.720196] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 177.732293] CPU: 0 PID: 12696 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 177.739267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.748669] Call Trace: [ 177.751337] dump_stack+0x185/0x1d0 [ 177.755040] should_fail+0x87b/0xab0 [ 177.758842] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 177.763684] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 177.769123] ? is_bpf_text_address+0xb4/0x4b0 [ 177.773697] ? __is_insn_slot_addr+0x198/0x1c0 [ 177.778359] ? kernel_text_address+0x34d/0x3a0 [ 177.783026] ? __kernel_text_address+0x34/0xe0 [ 177.787748] ? __save_stack_trace+0x90d/0xb00 [ 177.792339] alloc_pages_current+0x6b5/0x970 [ 177.796892] __page_cache_alloc+0x95/0x320 [ 177.801254] __do_page_cache_readahead+0x401/0xf20 [ 177.806317] ? kmsan_set_origin_inline+0x6b/0x120 [ 177.811287] ondemand_readahead+0xc6a/0x1210 [ 177.815925] ? generic_file_read_iter+0xb43/0x4440 [ 177.820993] page_cache_sync_readahead+0x1e6/0x740 [ 177.826074] generic_file_read_iter+0xc3c/0x4440 [ 177.830998] blkdev_read_iter+0x20d/0x280 [ 177.835253] ? blkdev_write_iter+0x5f0/0x5f0 [ 177.839733] generic_file_splice_read+0x5d2/0x900 [ 177.844660] ? splice_shrink_spd+0x100/0x100 [ 177.849130] splice_direct_to_actor+0x4c6/0x1040 [ 177.853966] ? do_splice_direct+0x540/0x540 [ 177.858396] ? security_file_permission+0x28f/0x4b0 [ 177.863531] ? rw_verify_area+0x35e/0x580 [ 177.867773] do_splice_direct+0x335/0x540 [ 177.872049] do_sendfile+0x1067/0x1e40 [ 177.876078] SYSC_sendfile64+0x1b3/0x300 [ 177.880261] SyS_sendfile64+0x64/0x90 [ 177.884213] do_syscall_64+0x309/0x430 [ 177.888175] ? SYSC_sendfile+0x320/0x320 [ 177.892312] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 177.897540] RIP: 0033:0x455979 [ 177.900762] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 177.908531] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:44:41 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) accept4$packet(0xffffffffffffff9c, &(0x7f00000083c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000008400)=0x14, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:41 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x103982) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"d202b999cf85000000000088f301e710", 0x102}) preadv(r0, &(0x7f0000002580)=[{&(0x7f0000000200)=""/104, 0x68}], 0x1, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) sendto(r1, &(0x7f0000000000)="b0177e743fca761602d6cdb84bc041858d44a8d0ba5bbe8d5c66a70cedf0562b3d678b999a3d421d686298966978d9922d84403eef3cfb219ff71d69e0aa0526a3a2f989366cf41343022edb13a5ffedbd693b698988", 0x56, 0x4000010, &(0x7f0000000080)=@ethernet={0x6}, 0x80) 2018/05/07 22:44:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000e75000)='ns/net\x00') getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xc4, 0x8, 0x2, 0x0, 0x2, 0x9, 0x5, {0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x2, 0x3, 0x6, 0x1ff, 0x3ff}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x1e}, @in={0x2, 0x4e22, @multicast1=0xe0000001}]}, &(0x7f0000000240)=0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f000054cff9)='ns/net\x00') getsockopt$inet_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000000)=""/78, &(0x7f0000000080)=0x4e) fcntl$dupfd(r2, 0x406, r0) 2018/05/07 22:44:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:41 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101240, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x6, 0x200, 0x5, 0x736}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x18, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x6, 0x0, 0x2}]}, 0x30}, 0x1}, 0x0) [ 177.915854] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 177.923181] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 177.930507] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 177.937831] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001e [ 178.033584] validate_nla: 2 callbacks suppressed [ 178.033602] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:42 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000588ff1)='/dev/vhost-net\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000180)) 2018/05/07 22:44:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f0000000240)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/85, 0x55}], 0x1, &(0x7f0000000380)=""/4096, 0x1000, 0x4}, 0x6}, {{&(0x7f0000001380)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001400)=""/98, 0x62}, {&(0x7f0000001480)=""/74, 0x4a}], 0x2, &(0x7f0000001540)=""/159, 0x9f, 0x9}, 0x81}, {{&(0x7f0000001600)=@pppoe, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)=""/47, 0x2f}, {&(0x7f00000016c0)=""/59, 0x3b}], 0x2, &(0x7f0000001740)=""/150, 0x96, 0x8}, 0x483}], 0x3, 0x1, &(0x7f00000018c0)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000019c0)={0x1ff, 0x7, 0x3000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001940)={0x2, &(0x7f0000001900)=[{0x1f, 0x101, 0x0, 0x800}, {0x1, 0x2, 0x8001, 0x6}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={&(0x7f0000f8d000)={0x10}, 0xc, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000001040101ffffffffffffffff000000810000000000000000ef93d2ff0c0002000000080002000000"], 0x2c}, 0x1}, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x14f7, 0x410100) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000001c40)=0xfffffffffffffd24) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvfrom$packet(r2, &(0x7f0000000040)=""/3, 0x3, 0xa7e92e9f496bdc40, &(0x7f0000000200)={0x11, 0xf7, r3, 0x1, 0x6, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 2018/05/07 22:44:42 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/25, 0x19) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:42 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000100)=""/238) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x121603) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x9, 0x8}, 0x4}, 0x10) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) [ 178.344343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor1'. [ 178.430227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/07 22:44:42 executing program 0: mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, &(0x7f000000cff8)=0x5, 0x9, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) mlock(&(0x7f0000007000/0x1000)=nil, 0x1000) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fffffff, 0x480000) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0xffff, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000300)="8758a10db7cce3fb07621057f8f9aaa0b97aa913db27cdf7e81a301ccc85b494513d0d2aa455ffae2dccb19af1934a1e19c5e590f5ae832243a28b96c9261376a98627b80299ce7ada7121f6c92489a919", &(0x7f00000000c0)="e3a2008ca8d57cf7cf6fd45831fa8530535279881ca7863b6abe01ab5298f8b0d888c941472f5d3bfef309add5115834504fa7f7c748c0dbdd5893df5fcb03d584effb1302f83cbd957c54686f1c6924596667edcbe1439b3ff4d6510e9f2896a647ce5a26c32a2db393284290203d301c8fcc522cf633501c57469526a7578241686ee3e127e45ef4d4cc7c9cef9722fb2ca9885784fc96c4fceefc9734304343a50cf1dd4e4e542390dbca9b406dc3da70b44a4ea3d1ca0f7f336280e398f5f392f7dcb44a1cefaca17faa6d0963dde65a1305417431c6097d8aba14ae66566c5e9ff1", 0x3}, 0x20) 2018/05/07 22:44:42 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000040)={&(0x7f0000006c40)=@can, 0x80, &(0x7f0000007040)=[{&(0x7f0000006cc0)=""/154, 0x9a}, {&(0x7f0000006d80)=""/233, 0xe9}, {&(0x7f0000006e80)=""/207, 0xcf}, {&(0x7f0000006f80)=""/140, 0x8c}], 0x4, &(0x7f0000007080)=""/120, 0x78, 0x2}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:42 executing program 5 (fault-call:5 fault-nth:31): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:42 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x420c0, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r0, 0x1, 0x0, 0x6}, 0x14) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x1) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl(r0, 0x20000000002201, &(0x7f0000000000)) write(r0, &(0x7f0000000000)="07a16bffe85ac684f4b79abe9442e50da8be4fc4e59aceeb434ff8eab5e83a5d239a450e95638962d9eaaec3d2835360c334b0476313033a61a561d2dcaf141a8f7dfa1c0e165884d0fa58546068c8ef1143f91615924e9ab9ea8c80fcbdc37668cd059b60fcf11b40d622ebb019a769568eabecb499137acb5a6b13f1093bd9e0d242b9aaef2d45796cc8b955dd2658892bc5ab31101cc5a898d7dd18e43b7d1b2c7d49fde40426ef27f60ac217780451339706c9d3c192da13503fbe10538783a48839e3ef71b326ad66fb1d152b4a93ad52a88e63ddb913baa4a486d447c5e09bab75f217b4bc95f4bab2a29ef79d9ae61ce1", 0xf4) 2018/05/07 22:44:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000071100c000000000004000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/07 22:44:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xbb94, 0x8008, 0x7b, 0x80, 0x0}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'bond0\x00', 0x1f}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x57, "f5b03969d5b0c83f28ed6574cc80232b9fb51c4e47ac76272e01bb4e9e605f8c5d5d604da58668f37e79802047273ba3f3652bc4b854c5433475f1fa435b85957b4e9edfd12c2702a781af58e2b485ee3e796145f08309"}, &(0x7f0000000240)=0x5f) pread64(r0, &(0x7f0000000000)=""/242, 0xf2, 0x3) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'lo\x00', 0x95fe}) r2 = socket$packet(0x11, 0x200000002, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="c0000000a26771382cb4641b91996d06607c2961752059388dc4155172662a8f49526a50df9749cbae4a68e1fcef5de479bbe9397b0a6b1ecc4dd17f8ab7444af6fa13c50d80af32a5fc716503c11ea3147b0d77d0c3968f5032246eed13ee12490936df46db4cfaf1e143554ffa38dbd5f1696e147abed5ee06f3d00b20607f71281a8dfde78c16181509624b7e8966e21b33e3821563b9faa72920836b407fdcec793abf27cf2b709e4385ab4ed69589c910803163960000000000002c74c025ae547446ee5770bdddde70c000000000000000"], &(0x7f00000005c0)=0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r4, 0x18}, &(0x7f00000003c0)=0x8) r6 = openat(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x20000, 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r5, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000580)={'ip6_vti0\x00', {0x2, 0x4e23}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000640)=ANY=[@ANYBLOB="0d0000004b669462dcbccf65a4193681f6c20000000000000000000000000010fcacc1acdbfe05ecf377b5a32fdefca37cd7e586a4913cf83f3bc81f1841afcdd884a6f3c7251b7f213a12b741f6e4f8441caac3558f35347e4c5fd6dac6ad08c27e3131c3d08cedc18711bbe983f42f1b325e5e8e442ffb1d45b14c0b2b56685fc227fe8f1f708e51412e000000000000000000000000000000"], &(0x7f00000002c0)=0x1) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000280), 0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0xffffff89, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}}, 0xfda9) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000480)='bridge0\x00') getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = socket(0x0, 0x805, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) listen(r2, 0x20000006) sendmsg(r7, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) close(r0) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000000840), &(0x7f0000000600)=0x4) accept(0xffffffffffffffff, &(0x7f0000000140)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f00000001c0)=0x80) getsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000380), &(0x7f0000000540)=0x12b) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, r3}, 0x301) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$nfc_llcp(r9, &(0x7f00000043c0), 0x0, 0x4800) accept(r7, &(0x7f00000004c0)=@ethernet={0x0, @remote}, &(0x7f0000000340)=0x80) [ 178.571446] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:42 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x2, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xbb94, 0x8008, 0x7b, 0x80, 0x0}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'bond0\x00', 0x1f}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x57, "f5b03969d5b0c83f28ed6574cc80232b9fb51c4e47ac76272e01bb4e9e605f8c5d5d604da58668f37e79802047273ba3f3652bc4b854c5433475f1fa435b85957b4e9edfd12c2702a781af58e2b485ee3e796145f08309"}, &(0x7f0000000240)=0x5f) pread64(r0, &(0x7f0000000000)=""/242, 0xf2, 0x3) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:42 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x4a40) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x0, 0x0, 0xde, 0x7ffffffffffffffd}) 2018/05/07 22:44:42 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'ip6gretap0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x1) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0xfffffefffffffffd, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='/\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)) [ 178.891270] FAULT_INJECTION: forcing a failure. [ 178.891270] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.903378] CPU: 1 PID: 12796 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 178.910357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.919761] Call Trace: [ 178.922420] dump_stack+0x185/0x1d0 [ 178.926115] should_fail+0x87b/0xab0 [ 178.929898] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 178.934728] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 178.940160] ? is_bpf_text_address+0xb4/0x4b0 [ 178.944726] ? __is_insn_slot_addr+0x198/0x1c0 [ 178.949381] ? kernel_text_address+0x34d/0x3a0 [ 178.954037] ? __kernel_text_address+0x34/0xe0 [ 178.959402] ? __save_stack_trace+0x90d/0xb00 [ 178.963981] alloc_pages_current+0x6b5/0x970 [ 178.968530] __page_cache_alloc+0x95/0x320 [ 178.972893] __do_page_cache_readahead+0x401/0xf20 [ 178.977934] ? kmsan_set_origin_inline+0x6b/0x120 [ 178.982877] ondemand_readahead+0xc6a/0x1210 [ 178.987404] ? generic_file_read_iter+0xb43/0x4440 [ 178.992456] page_cache_sync_readahead+0x1e6/0x740 [ 178.997519] generic_file_read_iter+0xc3c/0x4440 [ 179.002450] blkdev_read_iter+0x20d/0x280 [ 179.006702] ? blkdev_write_iter+0x5f0/0x5f0 [ 179.011180] generic_file_splice_read+0x5d2/0x900 [ 179.016144] ? splice_shrink_spd+0x100/0x100 [ 179.020618] splice_direct_to_actor+0x4c6/0x1040 [ 179.025466] ? do_splice_direct+0x540/0x540 [ 179.029863] ? security_file_permission+0x28f/0x4b0 [ 179.034951] ? rw_verify_area+0x35e/0x580 [ 179.039205] do_splice_direct+0x335/0x540 [ 179.043499] do_sendfile+0x1067/0x1e40 [ 179.047530] SYSC_sendfile64+0x1b3/0x300 [ 179.051721] SyS_sendfile64+0x64/0x90 [ 179.055638] do_syscall_64+0x309/0x430 [ 179.059604] ? SYSC_sendfile+0x320/0x320 [ 179.063734] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 179.068976] RIP: 0033:0x455979 [ 179.072195] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 179.079962] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:44:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xbb94, 0x8008, 0x7b, 0x80, 0x0}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'bond0\x00', 0x1f}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x57, "f5b03969d5b0c83f28ed6574cc80232b9fb51c4e47ac76272e01bb4e9e605f8c5d5d604da58668f37e79802047273ba3f3652bc4b854c5433475f1fa435b85957b4e9edfd12c2702a781af58e2b485ee3e796145f08309"}, &(0x7f0000000240)=0x5f) pread64(r0, &(0x7f0000000000)=""/242, 0xf2, 0x3) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:43 executing program 0: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x2) socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 2018/05/07 22:44:43 executing program 1: unshare(0x40600) r0 = syz_open_dev$loop(&(0x7f0000f76ff5)='/dev/loop#\x00', 0xc, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x44200) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000040)=0x2681) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1263, 0x0) [ 179.087278] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 179.094596] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 179.101917] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 179.109237] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000001f [ 179.123236] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:43 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe7419a02c1e6096fcc1b20eccd6689b3c8314afc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2e8038e124e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:43 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000006bc0)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:43 executing program 5 (fault-call:5 fault-nth:32): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xbb94, 0x8008, 0x7b, 0x80, 0x0}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'bond0\x00', 0x1f}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x57, "f5b03969d5b0c83f28ed6574cc80232b9fb51c4e47ac76272e01bb4e9e605f8c5d5d604da58668f37e79802047273ba3f3652bc4b854c5433475f1fa435b85957b4e9edfd12c2702a781af58e2b485ee3e796145f08309"}, &(0x7f0000000240)=0x5f) pread64(r0, &(0x7f0000000000)=""/242, 0xf2, 0x3) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:43 executing program 2: mmap(&(0x7f0000000000/0xeef000)=nil, 0xeef000, 0x0, 0x2000032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000000)="958e392937a186d6306a04000000aa57ff000206000000000007abb4d5ed5cff03000000000000ffff", 0x29) r1 = socket(0xa, 0x7, 0x2) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 2018/05/07 22:44:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) fcntl$setlease(r0, 0x400, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(r0, 0x4, 0x4003) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000000c0)=0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x1e, 0x0, 'client0\x00', 0x0, "2247bc2ad809b5bc", "027e0508dc56f2ffa47bd2657dcd7fff6697614a013edef8ed104e4a5b104106", 0x7, 0x80}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 2018/05/07 22:44:43 executing program 0: r0 = memfd_create(&(0x7f0000041000)="01800d05", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000041ff3)='/dev/snd/seq\x00', 0x0, 0x20002) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000140)=[{0x3, 0xc19b, 0x6, 0x3, @time={r2, r3+30000000}, {0x89c4, 0x8}, {0x1, 0x80000001}, @queue={0x511, {0x2, 0x3}}}, {0x3, 0x8, 0x3f, 0x0, @time={0x77359400}, {0x96a0, 0x2}, {0x9, 0x1ff}, @connect={{0x100000001, 0xfffffffffffffc01}, {0x3, 0xf29}}}, {0x525, 0x6, 0x99fb, 0x1, @time={r4, r5+30000000}, {0x7}, {0x1, 0x4}, @addr={0x77, 0x100}}], 0x90) r6 = dup2(r1, r0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0), 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000e50)=[{0x0, 0x100000001, 0x0, 0x0, @tick=0x5da36b38, {}, {}, @result}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x62}) [ 179.463971] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xbb94, 0x8008, 0x7b, 0x80, 0x0}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'bond0\x00', 0x1f}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x57, "f5b03969d5b0c83f28ed6574cc80232b9fb51c4e47ac76272e01bb4e9e605f8c5d5d604da58668f37e79802047273ba3f3652bc4b854c5433475f1fa435b85957b4e9edfd12c2702a781af58e2b485ee3e796145f08309"}, &(0x7f0000000240)=0x5f) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:43 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x2400) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x2, r3, 0x1, 0xf7fffffffffffffc, 0x6, @random="0784784d6342"}, 0x14) io_setup(0x401, &(0x7f0000000140)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000180)="5def76e7fa46fc971ef7afbf13164afc08baeea68294ef086155f46a7d", 0x1d, 0x226000000, 0x0, 0x1, r1}, &(0x7f0000000200)) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) [ 179.826801] FAULT_INJECTION: forcing a failure. [ 179.826801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.838893] CPU: 0 PID: 12870 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 179.845871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.855274] Call Trace: [ 179.857947] dump_stack+0x185/0x1d0 [ 179.861650] should_fail+0x87b/0xab0 [ 179.865450] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 179.870287] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 179.875728] ? is_bpf_text_address+0xb4/0x4b0 [ 179.880306] ? __is_insn_slot_addr+0x198/0x1c0 [ 179.884960] ? kernel_text_address+0x34d/0x3a0 [ 179.889636] ? __kernel_text_address+0x34/0xe0 [ 179.894392] ? __save_stack_trace+0x90d/0xb00 [ 179.898977] alloc_pages_current+0x6b5/0x970 [ 179.903546] __page_cache_alloc+0x95/0x320 [ 179.907910] __do_page_cache_readahead+0x401/0xf20 [ 179.912997] ondemand_readahead+0xc6a/0x1210 [ 179.917551] page_cache_sync_readahead+0x1e6/0x740 [ 179.922622] generic_file_read_iter+0xc3c/0x4440 [ 179.927500] blkdev_read_iter+0x20d/0x280 [ 179.931787] ? blkdev_write_iter+0x5f0/0x5f0 [ 179.936264] generic_file_splice_read+0x5d2/0x900 [ 179.941246] ? splice_shrink_spd+0x100/0x100 [ 179.945722] splice_direct_to_actor+0x4c6/0x1040 [ 179.950560] ? do_splice_direct+0x540/0x540 [ 179.955002] ? security_file_permission+0x28f/0x4b0 [ 179.960123] ? rw_verify_area+0x35e/0x580 [ 179.964327] do_splice_direct+0x335/0x540 [ 179.968586] do_sendfile+0x1067/0x1e40 [ 179.972550] SYSC_sendfile64+0x1b3/0x300 [ 179.976702] SyS_sendfile64+0x64/0x90 [ 179.980550] do_syscall_64+0x309/0x430 [ 179.984480] ? SYSC_sendfile+0x320/0x320 [ 179.988558] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 179.993754] RIP: 0033:0x455979 [ 179.996989] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 180.004723] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 180.012017] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 180.019310] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/07 22:44:44 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x2400) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x2, r3, 0x1, 0xf7fffffffffffffc, 0x6, @random="0784784d6342"}, 0x14) io_setup(0x401, &(0x7f0000000140)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000180)="5def76e7fa46fc971ef7afbf13164afc08baeea68294ef086155f46a7d", 0x1d, 0x226000000, 0x0, 0x1, r1}, &(0x7f0000000200)) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) 2018/05/07 22:44:44 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000006b40)={'vcan0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xbb94, 0x8008, 0x7b, 0x80}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'bond0\x00', 0x1f}) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xbb94, 0x8008, 0x7b, 0x80, 0x0}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'bond0\x00', 0x1f}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x57, "f5b03969d5b0c83f28ed6574cc80232b9fb51c4e47ac76272e01bb4e9e605f8c5d5d604da58668f37e79802047273ba3f3652bc4b854c5433475f1fa435b85957b4e9edfd12c2702a781af58e2b485ee3e796145f08309"}, &(0x7f0000000240)=0x5f) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:44 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91008026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:44 executing program 5 (fault-call:5 fault-nth:33): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) fcntl$setlease(r0, 0x400, 0x5) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fcntl$setstatus(r0, 0x4, 0x4003) sendfile(r0, r0, &(0x7f0000000240), 0x20000102000007) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000000c0)=0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x1e, 0x0, 'client0\x00', 0x0, "2247bc2ad809b5bc", "027e0508dc56f2ffa47bd2657dcd7fff6697614a013edef8ed104e4a5b104106", 0x7, 0x80}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 180.026628] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 180.033916] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000020 [ 180.197660] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 180.250595] FAULT_INJECTION: forcing a failure. [ 180.250595] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.262825] CPU: 1 PID: 12894 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 180.269809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.279215] Call Trace: [ 180.281891] dump_stack+0x185/0x1d0 [ 180.286479] should_fail+0x87b/0xab0 [ 180.290341] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 180.295184] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 180.300638] ? is_bpf_text_address+0xb4/0x4b0 [ 180.305226] ? __is_insn_slot_addr+0x198/0x1c0 [ 180.309897] ? kernel_text_address+0x34d/0x3a0 [ 180.314558] ? __kernel_text_address+0x34/0xe0 [ 180.319281] ? __save_stack_trace+0x90d/0xb00 [ 180.323873] alloc_pages_current+0x6b5/0x970 [ 180.328427] __page_cache_alloc+0x95/0x320 [ 180.332791] __do_page_cache_readahead+0x401/0xf20 [ 180.337865] ? kmsan_set_origin_inline+0x6b/0x120 [ 180.342853] ondemand_readahead+0xc6a/0x1210 2018/05/07 22:44:44 executing program 2: r0 = getpgid(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80200, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x400, @mcast2={0xff, 0x2, [], 0x1}, 0x8001}, @in6={0xa, 0x4e21, 0x1f, @loopback={0x0, 0x1}, 0xd6}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e21, 0x3, @empty, 0x6}}, 0x80000001, 0x4}, 0x90) r3 = syz_open_procfs(r0, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000000)={0x3, 0x8}) write$cgroup_int(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000eb68001a003f94990500000000009a8b0000"], 0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30010, r3, 0x0) fchmod(r3, 0xfffffffffffffffc) 2018/05/07 22:44:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xbb94, 0x8008, 0x7b, 0x80}, &(0x7f0000000180)=0x10) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) [ 180.347406] ? generic_file_read_iter+0xb43/0x4440 [ 180.352466] page_cache_sync_readahead+0x1e6/0x740 [ 180.357549] generic_file_read_iter+0xc3c/0x4440 [ 180.362485] blkdev_read_iter+0x20d/0x280 [ 180.366745] ? blkdev_write_iter+0x5f0/0x5f0 [ 180.371242] generic_file_splice_read+0x5d2/0x900 [ 180.376222] ? splice_shrink_spd+0x100/0x100 [ 180.380706] splice_direct_to_actor+0x4c6/0x1040 [ 180.385557] ? do_splice_direct+0x540/0x540 [ 180.390002] ? security_file_permission+0x28f/0x4b0 [ 180.395155] ? rw_verify_area+0x35e/0x580 2018/05/07 22:44:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 180.399434] do_splice_direct+0x335/0x540 [ 180.403740] do_sendfile+0x1067/0x1e40 [ 180.407791] SYSC_sendfile64+0x1b3/0x300 [ 180.412001] SyS_sendfile64+0x64/0x90 [ 180.415943] do_syscall_64+0x309/0x430 [ 180.419923] ? SYSC_sendfile+0x320/0x320 [ 180.424069] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 180.429309] RIP: 0033:0x455979 [ 180.432534] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 180.440313] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:44:44 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x1, 0x5, 0xd}, 0x2c) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000280)=0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0xa, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000040), &(0x7f0000000140)=""/129}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e24, 0x6, @loopback={0x0, 0x1}, 0x3}, @in6={0xa, 0x4e23, 0x8a4, @empty, 0x7fff}, @in6={0xa, 0x4e23, 0x3ff, @mcast1={0xff, 0x1, [], 0x1}, 0x43c}], 0x64) 2018/05/07 22:44:44 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) recvmmsg(r0, &(0x7f0000004640)=[{{&(0x7f0000000040)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000200)}], 0x4, &(0x7f00000002c0)=""/128, 0x80, 0x7}, 0x400}, {{&(0x7f0000000340)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/38, 0x26}], 0x1, &(0x7f0000001600)=""/4096, 0x1000, 0x54e}, 0xffff}, {{&(0x7f0000002600)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002680)=""/132, 0x84}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000002740)=""/231, 0xe7}, {&(0x7f0000002840)=""/204, 0xcc}, {&(0x7f0000002940)=""/206, 0xce}, {&(0x7f0000002a40)=""/59, 0x3b}, {&(0x7f0000002a80)=""/135, 0x87}], 0x7, 0x0, 0x0, 0x7fff}, 0x7fff}, {{&(0x7f0000002bc0)=@sco, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c40)=""/4096, 0x1000}, {&(0x7f0000003c40)=""/93, 0x5d}], 0x2, 0x0, 0x0, 0x8}, 0x1}, {{&(0x7f0000003d00)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003d80)=""/68, 0x44}, {&(0x7f0000003e00)=""/139, 0x8b}, {&(0x7f0000003ec0)=""/221, 0xdd}], 0x3, &(0x7f0000004000)=""/80, 0x50, 0xffff}, 0x9}, {{&(0x7f0000004080)=@sco, 0x80, &(0x7f0000004140)=[{&(0x7f0000004100)=""/23, 0x17}], 0x1, &(0x7f0000004180)=""/183, 0xb7, 0x7}, 0xcb38}, {{&(0x7f0000004240)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000045c0)=[{&(0x7f00000042c0)}, {&(0x7f0000004300)=""/51, 0x33}, {&(0x7f0000004340)=""/79, 0x4f}, {&(0x7f00000043c0)=""/41, 0x29}, {&(0x7f0000004400)=""/217, 0xd9}, {&(0x7f0000004500)=""/146, 0x92}], 0x6, 0x0, 0x0, 0x100000001}, 0x5}], 0x7, 0x2003, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000004800), &(0x7f0000004840)=0x4) shutdown(r0, 0x1) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)={0x1, [0x8]}, 0x6) syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) 2018/05/07 22:44:44 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91008026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 180.447631] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 180.454958] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 180.462283] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 180.469635] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000021 2018/05/07 22:44:44 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000006a40)=0x14, 0x800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:44 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x82c2) r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x2, r0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="904c3aab3b7601735e5dd4c4", 0xc, 0x8, 0x0, 0x0, r1}]) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/113, 0x71}], 0x1) ioctl$TIOCSBRK(r1, 0x40044591) [ 180.654535] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x600102, 0x0) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:44 executing program 5 (fault-call:5 fault-nth:34): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:44 executing program 1: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91008026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 180.968499] FAULT_INJECTION: forcing a failure. [ 180.968499] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.980636] CPU: 1 PID: 12935 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 180.987613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.997022] Call Trace: [ 180.999694] dump_stack+0x185/0x1d0 [ 181.003399] should_fail+0x87b/0xab0 [ 181.007205] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 181.012046] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 181.017491] ? is_bpf_text_address+0xb4/0x4b0 [ 181.022074] ? __is_insn_slot_addr+0x198/0x1c0 [ 181.026742] ? kernel_text_address+0x34d/0x3a0 [ 181.031408] ? __kernel_text_address+0x34/0xe0 [ 181.036736] ? __save_stack_trace+0x90d/0xb00 [ 181.041327] alloc_pages_current+0x6b5/0x970 [ 181.045895] __page_cache_alloc+0x95/0x320 [ 181.050265] __do_page_cache_readahead+0x401/0xf20 [ 181.055305] ? kmsan_set_origin_inline+0x6b/0x120 [ 181.060236] ondemand_readahead+0xc6a/0x1210 [ 181.064744] ? generic_file_read_iter+0xb43/0x4440 [ 181.069724] page_cache_sync_readahead+0x1e6/0x740 [ 181.074676] generic_file_read_iter+0xc3c/0x4440 [ 181.079556] blkdev_read_iter+0x20d/0x280 [ 181.083757] ? blkdev_write_iter+0x5f0/0x5f0 [ 181.088179] generic_file_splice_read+0x5d2/0x900 [ 181.093109] ? splice_shrink_spd+0x100/0x100 [ 181.097549] splice_direct_to_actor+0x4c6/0x1040 [ 181.102362] ? do_splice_direct+0x540/0x540 [ 181.106765] ? security_file_permission+0x28f/0x4b0 [ 181.111815] ? rw_verify_area+0x35e/0x580 [ 181.116028] do_splice_direct+0x335/0x540 [ 181.120259] do_sendfile+0x1067/0x1e40 [ 181.124269] SYSC_sendfile64+0x1b3/0x300 [ 181.128403] SyS_sendfile64+0x64/0x90 [ 181.132305] do_syscall_64+0x309/0x430 [ 181.136220] ? SYSC_sendfile+0x320/0x320 [ 181.140333] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 181.145529] RIP: 0033:0x455979 [ 181.148717] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 181.156450] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 181.163744] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 181.171049] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 181.178342] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 181.185637] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000022 2018/05/07 22:44:45 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = accept(r0, &(0x7f0000000140)=@in6, &(0x7f00000001c0)=0x80) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000280)={'broute\x00', 0x0, 0x4, 0xae, [], 0x9, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000540)=""/174}, &(0x7f0000000600)=0x78) getsockopt$inet6_opts(r1, 0x29, 0xf0f94f9153406176, &(0x7f0000000380)=""/226, &(0x7f0000000200)=0xe2) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6}, 0x14) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x4600c0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) pipe(&(0x7f0000000040)) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:45 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x2000000000000395, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYRES64, @ANYRES32, @ANYPTR], &(0x7f0000000480)="7379cb65000000000000", 0x7fffffffffff, 0xc3, &(0x7f0000000380)=""/195, 0x40f00}, 0x48) 2018/05/07 22:44:45 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004000)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:45 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40080, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x264, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1) ppoll(&(0x7f0000b7fff0)=[{r2, 0xfffffffffffffff8}], 0x1, &(0x7f0000345ff0)={0x0, r0}, &(0x7f0000d5c000), 0x8) fcntl$setstatus(r2, 0x4, 0x42402) connect$unix(r1, &(0x7f00006edffb)=@file={0x0, './file0\x00'}, 0xa) 2018/05/07 22:44:45 executing program 5 (fault-call:5 fault-nth:35): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:45 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000001800), 0x0) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000380)) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000001840)=ANY=[@ANYBLOB="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"]]], 0x8) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/07 22:44:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 181.968397] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 181.991601] FAULT_INJECTION: forcing a failure. [ 181.991601] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 182.003743] CPU: 0 PID: 12957 Comm: syz-executor5 Not tainted 4.16.0+ #87 2018/05/07 22:44:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 182.010718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.020120] Call Trace: [ 182.022781] dump_stack+0x185/0x1d0 [ 182.026478] should_fail+0x87b/0xab0 [ 182.030270] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 182.035100] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 182.040540] ? is_bpf_text_address+0xb4/0x4b0 [ 182.045145] ? __is_insn_slot_addr+0x198/0x1c0 [ 182.049814] ? kernel_text_address+0x34d/0x3a0 [ 182.054467] ? __kernel_text_address+0x34/0xe0 [ 182.059173] ? __save_stack_trace+0x90d/0xb00 [ 182.063756] alloc_pages_current+0x6b5/0x970 2018/05/07 22:44:46 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001680)={@mcast2}, &(0x7f00000016c0)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:46 executing program 0: [ 182.068314] __page_cache_alloc+0x95/0x320 [ 182.072669] __do_page_cache_readahead+0x401/0xf20 [ 182.077716] ? kmsan_set_origin_inline+0x6b/0x120 [ 182.082681] ondemand_readahead+0xc6a/0x1210 [ 182.087229] ? generic_file_read_iter+0xb43/0x4440 [ 182.092290] page_cache_sync_readahead+0x1e6/0x740 [ 182.097384] generic_file_read_iter+0xc3c/0x4440 [ 182.102321] blkdev_read_iter+0x20d/0x280 [ 182.106577] ? blkdev_write_iter+0x5f0/0x5f0 [ 182.111072] generic_file_splice_read+0x5d2/0x900 2018/05/07 22:44:46 executing program 6: pread64(0xffffffffffffffff, &(0x7f00008af000), 0xfffffef6, 0x100000) [ 182.116011] ? splice_shrink_spd+0x100/0x100 [ 182.120485] splice_direct_to_actor+0x4c6/0x1040 [ 182.125331] ? do_splice_direct+0x540/0x540 [ 182.129719] ? security_file_permission+0x28f/0x4b0 [ 182.134814] ? rw_verify_area+0x35e/0x580 [ 182.139081] do_splice_direct+0x335/0x540 [ 182.143384] do_sendfile+0x1067/0x1e40 [ 182.147430] SYSC_sendfile64+0x1b3/0x300 [ 182.151626] SyS_sendfile64+0x64/0x90 [ 182.155556] do_syscall_64+0x309/0x430 [ 182.159527] ? SYSC_sendfile+0x320/0x320 [ 182.163660] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 182.168898] RIP: 0033:0x455979 [ 182.172130] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 182.179908] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 182.187232] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 182.194557] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 182.201878] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 182.209202] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000023 [ 182.288741] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(0xffffffffffffffff, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:47 executing program 0: 2018/05/07 22:44:47 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) syz_emit_ethernet(0x94, &(0x7f0000000100)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@x25={0x805, {0x0, 0x44, 0x0, "481f9f1e65bf9ba6b9e9b1a86f75a74eef749ddcafe12339b5b0038bab4a20834cb680e228e4dc8ec2a8bf7333fe1c31c7899f658023b7649e18e6ceec3f3499198016a8fc843a5c090161f043a7f00c3b2cb52ab31ad41d9865890bd424d08d10c07b595fb23c604e2350f0a376c1b7fe16be2587c08c96ffd7cc867dbab78e1e11d0"}}}}, &(0x7f0000000040)={0x1, 0x3, [0x515, 0xa82, 0x949, 0xeed]}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee813fcd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1169bf8c209fe13d1f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb64e8afa7013f2b57b460931a373f5e72b51c4afbdd4843878318c219900c1b95f20eb317a67bb9abd81542b49cde71f04092688d6ed77619bbef517c4eb52f296e2f41d"], &(0x7f0000000000)) poll(&(0x7f0000000080)=[{r0}, {r0}, {r0, 0x4400}, {r0, 0x1100}], 0x4, 0x729) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x1, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000200)) 2018/05/07 22:44:47 executing program 5 (fault-call:5 fault-nth:36): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:47 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001200)={@dev}, &(0x7f0000001240)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:47 executing program 2: 2018/05/07 22:44:47 executing program 1: [ 183.187535] Unknown ioctl 19312 2018/05/07 22:44:47 executing program 0: [ 183.216739] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 183.270558] FAULT_INJECTION: forcing a failure. [ 183.270558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.282655] CPU: 1 PID: 13010 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 183.289634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.299121] Call Trace: [ 183.301778] dump_stack+0x185/0x1d0 [ 183.305536] should_fail+0x87b/0xab0 [ 183.309332] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 183.314198] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 183.319673] ? is_bpf_text_address+0xb4/0x4b0 [ 183.324245] ? __is_insn_slot_addr+0x198/0x1c0 [ 183.328927] ? kernel_text_address+0x34d/0x3a0 [ 183.333578] ? __kernel_text_address+0x34/0xe0 [ 183.338286] ? __save_stack_trace+0x90d/0xb00 [ 183.342862] alloc_pages_current+0x6b5/0x970 [ 183.347404] __page_cache_alloc+0x95/0x320 [ 183.351773] __do_page_cache_readahead+0x401/0xf20 [ 183.356850] ? kmsan_set_origin_inline+0x6b/0x120 [ 183.361830] ondemand_readahead+0xc6a/0x1210 [ 183.366377] ? generic_file_read_iter+0xb43/0x4440 [ 183.371437] page_cache_sync_readahead+0x1e6/0x740 [ 183.376513] generic_file_read_iter+0xc3c/0x4440 [ 183.381426] blkdev_read_iter+0x20d/0x280 [ 183.385675] ? blkdev_write_iter+0x5f0/0x5f0 [ 183.390158] generic_file_splice_read+0x5d2/0x900 [ 183.395127] ? splice_shrink_spd+0x100/0x100 [ 183.399610] splice_direct_to_actor+0x4c6/0x1040 [ 183.404456] ? do_splice_direct+0x540/0x540 [ 183.408906] ? security_file_permission+0x28f/0x4b0 [ 183.414018] ? rw_verify_area+0x35e/0x580 [ 183.418257] do_splice_direct+0x335/0x540 [ 183.422567] do_sendfile+0x1067/0x1e40 [ 183.426622] SYSC_sendfile64+0x1b3/0x300 [ 183.430846] SyS_sendfile64+0x64/0x90 [ 183.434786] do_syscall_64+0x309/0x430 [ 183.438771] ? SYSC_sendfile+0x320/0x320 [ 183.442921] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 183.448162] RIP: 0033:0x455979 [ 183.451388] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 183.459154] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:47 executing program 1: 2018/05/07 22:44:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:47 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x83, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002ffc)) 2018/05/07 22:44:47 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x24) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 183.466475] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 183.473803] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 183.481127] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 183.488450] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000024 2018/05/07 22:44:47 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000033c000)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) 2018/05/07 22:44:47 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000f40)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000001040)=0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:47 executing program 0: 2018/05/07 22:44:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 183.720511] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:47 executing program 2: 2018/05/07 22:44:47 executing program 5 (fault-call:5 fault-nth:37): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:47 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766659aa9918d51fe74184fc85fb707a49b7fa18cbf1c150618d048c24d8f9cfa97ae5772ecc8696249b2ee4207f40a6e43d27c5da6206f6be05ab06f3b45a2ac8f415338038e12499e9e31de54ec42084cdc3704fb60000000000000000000000175e41508ff754f85d08070037dc39d21f020000007482567e25890a5ac9f401eadfc5e8db587e8bec129efbcb8df85dbbc0c37fc9016147aa1947e835280e27cb7e68ecc7416c1d905cf7b76f0fcfff64d837bc43752b86ae0805"], &(0x7f0000000000)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x666, 0x20400) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0x27d, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 2018/05/07 22:44:47 executing program 0: 2018/05/07 22:44:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:47 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:47 executing program 1: 2018/05/07 22:44:48 executing program 2: 2018/05/07 22:44:48 executing program 0: [ 184.026742] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:48 executing program 1: 2018/05/07 22:44:48 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c803000000cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)={0x0, 0x0, [0xa31, 0x0, 0x0, 0x8b8]}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) 2018/05/07 22:44:48 executing program 6: 2018/05/07 22:44:48 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000dc0)=0xe8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 184.308159] FAULT_INJECTION: forcing a failure. [ 184.308159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.320291] CPU: 0 PID: 13081 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 184.327277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.336687] Call Trace: [ 184.339364] dump_stack+0x185/0x1d0 [ 184.343087] should_fail+0x87b/0xab0 [ 184.346922] __alloc_pages_nodemask+0x5fe/0x5dc0 2018/05/07 22:44:48 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 184.349399] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 184.351752] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 184.351787] ? is_bpf_text_address+0xb4/0x4b0 [ 184.351887] ? __is_insn_slot_addr+0x198/0x1c0 [ 184.373736] ? kernel_text_address+0x34d/0x3a0 [ 184.378396] ? __kernel_text_address+0x34/0xe0 [ 184.383065] ? msan_get_shadow_origin_ptr+0x1ef/0x230 [ 184.388351] alloc_pages_current+0x6b5/0x970 [ 184.392853] __page_cache_alloc+0x95/0x320 [ 184.397214] __do_page_cache_readahead+0x401/0xf20 [ 184.402269] ? kmsan_set_origin_inline+0x6b/0x120 2018/05/07 22:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000), 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 184.407253] ondemand_readahead+0xc6a/0x1210 [ 184.411815] ? generic_file_read_iter+0xb43/0x4440 [ 184.416959] page_cache_sync_readahead+0x1e6/0x740 [ 184.422309] generic_file_read_iter+0xc3c/0x4440 [ 184.427247] blkdev_read_iter+0x20d/0x280 [ 184.431493] ? blkdev_write_iter+0x5f0/0x5f0 [ 184.435980] generic_file_splice_read+0x5d2/0x900 [ 184.440951] ? splice_shrink_spd+0x100/0x100 [ 184.445438] splice_direct_to_actor+0x4c6/0x1040 [ 184.450309] ? do_splice_direct+0x540/0x540 [ 184.454759] ? security_file_permission+0x28f/0x4b0 [ 184.459915] ? rw_verify_area+0x35e/0x580 [ 184.464190] do_splice_direct+0x335/0x540 [ 184.468494] do_sendfile+0x1067/0x1e40 [ 184.472554] SYSC_sendfile64+0x1b3/0x300 [ 184.476760] SyS_sendfile64+0x64/0x90 [ 184.480712] do_syscall_64+0x309/0x430 [ 184.484702] ? SYSC_sendfile+0x320/0x320 [ 184.488849] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 184.494106] RIP: 0033:0x455979 [ 184.497340] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 184.505113] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 184.506636] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 184.512448] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 184.512466] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 184.512483] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 184.512515] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000025 2018/05/07 22:44:48 executing program 0: 2018/05/07 22:44:48 executing program 6: 2018/05/07 22:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000), 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:48 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000b40)={'veth0_to_bridge\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:48 executing program 5 (fault-call:5 fault-nth:38): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:48 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000040)="82ac80b0", 0x4, 0x0) 2018/05/07 22:44:48 executing program 2: 2018/05/07 22:44:48 executing program 1: 2018/05/07 22:44:48 executing program 6: 2018/05/07 22:44:48 executing program 0: [ 184.798169] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:48 executing program 2: 2018/05/07 22:44:48 executing program 1: 2018/05/07 22:44:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000), 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 184.931812] FAULT_INJECTION: forcing a failure. [ 184.931812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.943978] CPU: 0 PID: 13120 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 184.950958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.960365] Call Trace: [ 184.963040] dump_stack+0x185/0x1d0 [ 184.966753] should_fail+0x87b/0xab0 [ 184.970561] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 184.975400] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 184.980848] ? is_bpf_text_address+0xb4/0x4b0 [ 184.985480] ? __is_insn_slot_addr+0x198/0x1c0 [ 184.990152] ? kernel_text_address+0x34d/0x3a0 [ 184.994821] ? __kernel_text_address+0x34/0xe0 [ 184.999551] ? __save_stack_trace+0x90d/0xb00 [ 185.004151] alloc_pages_current+0x6b5/0x970 [ 185.008701] __page_cache_alloc+0x95/0x320 [ 185.013064] __do_page_cache_readahead+0x401/0xf20 [ 185.018135] ? kmsan_set_origin_inline+0x6b/0x120 [ 185.023121] ondemand_readahead+0xc6a/0x1210 2018/05/07 22:44:49 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000005faa)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60c8fba200022c0000000004000000000000000000000000ff020000000000002101000d00000000000000000000000081000002000000"], 0x0) [ 185.027675] ? generic_file_read_iter+0xb43/0x4440 [ 185.032736] page_cache_sync_readahead+0x1e6/0x740 [ 185.037815] generic_file_read_iter+0xc3c/0x4440 [ 185.042737] blkdev_read_iter+0x20d/0x280 [ 185.046983] ? blkdev_write_iter+0x5f0/0x5f0 [ 185.051461] generic_file_splice_read+0x5d2/0x900 [ 185.056422] ? splice_shrink_spd+0x100/0x100 [ 185.060891] splice_direct_to_actor+0x4c6/0x1040 [ 185.065730] ? do_splice_direct+0x540/0x540 [ 185.070126] ? security_file_permission+0x28f/0x4b0 [ 185.075225] ? rw_verify_area+0x35e/0x580 2018/05/07 22:44:49 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @remote}, &(0x7f0000000b00)=0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:49 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) open$dir(&(0x7f00004be000)='./file0\x00', 0x880, 0x0) [ 185.079491] do_splice_direct+0x335/0x540 [ 185.083792] do_sendfile+0x1067/0x1e40 [ 185.087838] SYSC_sendfile64+0x1b3/0x300 [ 185.092042] SyS_sendfile64+0x64/0x90 [ 185.095981] do_syscall_64+0x309/0x430 [ 185.099963] ? SYSC_sendfile+0x320/0x320 [ 185.104103] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 185.109355] RIP: 0033:0x455979 [ 185.112585] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 185.120366] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:44:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000), 0x0) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/07 22:44:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r1, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x8, 0x3, 0x80000000, 0x1, 0x24}, &(0x7f00000002c0)=0x98) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000180)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 185.128540] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 185.135872] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 185.143195] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 185.150517] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000026 [ 185.212778] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:50 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, &(0x7f0000c91000)=ANY=[@ANYBLOB="3bfd37"], &(0x7f0000e6bffc)='GPL\x00', 0x0, 0x99, &(0x7f000000d000)=""/153}, 0x48) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/07 22:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = getpid() futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000001800), 0x0) pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf46}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) nanosleep(&(0x7f0000000180)={0x0, r1+30000000}, &(0x7f0000000380)) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000001840)=ANY=[@ANYRES16, @ANYBLOB="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"]]], 0x8) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x3d1}], 0x2, 0x0) 2018/05/07 22:44:50 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000c57000)=ANY=[@ANYBLOB="5bdf"], &(0x7f0000ea3000)) r0 = getpid() pause() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000002780)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x282}], 0x2, 0x0) 2018/05/07 22:44:50 executing program 5 (fault-call:5 fault-nth:39): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:50 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000900)=0x14, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/251, 0xfb}], 0x1, 0x0) 2018/05/07 22:44:50 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x60, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 186.389422] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 186.435105] FAULT_INJECTION: forcing a failure. [ 186.435105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.447201] CPU: 1 PID: 13175 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 186.454179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.463585] Call Trace: [ 186.466253] dump_stack+0x185/0x1d0 [ 186.469963] should_fail+0x87b/0xab0 [ 186.473772] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 186.478761] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 186.484256] ? update_load_avg+0x218c/0x2c20 [ 186.488754] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 186.494236] alloc_pages_current+0x6b5/0x970 [ 186.498813] __page_cache_alloc+0x95/0x320 [ 186.503193] __do_page_cache_readahead+0x401/0xf20 [ 186.508276] ondemand_readahead+0xc6a/0x1210 [ 186.512823] ? generic_file_read_iter+0xb43/0x4440 [ 186.517850] page_cache_sync_readahead+0x1e6/0x740 [ 186.522948] generic_file_read_iter+0xc3c/0x4440 [ 186.527838] blkdev_read_iter+0x20d/0x280 2018/05/07 22:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 186.532100] ? blkdev_write_iter+0x5f0/0x5f0 [ 186.536595] generic_file_splice_read+0x5d2/0x900 [ 186.541579] ? splice_shrink_spd+0x100/0x100 [ 186.546425] splice_direct_to_actor+0x4c6/0x1040 [ 186.551289] ? do_splice_direct+0x540/0x540 [ 186.555737] ? security_file_permission+0x28f/0x4b0 [ 186.560911] ? rw_verify_area+0x35e/0x580 [ 186.565180] do_splice_direct+0x335/0x540 [ 186.569480] do_sendfile+0x1067/0x1e40 [ 186.573535] SYSC_sendfile64+0x1b3/0x300 [ 186.577726] SyS_sendfile64+0x64/0x90 [ 186.581653] do_syscall_64+0x309/0x430 2018/05/07 22:44:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 186.585614] ? SYSC_sendfile+0x320/0x320 [ 186.589738] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 186.594980] RIP: 0033:0x455979 [ 186.598200] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 186.605970] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 186.613298] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 186.620619] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 186.628029] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 186.635356] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000027 2018/05/07 22:44:51 executing program 2: r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000cd8000)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)) 2018/05/07 22:44:51 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x400000000000, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:51 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x203881e343ecc26e, 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) dup3(r0, r0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) mkdir(&(0x7f0000024ff6)='./control\x00', 0x0) r2 = open(&(0x7f0000000280)='./control\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x40049409, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc8, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {0x4}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000001c0)) 2018/05/07 22:44:51 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:51 executing program 5 (fault-call:5 fault-nth:40): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:51 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 187.506542] FAULT_INJECTION: forcing a failure. [ 187.506542] name failslab, interval 1, probability 0, space 0, times 0 [ 187.518088] CPU: 0 PID: 13208 Comm: syz-executor0 Not tainted 4.16.0+ #87 [ 187.525061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.534470] Call Trace: [ 187.537147] dump_stack+0x185/0x1d0 [ 187.540872] should_fail+0x87b/0xab0 [ 187.544671] should_failslab+0x279/0x2a0 [ 187.548493] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 187.548813] __kmalloc_node+0x22e/0x1190 [ 187.560273] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.565717] ? mntput_no_expire+0xad/0x17c0 [ 187.570107] ? dput+0x495/0xce0 [ 187.573458] ? kvmalloc_node+0x1a1/0x2e0 [ 187.577628] ? kmsan_set_origin_inline+0x6b/0x120 [ 187.582538] kvmalloc_node+0x1a1/0x2e0 [ 187.586495] traverse+0x1b7/0xe60 [ 187.590002] ? rcu_all_qs+0x32/0x1f0 [ 187.593766] ? __msan_poison_alloca+0x15c/0x1d0 [ 187.598489] seq_read+0x3dc/0x2260 [ 187.602098] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 187.607565] ? kmsan_set_origin_inline+0x6b/0x120 [ 187.612495] ? seq_open+0x360/0x360 [ 187.616166] proc_reg_read+0x1de/0x2f0 [ 187.620141] ? proc_reg_llseek+0x260/0x260 [ 187.624472] __vfs_read+0x1a5/0x9b0 [ 187.628189] vfs_read+0x36c/0x6c0 [ 187.631759] SYSC_pread64+0x275/0x310 [ 187.635678] SyS_pread64+0x65/0x90 [ 187.639329] do_syscall_64+0x309/0x430 [ 187.643309] ? SYSC_write+0x360/0x360 [ 187.647176] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 187.652403] RIP: 0033:0x455979 2018/05/07 22:44:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:51 executing program 7: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:51 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x800017, &(0x7f0000000040)=0x80000000, 0x92) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x4) syncfs(r0) pause() setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f000096e000), 0x4) [ 187.655625] RSP: 002b:00007ff0c6e68c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 187.663393] RAX: ffffffffffffffda RBX: 00007ff0c6e696d4 RCX: 0000000000455979 [ 187.670714] RDX: 00000000fffffef6 RSI: 00000000208af000 RDI: 0000000000000013 [ 187.678036] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 187.685368] R10: 0000000000100000 R11: 0000000000000246 R12: 0000000000000014 [ 187.692685] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000000 [ 187.736882] FAULT_INJECTION: forcing a failure. [ 187.736882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.748996] CPU: 0 PID: 13225 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 187.755968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.765370] Call Trace: [ 187.768036] dump_stack+0x185/0x1d0 [ 187.771742] should_fail+0x87b/0xab0 [ 187.775542] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 187.780381] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 187.785815] ? is_bpf_text_address+0xb4/0x4b0 [ 187.790390] ? __is_insn_slot_addr+0x198/0x1c0 [ 187.795049] ? kernel_text_address+0x34d/0x3a0 [ 187.799709] ? __kernel_text_address+0x34/0xe0 [ 187.804429] ? __save_stack_trace+0x90d/0xb00 [ 187.809009] alloc_pages_current+0x6b5/0x970 [ 187.813591] __page_cache_alloc+0x95/0x320 [ 187.817968] __do_page_cache_readahead+0x401/0xf20 [ 187.823023] ? kmsan_set_origin_inline+0x6b/0x120 [ 187.827987] ondemand_readahead+0xc6a/0x1210 2018/05/07 22:44:51 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 187.830312] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 187.832518] ? generic_file_read_iter+0xb43/0x4440 [ 187.832587] page_cache_sync_readahead+0x1e6/0x740 [ 187.832665] generic_file_read_iter+0xc3c/0x4440 [ 187.854696] blkdev_read_iter+0x20d/0x280 [ 187.858990] ? blkdev_write_iter+0x5f0/0x5f0 [ 187.863466] generic_file_splice_read+0x5d2/0x900 [ 187.868439] ? splice_shrink_spd+0x100/0x100 [ 187.872903] splice_direct_to_actor+0x4c6/0x1040 [ 187.877743] ? do_splice_direct+0x540/0x540 [ 187.882171] ? security_file_permission+0x28f/0x4b0 [ 187.887310] ? rw_verify_area+0x35e/0x580 [ 187.891574] do_splice_direct+0x335/0x540 [ 187.895876] do_sendfile+0x1067/0x1e40 [ 187.899923] SYSC_sendfile64+0x1b3/0x300 [ 187.904126] SyS_sendfile64+0x64/0x90 [ 187.908067] do_syscall_64+0x309/0x430 [ 187.912052] ? SYSC_sendfile+0x320/0x320 [ 187.916190] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 187.921431] RIP: 0033:0x455979 [ 187.924663] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:44:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) [ 187.932437] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 187.939767] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 187.947153] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 187.954479] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 187.961797] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000028 2018/05/07 22:44:52 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x96907e, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x100, 0x2003) write$eventfd(r0, &(0x7f00000000c0)=0x2, 0x8) recvfrom$ipx(r0, &(0x7f00000001c0)=""/145, 0x91, 0x20, &(0x7f0000000000)={0x4, 0x4, 0x3, "bf4bcf2c07e7", 0x1}, 0x10) 2018/05/07 22:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:52 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:52 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x17, r1, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0xffffffffffffffb8) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:52 executing program 5 (fault-call:5 fault-nth:41): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 188.416939] FAULT_INJECTION: forcing a failure. [ 188.416939] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.429124] CPU: 0 PID: 13264 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 188.436103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.445502] Call Trace: [ 188.448165] dump_stack+0x185/0x1d0 [ 188.451871] should_fail+0x87b/0xab0 [ 188.455684] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 188.460522] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 188.465958] ? is_bpf_text_address+0xb4/0x4b0 [ 188.470539] ? __is_insn_slot_addr+0x198/0x1c0 [ 188.475195] ? kernel_text_address+0x34d/0x3a0 [ 188.479864] ? __kernel_text_address+0x34/0xe0 [ 188.484576] ? __save_stack_trace+0x90d/0xb00 [ 188.489166] alloc_pages_current+0x6b5/0x970 [ 188.493720] __page_cache_alloc+0x95/0x320 [ 188.498077] __do_page_cache_readahead+0x401/0xf20 [ 188.503111] ? kmsan_set_origin_inline+0x6b/0x120 [ 188.508031] ondemand_readahead+0xc6a/0x1210 [ 188.512506] ? generic_file_read_iter+0xb43/0x4440 [ 188.517487] page_cache_sync_readahead+0x1e6/0x740 [ 188.522472] generic_file_read_iter+0xc3c/0x4440 [ 188.527309] blkdev_read_iter+0x20d/0x280 [ 188.531492] ? blkdev_write_iter+0x5f0/0x5f0 [ 188.535927] generic_file_splice_read+0x5d2/0x900 [ 188.540823] ? splice_shrink_spd+0x100/0x100 [ 188.545248] splice_direct_to_actor+0x4c6/0x1040 [ 188.550054] ? do_splice_direct+0x540/0x540 [ 188.554417] ? security_file_permission+0x28f/0x4b0 [ 188.559503] ? rw_verify_area+0x35e/0x580 [ 188.563725] do_splice_direct+0x335/0x540 [ 188.567969] do_sendfile+0x1067/0x1e40 [ 188.571971] SYSC_sendfile64+0x1b3/0x300 [ 188.576133] SyS_sendfile64+0x64/0x90 [ 188.580030] do_syscall_64+0x309/0x430 [ 188.583966] ? SYSC_sendfile+0x320/0x320 [ 188.588059] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 188.593263] RIP: 0033:0x455979 [ 188.596456] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 188.604196] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 188.611538] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 188.618834] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 188.626112] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 188.633396] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000029 2018/05/07 22:44:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(0xffffffffffffffff, 0x0) listen(r2, 0x0) 2018/05/07 22:44:52 executing program 0: syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') 2018/05/07 22:44:52 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x96907e, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x100, 0x2003) write$eventfd(r0, &(0x7f00000000c0)=0x2, 0x8) recvfrom$ipx(r0, &(0x7f00000001c0)=""/145, 0x91, 0x20, &(0x7f0000000000)={0x4, 0x4, 0x3, "bf4bcf2c07e7", 0x1}, 0x10) 2018/05/07 22:44:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:52 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000000)={0x0, 0x0, [0x0, 0xb5a, 0xbde]}) 2018/05/07 22:44:52 executing program 1: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = socket$inet6(0xa, 0x3, 0xe2) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/229, 0xe5) 2018/05/07 22:44:52 executing program 5 (fault-call:5 fault-nth:42): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 188.830816] validate_nla: 1 callbacks suppressed [ 188.830835] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 188.858809] FAULT_INJECTION: forcing a failure. [ 188.858809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.870865] CPU: 0 PID: 13289 Comm: syz-executor5 Not tainted 4.16.0+ #87 2018/05/07 22:44:52 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x5, 0x80807, 0x28) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x320, 0x70bd28, 0x25dfdbff, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2ba}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb8c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) listen(r0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) io_setup(0x9e, &(0x7f00000001c0)=0x0) r5 = dup2(r0, r3) getsockopt$inet_tcp_int(r5, 0x6, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) clock_nanosleep(0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)) io_submit(r4, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000340)="1c", 0x1}]) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'veth1_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 2018/05/07 22:44:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x0, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 188.877838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.887242] Call Trace: [ 188.889908] dump_stack+0x185/0x1d0 [ 188.893603] should_fail+0x87b/0xab0 [ 188.897391] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 188.902218] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 188.907637] ? is_bpf_text_address+0xb4/0x4b0 [ 188.912185] ? __is_insn_slot_addr+0x198/0x1c0 [ 188.916827] ? kernel_text_address+0x34d/0x3a0 [ 188.921472] ? __kernel_text_address+0x34/0xe0 [ 188.926180] ? __save_stack_trace+0x90d/0xb00 [ 188.930756] alloc_pages_current+0x6b5/0x970 [ 188.935309] __page_cache_alloc+0x95/0x320 [ 188.939670] __do_page_cache_readahead+0x401/0xf20 [ 188.944716] ? kmsan_set_origin_inline+0x6b/0x120 [ 188.949676] ondemand_readahead+0xc6a/0x1210 [ 188.954169] ? generic_file_read_iter+0xb43/0x4440 [ 188.959210] page_cache_sync_readahead+0x1e6/0x740 [ 188.964270] generic_file_read_iter+0xc3c/0x4440 [ 188.969216] blkdev_read_iter+0x20d/0x280 [ 188.973470] ? blkdev_write_iter+0x5f0/0x5f0 [ 188.977951] generic_file_splice_read+0x5d2/0x900 [ 188.982878] ? splice_shrink_spd+0x100/0x100 [ 188.987371] splice_direct_to_actor+0x4c6/0x1040 [ 188.992236] ? do_splice_direct+0x540/0x540 [ 188.996630] ? security_file_permission+0x28f/0x4b0 [ 189.001776] ? rw_verify_area+0x35e/0x580 [ 189.006033] do_splice_direct+0x335/0x540 [ 189.010327] do_sendfile+0x1067/0x1e40 [ 189.014372] SYSC_sendfile64+0x1b3/0x300 [ 189.018575] SyS_sendfile64+0x64/0x90 [ 189.022507] do_syscall_64+0x309/0x430 [ 189.026473] ? SYSC_sendfile+0x320/0x320 [ 189.030598] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 189.035826] RIP: 0033:0x455979 [ 189.039044] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 189.046803] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 189.054109] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 189.061425] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 189.068742] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 189.076057] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000002a 2018/05/07 22:44:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x0, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0x16c, 0x1) 2018/05/07 22:44:53 executing program 3: inotify_init() r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) getpeername(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f0000000100)=0x80) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(0xffffffffffffffff, 0x0) listen(r2, 0x0) 2018/05/07 22:44:53 executing program 6: pread64(0xffffffffffffffff, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:53 executing program 2: r0 = memfd_create(&(0x7f0000000000)='/dev/sg#\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x59, 0x2, 0x7ff, 0x77}, 0x10) write(r0, &(0x7f000060a000)="d1", 0x1) mmap(&(0x7f0000540000/0x3000)=nil, 0x3000, 0xa, 0x2012, r0, 0x0) fallocate(r0, 0x3, 0x0, 0x11f1) 2018/05/07 22:44:53 executing program 5 (fault-call:5 fault-nth:43): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080)=0x2, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x103002) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @rand_addr=0x5}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x20, @loopback={0x0, 0x1}, 0x6}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x20}, 0x1}], 0x78) [ 189.371896] FAULT_INJECTION: forcing a failure. [ 189.371896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.384018] CPU: 0 PID: 13329 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 189.390994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.400393] Call Trace: [ 189.403043] dump_stack+0x185/0x1d0 [ 189.406725] should_fail+0x87b/0xab0 [ 189.410507] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 189.415332] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 189.420761] ? is_bpf_text_address+0xb4/0x4b0 [ 189.425330] ? __is_insn_slot_addr+0x198/0x1c0 [ 189.429983] ? kernel_text_address+0x34d/0x3a0 [ 189.434634] ? __kernel_text_address+0x34/0xe0 [ 189.439355] ? __save_stack_trace+0x90d/0xb00 [ 189.443945] alloc_pages_current+0x6b5/0x970 [ 189.448492] __page_cache_alloc+0x95/0x320 [ 189.452848] __do_page_cache_readahead+0x401/0xf20 [ 189.457906] ? kmsan_set_origin_inline+0x6b/0x120 [ 189.463224] ondemand_readahead+0xc6a/0x1210 [ 189.467762] ? generic_file_read_iter+0xb43/0x4440 [ 189.472808] page_cache_sync_readahead+0x1e6/0x740 [ 189.477869] generic_file_read_iter+0xc3c/0x4440 [ 189.482794] blkdev_read_iter+0x20d/0x280 [ 189.487042] ? blkdev_write_iter+0x5f0/0x5f0 [ 189.491515] generic_file_splice_read+0x5d2/0x900 [ 189.496478] ? splice_shrink_spd+0x100/0x100 [ 189.500956] splice_direct_to_actor+0x4c6/0x1040 [ 189.505814] ? do_splice_direct+0x540/0x540 [ 189.510250] ? security_file_permission+0x28f/0x4b0 [ 189.515408] ? rw_verify_area+0x35e/0x580 [ 189.519663] do_splice_direct+0x335/0x540 [ 189.523953] do_sendfile+0x1067/0x1e40 [ 189.527979] SYSC_sendfile64+0x1b3/0x300 [ 189.532173] SyS_sendfile64+0x64/0x90 [ 189.536086] do_syscall_64+0x309/0x430 [ 189.540044] ? SYSC_sendfile+0x320/0x320 [ 189.544165] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 189.549403] RIP: 0033:0x455979 [ 189.552630] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 189.560401] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:44:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0f09b038ec720defb5f71e7a04186062949470e673fa8e97eb087f24eedccae22724716b1d29045cb9bbfb19b2914389a091ef9732e0e8555bbc0f01d6a9d2523b1a912aa02bf7d70e2ac6d6cdd3a89795deb4b2b16db9477ec639db251b8df50e5ff8020e95e795b97451adfad182ba9ba0d079a8600bb244480b2c3c74e4a34c426d64238b3028b0f0cbe3901103d458e20f40cab140aea3877ebd519c3f79215d77bc107628bce5a84f5d4975adde3f7eb73bfe7cffb15adb8646784943f18e6712771c2de657f9a4f701111e07f12a", 0xd1) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) 2018/05/07 22:44:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x0, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') sync_file_range(r0, 0xfffffffffffffff7, 0x4, 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x492492492492827}) 2018/05/07 22:44:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(0xffffffffffffffff, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:53 executing program 1: r0 = socket$inet(0x15, 0x200000000000000, 0xfffffffffffffffc) getsockopt$inet_mreqn(r0, 0x114, 0x2714, &(0x7f0000000040)={@remote, @remote}, &(0x7f0000000180)) 2018/05/07 22:44:53 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x401, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 189.567719] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 189.575034] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 189.582348] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 189.589655] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000002b 2018/05/07 22:44:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(0xffffffffffffffff, 0x0) listen(r2, 0x0) 2018/05/07 22:44:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x24}, 0x1}, 0x0) 2018/05/07 22:44:53 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x21, &(0x7f0000000100), &(0x7f0000000040)=0xffffffffffffff62) 2018/05/07 22:44:53 executing program 6 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:53 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000291000)={0x1, 0x3, &(0x7f0000dabfa8)=@framed={{0x18}, [], {0x95}}, &(0x7f000092e000)='GPL\x00', 0x1, 0xf7, &(0x7f0000999000)=""/247}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='personality\x00') ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000001080)=0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000c68ffc)=r0, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) [ 189.904415] FAULT_INJECTION: forcing a failure. [ 189.904415] name failslab, interval 1, probability 0, space 0, times 0 [ 189.915853] CPU: 1 PID: 13367 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 189.922835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.932240] Call Trace: [ 189.934907] dump_stack+0x185/0x1d0 [ 189.938607] should_fail+0x87b/0xab0 [ 189.942457] should_failslab+0x279/0x2a0 [ 189.946608] __kmalloc_node+0x22e/0x1190 [ 189.950787] ? __msan_poison_alloca+0x15c/0x1d0 [ 189.955546] ? _cond_resched+0x3c/0xd0 [ 189.959550] ? kvmalloc_node+0x1a1/0x2e0 [ 189.963710] ? rcu_all_qs+0x32/0x1f0 [ 189.967491] kvmalloc_node+0x1a1/0x2e0 [ 189.971417] ? _cond_resched+0x3c/0xd0 [ 189.975331] seq_read+0x520/0x2260 [ 189.978911] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 189.984348] ? kmsan_set_origin_inline+0x6b/0x120 [ 189.989244] ? seq_open+0x360/0x360 [ 189.992885] proc_reg_read+0x1de/0x2f0 [ 189.996813] ? proc_reg_llseek+0x260/0x260 [ 190.001102] __vfs_read+0x1a5/0x9b0 [ 190.004770] vfs_read+0x36c/0x6c0 [ 190.008291] SYSC_pread64+0x275/0x310 [ 190.012157] SyS_pread64+0x65/0x90 [ 190.015746] do_syscall_64+0x309/0x430 [ 190.019659] ? SYSC_write+0x360/0x360 [ 190.023483] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 190.028679] RIP: 0033:0x455979 [ 190.031871] RSP: 002b:00007fedc8dffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 190.039594] RAX: ffffffffffffffda RBX: 00007fedc8e006d4 RCX: 0000000000455979 [ 190.046865] RDX: 00000000fffffef6 RSI: 00000000208af000 RDI: 0000000000000013 [ 190.054141] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 190.061417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 190.068691] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000000 2018/05/07 22:44:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x24}, 0x1}, 0x0) 2018/05/07 22:44:54 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6f543b2470449f798d69dea38d7dc55c3ca605e1aab2628e17fa1e7f588b1d052302156901ce4ca4c44e10371d474401e876e92b70bb0cdab5350202c436ff0c8"], &(0x7f0000000000)) 2018/05/07 22:44:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f00008af000), 0xffffffffffffff32, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xe6, "b51cfb25c19ca6fa87556d600458dd379c20983c42445a19082cc9c48db863a37476b6f23cbc6f504be8b7891ce249c0ed947e2fdc448570092d47b3ca9f71a3bde79766424d624375650d70606aa36a6ab1fbda5152e3ed79d59df3f6aaa8c747e7488b8426b12972977a4c9f5724adefc2d98af5510d4486f5d4c92fe41c2f42a3058175a27b8020041205a60bf4897d8ddb409e3dd1124ad77df1e94f37cf28e748911d5622e2cb67f34c5525e0cce9ea7955790f2ecf05f0407a35ae8b77353a81befe3aa67832e9633233f7385afc68eedaa6dfc06b1f9c9a899672ea8baa5f77b9354f"}, &(0x7f0000000100)=0xee) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x1f}, 0x8) 2018/05/07 22:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) 2018/05/07 22:44:54 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x9, 0x84000) getsockname$inet6(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000280)=0x1c) sendfile(r0, r0, &(0x7f00000002c0), 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000300), 0x10) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) setreuid(r1, r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', r2}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000580)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000005c0)=r4) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000600)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000640)=0x3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000680)={@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x3, 0x1, 0x6, [@local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x9442]}, 0x28) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000006c0)) getsockopt$ax25_int(r0, 0x101, 0x582e5b54b876b5b8, &(0x7f0000000700), &(0x7f0000000740)=0x4) r5 = accept4$ax25(r0, &(0x7f0000000780), &(0x7f00000007c0)=0x10, 0x800) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000800)) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f0000000840)) arch_prctl(0x1007, &(0x7f0000000880)="6fbf26361c0b6615316737a3e522c6cb9be0d3d6c8a18807b58620a57d86329d6eb0145ff471bd1177a3f98378d5f7bc1029c0464bf6585af9520ab1ec6b25a790fd0feb5865d928c9dec386d9881e7f68cbf6d46e2f3a3ee39dfe17e6f1f784710528aae38fad6775b0bccabd6a35970c86b6e0541139712950c30be123d58ba27309634622f0e50b1c428e808b5862663e1656cc0b5026b8ea9adfbc9b382428b973236c911b673f35515ae6a4043317fd766c94c4bd3bd0b3a6bb561eaf4887227dda") ioctl$int_in(r5, 0x5421, &(0x7f0000000980)=0x400) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000009c0), &(0x7f0000000a00)=0x14) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000a40)=@assoc_value={0x0}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000ac0)={0x40, 0x8002, 0x100000001, 0x1, r6}, &(0x7f0000000b00)=0x10) ioctl$BLKRRPART(r0, 0x125f, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80082008}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {0xb}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44800) capget(&(0x7f0000000cc0)={0x20080522, r4}, &(0x7f0000000d00)={0x6, 0x800, 0x101, 0x4, 0x9, 0x100}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000d40)=0x5, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000d80)={0x1, 0xff, 0x4, 0x67, 0x4, 0x5, 0x5, 0x100000001, r6}, 0x20) 2018/05/07 22:44:54 executing program 5 (fault-call:5 fault-nth:44): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:54 executing program 1: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x1001, &(0x7f0000a06000)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000140)=""/4096) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='.') 2018/05/07 22:44:54 executing program 6 (fault-call:1 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) [ 190.320429] FAULT_INJECTION: forcing a failure. [ 190.320429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.332487] CPU: 0 PID: 13383 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 190.339553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.348944] Call Trace: [ 190.351596] dump_stack+0x185/0x1d0 [ 190.355300] should_fail+0x87b/0xab0 [ 190.359097] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 190.363989] ? save_stack_trace+0xa5/0xf0 [ 190.368201] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 190.373716] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 190.379137] ? update_cfs_rq_load_avg+0x662/0x1aa0 [ 190.384232] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 190.389653] ? __msan_poison_alloca+0x15c/0x1d0 [ 190.394378] ? do_huge_pmd_anonymous_page+0xf80/0x2520 [ 190.399711] alloc_pages_vma+0x1565/0x1800 [ 190.404039] do_huge_pmd_anonymous_page+0xf80/0x2520 [ 190.409231] handle_mm_fault+0x428f/0x7e50 [ 190.413570] __do_page_fault+0xec4/0x1a10 [ 190.417798] ? page_fault+0x25/0x50 [ 190.421485] do_page_fault+0xd3/0x260 [ 190.425353] page_fault+0x25/0x50 [ 190.428868] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 190.434782] RSP: 0018:ffff88014deff9d0 EFLAGS: 00010206 [ 190.440206] RAX: ffffffff83eaed2b RBX: 00000000208afd00 RCX: 0000000000000d00 [ 190.447526] RDX: 0000000000000d00 RSI: ffff88014bb0a000 RDI: 00000000208af000 [ 190.454842] RBP: ffff88014deffa38 R08: 0000000000000000 R09: 0000000000000000 [ 190.462158] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 190.469476] R13: ffff88014deff9d8 R14: 0000000000000d00 R15: ffff880149222698 [ 190.476832] ? _copy_to_user+0xbb/0x180 [ 190.480879] ? _copy_to_user+0xed/0x180 [ 190.484917] seq_read+0x1c5f/0x2260 [ 190.488659] ? seq_open+0x360/0x360 [ 190.492354] proc_reg_read+0x1de/0x2f0 [ 190.496338] ? proc_reg_llseek+0x260/0x260 [ 190.500686] __vfs_read+0x1a5/0x9b0 [ 190.504409] vfs_read+0x36c/0x6c0 [ 190.507993] SYSC_pread64+0x275/0x310 [ 190.511937] SyS_pread64+0x65/0x90 [ 190.515606] do_syscall_64+0x309/0x430 [ 190.519585] ? SYSC_write+0x360/0x360 [ 190.523462] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 190.528691] RIP: 0033:0x455979 [ 190.531926] RSP: 002b:00007fedc8dffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 190.539693] RAX: ffffffffffffffda RBX: 00007fedc8e006d4 RCX: 0000000000455979 [ 190.547018] RDX: 00000000fffffef6 RSI: 00000000208af000 RDI: 0000000000000013 [ 190.554347] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 190.561673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/07 22:44:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x24}, 0x1}, 0x0) 2018/05/07 22:44:54 executing program 4 (fault-call:9 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 190.568996] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000001 [ 190.598446] FAULT_INJECTION: forcing a failure. [ 190.598446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 190.610502] CPU: 0 PID: 13400 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 190.617476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.626885] Call Trace: [ 190.629547] dump_stack+0x185/0x1d0 [ 190.633250] should_fail+0x87b/0xab0 [ 190.637050] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 190.641894] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 190.647344] ? is_bpf_text_address+0xb4/0x4b0 [ 190.651930] ? __is_insn_slot_addr+0x198/0x1c0 [ 190.656594] ? kernel_text_address+0x34d/0x3a0 [ 190.661269] ? __kernel_text_address+0x34/0xe0 [ 190.665993] ? __save_stack_trace+0x90d/0xb00 [ 190.666888] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 190.670570] alloc_pages_current+0x6b5/0x970 [ 190.670673] __page_cache_alloc+0x95/0x320 [ 190.670753] __do_page_cache_readahead+0x401/0xf20 [ 190.691781] ? kmsan_set_origin_inline+0x6b/0x120 [ 190.696760] ondemand_readahead+0xc6a/0x1210 [ 190.701265] ? generic_file_read_iter+0xb43/0x4440 [ 190.706334] page_cache_sync_readahead+0x1e6/0x740 [ 190.711417] generic_file_read_iter+0xc3c/0x4440 [ 190.716306] blkdev_read_iter+0x20d/0x280 [ 190.720598] ? blkdev_write_iter+0x5f0/0x5f0 [ 190.725088] generic_file_splice_read+0x5d2/0x900 [ 190.730070] ? splice_shrink_spd+0x100/0x100 [ 190.734552] splice_direct_to_actor+0x4c6/0x1040 [ 190.739399] ? do_splice_direct+0x540/0x540 [ 190.743836] ? security_file_permission+0x28f/0x4b0 [ 190.748985] ? rw_verify_area+0x35e/0x580 [ 190.753213] do_splice_direct+0x335/0x540 [ 190.757690] do_sendfile+0x1067/0x1e40 [ 190.761735] SYSC_sendfile64+0x1b3/0x300 [ 190.765945] SyS_sendfile64+0x64/0x90 [ 190.769891] do_syscall_64+0x309/0x430 [ 190.773873] ? SYSC_sendfile+0x320/0x320 [ 190.778020] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 190.783269] RIP: 0033:0x455979 [ 190.786502] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x46000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0xdc, 0x58, "6e110099314ed3e7952edcc8905ed1ca6981e0d59bd8905007b8a17caaa05619421017706680ba9dde921266b59a7374317eabce2137a7b286ebf06d4f708499628dc0519898c6c767ca0f78a550aaccff5506997b1cf7c4"}) close(r0) r2 = socket$inet(0x2b, 0x1000000001, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x20000000001c, &(0x7f0000000300)=""/211, &(0x7f0000000040)=0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x80) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r4, 0x0) 2018/05/07 22:44:54 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x84) 2018/05/07 22:44:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 190.794275] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 190.801606] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 190.808924] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 190.816237] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 190.823564] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000002c 2018/05/07 22:44:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000080)=""/43) bind$inet(r2, &(0x7f0000000280)={0x2, 0x800000004e20, @broadcast=0xffffffff}, 0xfffffffffffffdd4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x100000001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r4, @in={{0x2, 0x4e22, @rand_addr=0x5}}}, 0x84) 2018/05/07 22:44:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0) listen$netrom(r0, 0x3) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000240)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}}, 0x84) getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f00000001c0)=""/60, &(0x7f0000000200)=0x3c) 2018/05/07 22:44:54 executing program 2: r0 = syz_open_dev$random(&(0x7f00000001c0)='/dev/random\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x9}) socket$inet6(0xa, 0x6, 0x1000) 2018/05/07 22:44:54 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 190.944709] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:55 executing program 6 (fault-call:1 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x1, 0x3, 0x1, 0x1}}, 0x2e) getpeername$inet(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x10) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 191.137688] FAULT_INJECTION: forcing a failure. [ 191.137688] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.149572] CPU: 0 PID: 13434 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 191.156509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.165872] Call Trace: [ 191.168461] dump_stack+0x185/0x1d0 [ 191.172078] should_fail+0x87b/0xab0 [ 191.175788] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 191.180538] ? kernel_poison_pages+0x40/0x360 [ 191.185024] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 191.190378] ? kernel_poison_pages+0x1a0/0x360 [ 191.194949] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 191.200389] ? get_page_from_freelist+0xab28/0xb600 [ 191.205395] ? update_stack_state+0x885/0xa40 [ 191.209886] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 191.215239] ? is_bpf_text_address+0xb4/0x4b0 [ 191.219726] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 191.224652] ? kmsan_set_origin_inline+0x6b/0x120 [ 191.229486] kmsan_alloc_page+0x82/0xe0 [ 191.233450] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 191.238197] ? save_stack_trace+0xa5/0xf0 [ 191.242331] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 191.247767] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 191.253116] ? update_cfs_rq_load_avg+0x662/0x1aa0 [ 191.258045] ? __msan_poison_alloca+0x15c/0x1d0 [ 191.262704] alloc_pages_vma+0x1565/0x1800 [ 191.266929] do_huge_pmd_anonymous_page+0xf80/0x2520 [ 191.272031] handle_mm_fault+0x428f/0x7e50 [ 191.276252] ? __perf_event_task_sched_in+0x9ed/0xa40 [ 191.281433] __do_page_fault+0xec4/0x1a10 [ 191.285571] ? page_fault+0x25/0x50 [ 191.289182] do_page_fault+0xd3/0x260 [ 191.292969] page_fault+0x25/0x50 [ 191.296409] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 191.302274] RSP: 0018:ffff88014a3cf9d0 EFLAGS: 00010206 [ 191.307624] RAX: ffffffff83eaed2b RBX: 00000000208afd00 RCX: 0000000000000d00 [ 191.314880] RDX: 0000000000000d00 RSI: ffff88014bb0a000 RDI: 00000000208af000 [ 191.322137] RBP: ffff88014a3cfa38 R08: 0000000000000000 R09: 0000000000000000 [ 191.329395] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 191.336653] R13: ffff88014a3cf9d8 R14: 0000000000000d00 R15: ffff88014e4e2698 [ 191.343923] ? _copy_to_user+0xbb/0x180 [ 191.347888] ? _copy_to_user+0xed/0x180 [ 191.351936] seq_read+0x1c5f/0x2260 [ 191.355556] ? seq_open+0x360/0x360 [ 191.359170] proc_reg_read+0x1de/0x2f0 [ 191.363052] ? proc_reg_llseek+0x260/0x260 [ 191.367276] __vfs_read+0x1a5/0x9b0 [ 191.370905] vfs_read+0x36c/0x6c0 [ 191.374370] SYSC_pread64+0x275/0x310 [ 191.378162] SyS_pread64+0x65/0x90 [ 191.381686] do_syscall_64+0x309/0x430 [ 191.385565] ? SYSC_write+0x360/0x360 [ 191.389364] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 191.394549] RIP: 0033:0x455979 [ 191.397724] RSP: 002b:00007fedc8dffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 191.405420] RAX: ffffffffffffffda RBX: 00007fedc8e006d4 RCX: 0000000000455979 [ 191.412675] RDX: 00000000fffffef6 RSI: 00000000208af000 RDI: 0000000000000013 [ 191.419930] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 191.427185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2018/05/07 22:44:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 191.434439] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000002 [ 191.509018] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:44:55 executing program 5 (fault-call:5 fault-nth:45): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000080)=""/43) bind$inet(r2, &(0x7f0000000280)={0x2, 0x800000004e20, @broadcast=0xffffffff}, 0xfffffffffffffdd4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) listen(r2, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x100000001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={r4, @in={{0x2, 0x4e22, @rand_addr=0x5}}}, 0x84) 2018/05/07 22:44:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)="6e65742f726f22d3b001") ioctl$TIOCNXCL(r0, 0x540d) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x905, 0x4) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:55 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) 2018/05/07 22:44:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}]}, 0x24}, 0x1}, 0x0) 2018/05/07 22:44:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1fb4b4302c1d0580) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 2018/05/07 22:44:55 executing program 6 (fault-call:1 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) [ 191.683122] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 191.752147] FAULT_INJECTION: forcing a failure. [ 191.752147] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.764026] CPU: 1 PID: 13465 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 191.770964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.780336] Call Trace: [ 191.782950] dump_stack+0x185/0x1d0 [ 191.786607] should_fail+0x87b/0xab0 [ 191.790347] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 191.795122] ? kernel_poison_pages+0x40/0x360 [ 191.799633] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 191.805015] ? kernel_poison_pages+0x1a0/0x360 [ 191.809620] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 191.815089] ? get_page_from_freelist+0xab28/0xb600 [ 191.820124] ? update_stack_state+0x885/0xa40 [ 191.824648] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 191.830039] ? is_bpf_text_address+0xb4/0x4b0 [ 191.834566] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 191.839624] ? kmsan_set_origin_inline+0x6b/0x120 [ 191.844849] kmsan_alloc_page+0x82/0xe0 [ 191.848859] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 191.853643] ? save_stack_trace+0xa5/0xf0 [ 191.857814] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 191.863288] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 191.868670] ? update_cfs_rq_load_avg+0x662/0x1aa0 [ 191.873625] ? __msan_poison_alloca+0x15c/0x1d0 [ 191.878320] alloc_pages_vma+0x1565/0x1800 [ 191.879881] FAULT_INJECTION: forcing a failure. [ 191.879881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.882578] do_huge_pmd_anonymous_page+0xf80/0x2520 [ 191.882605] handle_mm_fault+0x428f/0x7e50 [ 191.882623] ? mmdrop+0x3f/0xd0 [ 191.882637] ? finish_task_switch+0xfe/0x230 [ 191.882680] __do_page_fault+0xec4/0x1a10 [ 191.915576] ? page_fault+0x25/0x50 [ 191.919201] do_page_fault+0xd3/0x260 [ 191.922993] page_fault+0x25/0x50 [ 191.926443] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 191.932311] RSP: 0018:ffff88014942f9d0 EFLAGS: 00010206 [ 191.937660] RAX: ffffffff83eaed2b RBX: 00000000208afd00 RCX: 0000000000000d00 [ 191.944912] RDX: 0000000000000d00 RSI: ffff880199510000 RDI: 00000000208af000 [ 191.952182] RBP: ffff88014942fa38 R08: 0000000000000000 R09: 0000000000000000 [ 191.959437] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 191.966693] R13: ffff88014942f9d8 R14: 0000000000000d00 R15: ffff880149222698 [ 191.973969] ? _copy_to_user+0xbb/0x180 [ 191.977937] ? _copy_to_user+0xed/0x180 [ 191.981902] seq_read+0x1c5f/0x2260 [ 191.985524] ? seq_open+0x360/0x360 [ 191.989138] proc_reg_read+0x1de/0x2f0 [ 191.993023] ? proc_reg_llseek+0x260/0x260 [ 191.997256] __vfs_read+0x1a5/0x9b0 [ 192.000879] vfs_read+0x36c/0x6c0 [ 192.004325] SYSC_pread64+0x275/0x310 [ 192.008117] SyS_pread64+0x65/0x90 [ 192.011651] do_syscall_64+0x309/0x430 [ 192.015532] ? SYSC_write+0x360/0x360 [ 192.019326] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 192.024505] RIP: 0033:0x455979 [ 192.027677] RSP: 002b:00007fedc8dffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 192.035374] RAX: ffffffffffffffda RBX: 00007fedc8e006d4 RCX: 0000000000455979 [ 192.042629] RDX: 00000000fffffef6 RSI: 00000000208af000 RDI: 0000000000000013 [ 192.049887] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.057146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 192.064404] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000003 [ 192.071702] CPU: 0 PID: 13467 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 192.078683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.088074] Call Trace: [ 192.090734] dump_stack+0x185/0x1d0 [ 192.094431] should_fail+0x87b/0xab0 [ 192.098284] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 192.103144] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 192.108586] ? is_bpf_text_address+0xb4/0x4b0 [ 192.113201] ? __is_insn_slot_addr+0x198/0x1c0 [ 192.117849] ? kernel_text_address+0x34d/0x3a0 [ 192.122502] ? __kernel_text_address+0x34/0xe0 [ 192.127195] ? __save_stack_trace+0x90d/0xb00 [ 192.131888] alloc_pages_current+0x6b5/0x970 [ 192.136427] __page_cache_alloc+0x95/0x320 [ 192.140768] __do_page_cache_readahead+0x401/0xf20 [ 192.145814] ? entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 192.151301] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 192.156882] ondemand_readahead+0xc6a/0x1210 [ 192.161429] ? generic_file_read_iter+0xb43/0x4440 [ 192.166488] page_cache_sync_readahead+0x1e6/0x740 [ 192.171565] generic_file_read_iter+0xc3c/0x4440 [ 192.176502] blkdev_read_iter+0x20d/0x280 [ 192.180812] ? blkdev_write_iter+0x5f0/0x5f0 [ 192.185339] generic_file_splice_read+0x5d2/0x900 [ 192.190323] ? splice_shrink_spd+0x100/0x100 [ 192.194794] splice_direct_to_actor+0x4c6/0x1040 [ 192.199647] ? do_splice_direct+0x540/0x540 [ 192.204082] ? security_file_permission+0x28f/0x4b0 [ 192.209229] ? rw_verify_area+0x35e/0x580 [ 192.213490] do_splice_direct+0x335/0x540 [ 192.217784] do_sendfile+0x1067/0x1e40 [ 192.221820] SYSC_sendfile64+0x1b3/0x300 [ 192.225974] SyS_sendfile64+0x64/0x90 [ 192.229839] do_syscall_64+0x309/0x430 [ 192.233789] ? SYSC_sendfile+0x320/0x320 [ 192.237920] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 192.243153] RIP: 0033:0x455979 [ 192.246373] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 192.254137] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 192.261454] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 192.268772] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.276089] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 192.283407] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000002d 2018/05/07 22:44:56 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x84) 2018/05/07 22:44:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0x4, 0x9, 0xdd, 'queue1\x00', 0x6c}) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r4) 2018/05/07 22:44:56 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/route\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0xa, 0x4) 2018/05/07 22:44:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x1, 0x7f, 0xc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000ba000)={r0, &(0x7f00002ae000), &(0x7f0000260ff8)}, 0x20) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='omfs\x00', 0x0, &(0x7f0000000140)="75cb9f525e63ed4ed514222fb2b32a4eed53") bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000040)="03fdcb214f50925b75462ebd2a3acc9c5b18ef48a3bced16051ab3d73927c261331b1924ca47c56025fddb292bd3d4cf", &(0x7f00000002c0)=""/221}, 0x18) 2018/05/07 22:44:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}]}, 0x24}, 0x1}, 0x0) 2018/05/07 22:44:56 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000100)={0x64f0ac8f, 0x401, 0x5, 0xfffffffffffffe00, 0x7, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) r3 = fcntl$dupfd(r0, 0x0, r0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r2, 0x1, 0x800, 0x6, @random="8deb1122e64f"}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:56 executing program 6 (fault-call:1 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:56 executing program 5 (fault-call:5 fault-nth:46): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 192.402906] FAULT_INJECTION: forcing a failure. [ 192.402906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.414966] CPU: 0 PID: 13479 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 192.421942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.431348] Call Trace: [ 192.434007] dump_stack+0x185/0x1d0 [ 192.437716] should_fail+0x87b/0xab0 [ 192.438152] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 192.441503] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 192.441546] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 192.441595] ? page_counter_try_charge+0x4af/0x5c0 [ 192.464072] ? mem_cgroup_try_charge+0xa80/0xf00 [ 192.468964] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 192.474452] ? try_charge+0x26ce/0x2fd0 [ 192.478557] ? kmsan_set_origin_inline+0x6b/0x120 [ 192.483486] alloc_pages_current+0x6b5/0x970 [ 192.488028] pte_alloc_one+0x56/0x110 [ 192.491894] do_huge_pmd_anonymous_page+0x12ae/0x2520 [ 192.497163] handle_mm_fault+0x428f/0x7e50 2018/05/07 22:44:56 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000200)={0x5, 0x0, 0x8001, 0xffffffffffffff7f, 0xb, 0x5}) perf_event_open(&(0x7f0000000080)={0x2, 0x78, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='bdev@&,md5sum\x00', 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000060c0)=[{{&(0x7f0000000480)=@alg, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)=""/106, 0x6a}], 0x1, 0x0, 0x0, 0xffff}, 0x80000000}, {{&(0x7f00000005c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)=""/60, 0x3c}], 0x1, &(0x7f00000006c0)=""/115, 0x73, 0x9}, 0x80000000}, {{&(0x7f0000000740)=@in={0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000880)=""/70, 0x46}], 0x2, &(0x7f0000000940)=""/100, 0x64, 0x100000001}, 0x4}, {{&(0x7f00000009c0)=@sco, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/38, 0x26}, {&(0x7f0000000a80)=""/5, 0x5}, {&(0x7f0000000ac0)=""/155, 0x9b}, {&(0x7f0000000b80)}, {&(0x7f0000000bc0)=""/10, 0xa}, {&(0x7f0000000c00)=""/76, 0x4c}, {&(0x7f0000000c80)=""/164, 0xa4}], 0x7, &(0x7f0000000dc0)=""/215, 0xd7, 0xa68}, 0x2}, {{&(0x7f0000000ec0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/107, 0x6b}, {&(0x7f0000000fc0)=""/100, 0x64}], 0x2, &(0x7f0000001080)=""/178, 0xb2, 0x20}, 0xe7}, {{&(0x7f0000001140)=@ll, 0x80, &(0x7f0000001380)=[{&(0x7f00000011c0)=""/102, 0x66}, {&(0x7f0000001240)=""/218, 0xda}, {&(0x7f0000001340)=""/25, 0x19}], 0x3, &(0x7f00000013c0)=""/189, 0xbd, 0x75e6}, 0x741a}, {{&(0x7f0000001480)=@nfc, 0x80, &(0x7f0000001980)=[{&(0x7f0000001500)=""/168, 0xa8}, {&(0x7f00000015c0)=""/126, 0x7e}, {&(0x7f0000001640)=""/122, 0x7a}, {&(0x7f00000016c0)=""/201, 0xc9}, {&(0x7f00000017c0)=""/22, 0x16}, {&(0x7f0000001800)=""/92, 0x5c}, {&(0x7f0000001880)=""/163, 0xa3}, {&(0x7f0000001940)=""/60, 0x3c}], 0x8, &(0x7f0000001a00)=""/8, 0x8, 0xffff}, 0x9}, {{&(0x7f0000001a40)=@l2, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/246, 0xf6}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/122, 0x7a}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/253, 0xfd}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/82, 0x52}], 0x8, &(0x7f0000005e40)=""/168, 0xa8, 0xff}, 0x8}, {{&(0x7f0000005f00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000005f80)=""/233, 0xe9}], 0x1}, 0x2}], 0x9, 0x100, &(0x7f0000006300)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006340)={'team0\x00', r3}) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) sched_getattr(r4, &(0x7f0000000440), 0x30, 0x0) keyctl$unlink(0x9, r1, r2) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="28bda90cab1f437afaac6d2fc901d1aa2fe7d032c02e07ed0d23e85762ad69be7219607e4a086ef1b0044266f19bb30a8f70ace8cb5915fb1f92495c97dbe3c01753b4ff50dd26461326333d394a8a72b6ca", 0x52, 0xfffffffffffffffd) keyctl$update(0x2, r5, &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r7, 0x80000) finit_module(r6, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x1) 2018/05/07 22:44:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x24, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}]}, 0x24}, 0x1}, 0x0) [ 192.501454] ? __perf_event_task_sched_in+0x9ed/0xa40 [ 192.506738] __do_page_fault+0xec4/0x1a10 [ 192.510970] ? page_fault+0x25/0x50 [ 192.514669] do_page_fault+0xd3/0x260 [ 192.518538] page_fault+0x25/0x50 [ 192.522062] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 192.527982] RSP: 0018:ffff88018567f9d0 EFLAGS: 00010206 [ 192.533406] RAX: ffffffff83eaed2b RBX: 00000000208afd00 RCX: 0000000000000d00 [ 192.540729] RDX: 0000000000000d00 RSI: ffff88014bb0a000 RDI: 00000000208af000 [ 192.548047] RBP: ffff88018567fa38 R08: 0000000000000000 R09: 0000000000000000 [ 192.555364] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 192.562680] R13: ffff88018567f9d8 R14: 0000000000000d00 R15: ffff88014e4e0918 [ 192.570033] ? _copy_to_user+0xbb/0x180 [ 192.574087] ? _copy_to_user+0xed/0x180 [ 192.578141] seq_read+0x1c5f/0x2260 [ 192.581911] ? seq_open+0x360/0x360 [ 192.585612] proc_reg_read+0x1de/0x2f0 [ 192.589613] ? proc_reg_llseek+0x260/0x260 [ 192.593974] __vfs_read+0x1a5/0x9b0 [ 192.597715] vfs_read+0x36c/0x6c0 [ 192.601321] SYSC_pread64+0x275/0x310 [ 192.605285] SyS_pread64+0x65/0x90 [ 192.608964] do_syscall_64+0x309/0x430 [ 192.612955] ? SYSC_write+0x360/0x360 [ 192.616836] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 192.622073] RIP: 0033:0x455979 [ 192.625301] RSP: 002b:00007fedc8dffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 192.633076] RAX: ffffffffffffffda RBX: 00007fedc8e006d4 RCX: 0000000000455979 [ 192.639065] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 192.640389] RDX: 00000000fffffef6 RSI: 00000000208af000 RDI: 0000000000000013 [ 192.640408] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.640427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 192.640445] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000004 [ 192.760826] FAULT_INJECTION: forcing a failure. [ 192.760826] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.772972] CPU: 1 PID: 13504 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 192.779953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.789351] Call Trace: [ 192.792017] dump_stack+0x185/0x1d0 [ 192.795722] should_fail+0x87b/0xab0 [ 192.799577] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 192.804448] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 192.809881] ? is_bpf_text_address+0xb4/0x4b0 [ 192.814500] ? __is_insn_slot_addr+0x198/0x1c0 [ 192.819152] ? kernel_text_address+0x34d/0x3a0 [ 192.823808] ? __kernel_text_address+0x34/0xe0 [ 192.828513] ? __save_stack_trace+0x90d/0xb00 [ 192.833143] alloc_pages_current+0x6b5/0x970 [ 192.837694] __page_cache_alloc+0x95/0x320 [ 192.842050] __do_page_cache_readahead+0x401/0xf20 [ 192.847108] ? kmsan_set_origin_inline+0x6b/0x120 [ 192.852086] ondemand_readahead+0xc6a/0x1210 [ 192.856627] ? generic_file_read_iter+0xb43/0x4440 2018/05/07 22:44:56 executing program 6 (fault-call:1 fault-nth:5): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @broadcast=0xffffffff}, {0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x0, {0x2, 0x4e22, @broadcast=0xffffffff}, 'ip6gre0\x00'}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:56 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x20, 0x545082) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x20) r2 = syz_open_procfs(r0, &(0x7f0000000040)="6e656500ed3ced4668ac5f4676ccaae2a42b035753d61b571d5f443b1edd1c14829f3d54babaa3b3c121b8741d1db300d47352ab9a82bbaf52") pread64(r2, &(0x7f00008af000), 0xfffffef6, 0x100000) [ 192.861678] page_cache_sync_readahead+0x1e6/0x740 [ 192.866742] generic_file_read_iter+0xc3c/0x4440 [ 192.871675] blkdev_read_iter+0x20d/0x280 [ 192.875922] ? blkdev_write_iter+0x5f0/0x5f0 [ 192.880396] generic_file_splice_read+0x5d2/0x900 [ 192.885324] ? splice_shrink_spd+0x100/0x100 [ 192.889811] splice_direct_to_actor+0x4c6/0x1040 [ 192.894668] ? do_splice_direct+0x540/0x540 [ 192.899073] ? security_file_permission+0x28f/0x4b0 [ 192.904230] ? rw_verify_area+0x35e/0x580 [ 192.908504] do_splice_direct+0x335/0x540 [ 192.912806] do_sendfile+0x1067/0x1e40 [ 192.916862] SYSC_sendfile64+0x1b3/0x300 [ 192.921083] SyS_sendfile64+0x64/0x90 [ 192.925027] do_syscall_64+0x309/0x430 [ 192.929004] ? SYSC_sendfile+0x320/0x320 [ 192.933150] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 192.938402] RIP: 0033:0x455979 [ 192.941632] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 192.949408] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:44:56 executing program 2: r0 = socket$inet(0x2, 0x801, 0x0) unshare(0x40600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x101}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x3b}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0xffffffff, 0x9, 0xff, 0x401, 0x6}, 0x14) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) 2018/05/07 22:44:57 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r0, 0x7, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 192.957453] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 192.964774] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 192.972103] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 192.979423] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000002e [ 193.028299] FAULT_INJECTION: forcing a failure. [ 193.028299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.040185] CPU: 0 PID: 13515 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 193.047124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.056495] Call Trace: [ 193.059106] dump_stack+0x185/0x1d0 [ 193.062759] should_fail+0x87b/0xab0 [ 193.066510] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 193.071302] ? kernel_poison_pages+0x40/0x360 [ 193.075824] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 193.081209] ? kernel_poison_pages+0x1a0/0x360 [ 193.085811] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 193.091298] ? get_page_from_freelist+0xab28/0xb600 [ 193.096349] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 193.101747] ? page_counter_try_charge+0x205/0x5c0 [ 193.106704] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 193.112097] ? page_counter_uncharge+0xa7/0x160 [ 193.116804] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 193.122198] kmsan_alloc_meta_for_pages+0x8d/0x3a0 [ 193.127912] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 193.133311] ? try_charge+0x26ce/0x2fd0 [ 193.137322] ? __perf_event_task_sched_in+0x67/0xa40 [ 193.142466] ? __msan_poison_alloca+0x15c/0x1d0 [ 193.147167] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 193.152572] ? memcg_kmem_charge+0x703/0xa30 [ 193.157018] kmsan_alloc_page+0x82/0xe0 [ 193.161031] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 193.165824] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 193.171224] ? page_counter_try_charge+0x4af/0x5c0 [ 193.176182] ? mem_cgroup_try_charge+0xa80/0xf00 [ 193.180975] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 193.186376] ? try_charge+0x26ce/0x2fd0 [ 193.190389] ? kmsan_set_origin_inline+0x6b/0x120 [ 193.195269] alloc_pages_current+0x6b5/0x970 [ 193.199712] pte_alloc_one+0x56/0x110 [ 193.203544] do_huge_pmd_anonymous_page+0x12ae/0x2520 [ 193.208773] handle_mm_fault+0x428f/0x7e50 [ 193.213037] ? __perf_event_task_sched_in+0x9ed/0xa40 [ 193.218269] __do_page_fault+0xec4/0x1a10 [ 193.222456] ? page_fault+0x25/0x50 [ 193.226114] do_page_fault+0xd3/0x260 [ 193.229946] page_fault+0x25/0x50 [ 193.233454] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 193.239356] RSP: 0018:ffff88014b87f9d0 EFLAGS: 00010206 [ 193.244735] RAX: ffffffff83eaed2b RBX: 00000000208afd00 RCX: 0000000000000d00 [ 193.252019] RDX: 0000000000000d00 RSI: ffff88014bb0a000 RDI: 00000000208af000 [ 193.259289] RBP: ffff88014b87fa38 R08: 0000000000000000 R09: 0000000000000000 [ 193.266547] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 193.273804] R13: ffff88014b87f9d8 R14: 0000000000000d00 R15: ffff88014e4e4418 [ 193.281082] ? _copy_to_user+0xbb/0x180 [ 193.285052] ? _copy_to_user+0xed/0x180 [ 193.289022] seq_read+0x1c5f/0x2260 [ 193.292643] ? seq_open+0x360/0x360 [ 193.296254] proc_reg_read+0x1de/0x2f0 [ 193.300135] ? proc_reg_llseek+0x260/0x260 [ 193.304358] __vfs_read+0x1a5/0x9b0 [ 193.307977] vfs_read+0x36c/0x6c0 [ 193.311423] SYSC_pread64+0x275/0x310 [ 193.315213] SyS_pread64+0x65/0x90 [ 193.318744] do_syscall_64+0x309/0x430 [ 193.322626] ? SYSC_write+0x360/0x360 2018/05/07 22:44:57 executing program 0: r0 = memfd_create(&(0x7f0000000000)='net/roete\x00', 0x3) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x100) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/dev_mcast\x00') timerfd_create(0x3, 0x800) pread64(r3, &(0x7f0000000000), 0x0, 0x8200000100001) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000080)={0x3ff, 0x5, 0x5, 0xb4, 0x1, 0x4}) [ 193.326424] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 193.331600] RIP: 0033:0x455979 [ 193.334775] RSP: 002b:00007fedc8dffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 193.342469] RAX: ffffffffffffffda RBX: 00007fedc8e006d4 RCX: 0000000000455979 [ 193.349727] RDX: 00000000fffffef6 RSI: 00000000208af000 RDI: 0000000000000013 [ 193.356983] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 193.364242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 193.371500] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000005 2018/05/07 22:44:57 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x84) 2018/05/07 22:44:57 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in=@local, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@loopback}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000016c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006a80)={0x0, @remote, @dev}, &(0x7f0000006ac0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00', r1}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a966636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:57 executing program 6 (fault-call:1 fault-nth:6): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:57 executing program 5 (fault-call:5 fault-nth:47): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:57 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:57 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)='"', 0x1}], 0x1, &(0x7f0000001bc0)}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x189, &(0x7f0000000800), 0x28c, &(0x7f0000000880)=""/209, 0xd1}}, {{&(0x7f0000000000)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000140)=""/240, 0xf0}}], 0x2, 0x0, &(0x7f0000000b80)={0x0, r1+30000000}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000002c0)={0x303, 0x33}, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000bc0)={0x0, 0x1000, "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"}, &(0x7f0000000300)=0x1008) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0x7fff}, 0x8) 2018/05/07 22:44:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x17, "ea4dc8cbbbc851c19f920242e5a8c753bc365b584cdbec133a210b96a47fbb65625218d03564acd8849e41c8", 0x6}) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 193.638259] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 193.690630] FAULT_INJECTION: forcing a failure. [ 193.690630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.697630] FAULT_INJECTION: forcing a failure. [ 193.697630] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.702762] CPU: 1 PID: 13557 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 193.721300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.730689] Call Trace: [ 193.733335] dump_stack+0x185/0x1d0 [ 193.736995] should_fail+0x87b/0xab0 [ 193.740807] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 193.745656] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 193.751094] ? update_load_avg+0x218c/0x2c20 [ 193.755552] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 193.761048] ? rb_erase_cached+0x71d/0x2eb0 [ 193.765456] alloc_pages_current+0x6b5/0x970 [ 193.769945] __page_cache_alloc+0x95/0x320 [ 193.774256] __do_page_cache_readahead+0x401/0xf20 [ 193.779256] ? kmsan_set_origin_inline+0x6b/0x120 [ 193.784162] ondemand_readahead+0xc6a/0x1210 [ 193.788632] ? generic_file_read_iter+0xb43/0x4440 [ 193.793617] page_cache_sync_readahead+0x1e6/0x740 [ 193.798578] generic_file_read_iter+0xc3c/0x4440 [ 193.803443] blkdev_read_iter+0x20d/0x280 [ 193.807629] ? blkdev_write_iter+0x5f0/0x5f0 [ 193.812052] generic_file_splice_read+0x5d2/0x900 [ 193.816927] ? splice_shrink_spd+0x100/0x100 [ 193.821352] splice_direct_to_actor+0x4c6/0x1040 [ 193.826149] ? do_splice_direct+0x540/0x540 [ 193.830496] ? security_file_permission+0x28f/0x4b0 [ 193.835542] ? rw_verify_area+0x35e/0x580 [ 193.839737] do_splice_direct+0x335/0x540 [ 193.843958] do_sendfile+0x1067/0x1e40 [ 193.847929] SYSC_sendfile64+0x1b3/0x300 [ 193.852056] SyS_sendfile64+0x64/0x90 [ 193.855919] do_syscall_64+0x309/0x430 [ 193.859832] ? SYSC_sendfile+0x320/0x320 [ 193.863914] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 193.869113] RIP: 0033:0x455979 [ 193.872310] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 193.880041] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 193.887321] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 193.894598] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 193.901875] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 193.909154] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000002f [ 193.916442] CPU: 0 PID: 13556 Comm: syz-executor6 Not tainted 4.16.0+ #87 [ 193.923386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.932761] Call Trace: [ 193.935374] dump_stack+0x185/0x1d0 2018/05/07 22:44:57 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) [ 193.939023] should_fail+0x87b/0xab0 [ 193.942767] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 193.947552] ? kernel_poison_pages+0x40/0x360 [ 193.952071] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 193.957462] ? kernel_poison_pages+0x1a0/0x360 [ 193.962084] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 193.967565] ? get_page_from_freelist+0xab28/0xb600 [ 193.972619] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 193.978020] ? page_counter_try_charge+0x205/0x5c0 [ 193.982984] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 193.988383] ? page_counter_uncharge+0xa7/0x160 [ 193.993093] kmsan_alloc_meta_for_pages+0x10c/0x3a0 [ 193.998144] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 194.003545] ? try_charge+0x26ce/0x2fd0 [ 194.007550] ? __perf_event_task_sched_in+0x67/0xa40 [ 194.012692] ? __msan_poison_alloca+0x15c/0x1d0 [ 194.017398] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 194.022797] ? memcg_kmem_charge+0x703/0xa30 [ 194.024709] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 194.027224] kmsan_alloc_page+0x82/0xe0 [ 194.027245] __alloc_pages_nodemask+0xf5b/0x5dc0 [ 194.027263] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 194.027285] ? page_counter_try_charge+0x4af/0x5c0 [ 194.027298] ? mem_cgroup_try_charge+0xa80/0xf00 [ 194.027314] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 194.027329] ? try_charge+0x26ce/0x2fd0 [ 194.027362] ? kmsan_set_origin_inline+0x6b/0x120 [ 194.072659] alloc_pages_current+0x6b5/0x970 [ 194.077094] pte_alloc_one+0x56/0x110 [ 194.080929] do_huge_pmd_anonymous_page+0x12ae/0x2520 [ 194.086151] handle_mm_fault+0x428f/0x7e50 2018/05/07 22:44:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) [ 194.090418] ? kmsan_set_origin_inline+0x6b/0x120 [ 194.095305] __do_page_fault+0xec4/0x1a10 [ 194.099480] ? page_fault+0x25/0x50 [ 194.103119] do_page_fault+0xd3/0x260 [ 194.106932] page_fault+0x25/0x50 [ 194.110398] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 194.116286] RSP: 0018:ffff880183c1f9d0 EFLAGS: 00010206 [ 194.121665] RAX: ffffffff83eaed2b RBX: 00000000208afd00 RCX: 0000000000000d00 [ 194.128954] RDX: 0000000000000d00 RSI: ffff88014bb08000 RDI: 00000000208af000 2018/05/07 22:44:58 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x20}, {r0, 0x100}, {r0, 0x414}, {r0, 0x2001}], 0x4, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)={0xff}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000000080)) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), 0x2) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)="bf5e34d5eb8048099e822ff5e8ac86af5fa77176ce788640f460fdbb98b53003b62b4cfae125166d361ed54e69fd2fc35b") 2018/05/07 22:44:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x0, 0x3}, 0xd744, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x3, 0x9}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:58 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000002640)='/dev/usbmon#\x00', 0x7, 0x10000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002680)={0x40, 0x4, 0x4, 0x1f, 0x4}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) [ 194.136242] RBP: ffff880183c1fa38 R08: 0000000000000000 R09: 0000000000000000 [ 194.143535] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 194.150821] R13: ffff880183c1f9d8 R14: 0000000000000d00 R15: ffff88014e4e2698 [ 194.158130] ? _copy_to_user+0xbb/0x180 [ 194.162147] ? _copy_to_user+0xed/0x180 [ 194.166148] seq_read+0x1c5f/0x2260 [ 194.169809] ? seq_open+0x360/0x360 [ 194.173461] proc_reg_read+0x1de/0x2f0 [ 194.177367] ? proc_reg_llseek+0x260/0x260 [ 194.181620] __vfs_read+0x1a5/0x9b0 [ 194.185282] vfs_read+0x36c/0x6c0 [ 194.188762] SYSC_pread64+0x275/0x310 [ 194.192586] SyS_pread64+0x65/0x90 [ 194.196134] do_syscall_64+0x309/0x430 [ 194.200029] ? SYSC_write+0x360/0x360 [ 194.203830] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 194.209013] RIP: 0033:0x455979 [ 194.212197] RSP: 002b:00007fedc8dffc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 194.219890] RAX: ffffffffffffffda RBX: 00007fedc8e006d4 RCX: 0000000000455979 [ 194.227161] RDX: 00000000fffffef6 RSI: 00000000208af000 RDI: 0000000000000013 [ 194.234429] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/07 22:44:58 executing program 5 (fault-call:5 fault-nth:48): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:58 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000640)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={"697004006e6c0400000000160000d800", r1}) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x44000, 0x0) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa900000000cc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6c484e35dc00682ea277305f46863d5b4dfcc9cb403abddf8961cc629e0b9d646d51ca19b0d740c059df4e5b99197aa2dd9b8ecd2c3343872898e968e466a1e297505483285189b1198f1b7fd0dd377600b4f72ea6d01c2f40a717eb37c"], &(0x7f0000000000)) [ 194.241703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 194.248971] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000006 [ 194.339032] FAULT_INJECTION: forcing a failure. [ 194.339032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.351317] CPU: 0 PID: 13564 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 194.358300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.364576] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 194.367688] Call Trace: [ 194.367739] dump_stack+0x185/0x1d0 [ 194.367787] should_fail+0x87b/0xab0 [ 194.385221] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 194.390093] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 194.395531] ? is_bpf_text_address+0xb4/0x4b0 [ 194.400155] ? __is_insn_slot_addr+0x198/0x1c0 [ 194.404814] ? kernel_text_address+0x34d/0x3a0 [ 194.409473] ? __kernel_text_address+0x34/0xe0 [ 194.414191] ? __save_stack_trace+0x90d/0xb00 [ 194.418813] alloc_pages_current+0x6b5/0x970 [ 194.423356] __page_cache_alloc+0x95/0x320 [ 194.427713] __do_page_cache_readahead+0x401/0xf20 [ 194.432758] ? kmsan_set_origin_inline+0x6b/0x120 [ 194.437724] ondemand_readahead+0xc6a/0x1210 [ 194.442213] ? generic_file_read_iter+0xb43/0x4440 [ 194.447249] page_cache_sync_readahead+0x1e6/0x740 [ 194.452309] generic_file_read_iter+0xc3c/0x4440 [ 194.457176] blkdev_read_iter+0x20d/0x280 [ 194.461463] ? blkdev_write_iter+0x5f0/0x5f0 [ 194.465935] generic_file_splice_read+0x5d2/0x900 [ 194.470859] ? splice_shrink_spd+0x100/0x100 [ 194.475336] splice_direct_to_actor+0x4c6/0x1040 [ 194.480172] ? do_splice_direct+0x540/0x540 [ 194.484558] ? security_file_permission+0x28f/0x4b0 2018/05/07 22:44:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) [ 194.489710] ? rw_verify_area+0x35e/0x580 [ 194.493929] do_splice_direct+0x335/0x540 [ 194.498210] do_sendfile+0x1067/0x1e40 [ 194.502243] SYSC_sendfile64+0x1b3/0x300 [ 194.506447] SyS_sendfile64+0x64/0x90 [ 194.510376] do_syscall_64+0x309/0x430 [ 194.514357] ? SYSC_sendfile+0x320/0x320 [ 194.518490] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 194.523731] RIP: 0033:0x455979 [ 194.526959] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 194.534741] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 194.542150] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 194.549473] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 194.556791] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 194.564113] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000030 2018/05/07 22:44:58 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r3, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x84) 2018/05/07 22:44:58 executing program 6 (fault-call:1 fault-nth:7): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:44:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}}, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0xfffffffffffffffd, {{0xa, 0x4e20, 0xfffffffffffffff9, @empty, 0x7fffffff}}}, 0x88) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:58 executing program 5 (fault-call:5 fault-nth:49): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:44:58 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x10000) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0xa2, "a501c37f4675620aca11ed0d35bab11a7cd3211af23105d870ebee381a833af21e0f1f8ac20814a207fc9f050579a3e90eaa337e69f83d5f80893f7190e508b30548360d87f6e43928921f5805a8704b1b13e3234653a5f5f172f8829b803c9168120e9864014b98963caade9e85a918da3d820edc7acb3c3ddef4ae24e5f6a531fd3fc20d7fe7ab2365213dff53c8c4bc166cb902c37630b3d61b4008c62815ef6f"}, &(0x7f0000000480)=0xc6) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x1ff, 0x0, 0x10003, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000002c0)={0x3, r3, 0x1, 0x4}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100)=0x2, 0x4) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2008000932fb473000006ef64392efa4f91e28026c83dee8154cd6a5b6636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x3, 0x100000000}) lookup_dcookie(0x5, &(0x7f0000000140)=""/145, 0x91) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000200)={0x0, 0x5}) 2018/05/07 22:44:58 executing program 7 (fault-call:1 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:58 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0, 0x20}, {r0, 0x100}, {r0, 0x414}, {r0, 0x2001}], 0x4, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)={0xff}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc2604111, &(0x7f0000000080)) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), 0x2) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)="bf5e34d5eb8048099e822ff5e8ac86af5fa77176ce788640f460fdbb98b53003b62b4cfae125166d361ed54e69fd2fc35b") 2018/05/07 22:44:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @broadcast=0xffffffff}, 0xfffffffffffffcc7) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000015000)=0x4, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x2000, r3, r4, 0x6, 0xfffffffffffffffc, 0x10000) listen(r1, 0x0) [ 194.819187] FAULT_INJECTION: forcing a failure. [ 194.819187] name failslab, interval 1, probability 0, space 0, times 0 [ 194.830669] CPU: 1 PID: 13605 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 194.837644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.847048] Call Trace: [ 194.849705] dump_stack+0x185/0x1d0 [ 194.853397] should_fail+0x87b/0xab0 [ 194.857182] should_failslab+0x279/0x2a0 [ 194.861318] kmem_cache_alloc_node+0x151/0xc70 [ 194.865967] ? __alloc_skb+0x203/0x9f0 [ 194.869973] ? netlink_autobind+0x981/0x9e0 [ 194.874374] __alloc_skb+0x203/0x9f0 [ 194.878170] netlink_sendmsg+0x9a6/0x1310 [ 194.882423] ? netlink_getsockopt+0xc80/0xc80 [ 194.887020] ___sys_sendmsg+0xec0/0x1310 [ 194.891210] ? __fdget+0x4e/0x60 [ 194.894668] ? __fget_light+0x56/0x710 [ 194.898652] ? __fdget+0x4e/0x60 [ 194.902111] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 194.907579] ? __fget_light+0x6b9/0x710 [ 194.911687] SYSC_sendmsg+0x2a3/0x3d0 [ 194.915621] SyS_sendmsg+0x54/0x80 [ 194.919270] do_syscall_64+0x309/0x430 [ 194.923240] ? ___sys_sendmsg+0x1310/0x1310 [ 194.927631] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 194.932865] RIP: 0033:0x455979 [ 194.936091] RSP: 002b:00007f39c9eb8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.943856] RAX: ffffffffffffffda RBX: 00007f39c9eb96d4 RCX: 0000000000455979 [ 194.951179] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000013 [ 194.959218] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/07 22:44:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x140) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x2, 0x7fff}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f00000000c0)={r4, 0x1}) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:44:58 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x2000) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x20, 0xd, 0xfffffffffffffffd, 0xfff, "b5dfe5a10c0e6f5590f9df9b9fd2afd27196292fdd2d36923144f63462680bd1"}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @any=0xffffffff}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) 2018/05/07 22:44:59 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) personality(0x0) 2018/05/07 22:44:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) fgetxattr(r0, &(0x7f0000000000)=@random={'user.', 'net/route\x00'}, &(0x7f0000000040)=""/111, 0x6f) [ 194.966538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 194.973866] R13: 000000000000053f R14: 00000000006fbe88 R15: 0000000000000000 2018/05/07 22:44:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0xc, 0x2}, 0x14) [ 195.159583] FAULT_INJECTION: forcing a failure. [ 195.159583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.171644] CPU: 1 PID: 13629 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 195.178618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.188020] Call Trace: [ 195.190685] dump_stack+0x185/0x1d0 [ 195.194393] should_fail+0x87b/0xab0 [ 195.198251] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 195.203121] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 195.208559] ? is_bpf_text_address+0xb4/0x4b0 [ 195.213179] ? __is_insn_slot_addr+0x198/0x1c0 [ 195.217856] ? kernel_text_address+0x34d/0x3a0 [ 195.222520] ? __kernel_text_address+0x34/0xe0 [ 195.227232] ? __save_stack_trace+0x90d/0xb00 [ 195.231871] alloc_pages_current+0x6b5/0x970 [ 195.236438] __page_cache_alloc+0x95/0x320 [ 195.240799] __do_page_cache_readahead+0x401/0xf20 [ 195.245893] ? kmsan_set_origin_inline+0x6b/0x120 [ 195.250867] ondemand_readahead+0xc6a/0x1210 [ 195.255400] ? generic_file_read_iter+0xb43/0x4440 [ 195.260448] page_cache_sync_readahead+0x1e6/0x740 [ 195.265516] generic_file_read_iter+0xc3c/0x4440 [ 195.270448] blkdev_read_iter+0x20d/0x280 [ 195.274695] ? blkdev_write_iter+0x5f0/0x5f0 [ 195.279173] generic_file_splice_read+0x5d2/0x900 [ 195.284101] ? splice_shrink_spd+0x100/0x100 [ 195.288574] splice_direct_to_actor+0x4c6/0x1040 [ 195.293416] ? do_splice_direct+0x540/0x540 [ 195.297857] ? security_file_permission+0x28f/0x4b0 [ 195.302954] ? rw_verify_area+0x35e/0x580 2018/05/07 22:44:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{0x3, 0x6, 0xcf0, 0x6, "9d508e391736c6ff1a0d04d27b9836c0cfbba863abc2ee30b966a8272a9958d4f88c9f55b7ac42c295fce70d", 0x4}, 0x0, 0x0, 0x5, r4, 0x1, 0x4, "009cb4ffc79f940524c631e85bc4b867a7baabfd4ed2fe95e31d77b1b828ba271ae9986cbf09079e7453d4a871410b3bb100abef53ca806e45e3c3b1a60410d2", &(0x7f0000000180)='\x00', 0x1, [], [0x101, 0x7, 0x58]}) 2018/05/07 22:44:59 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x8, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0xe68}, 0x4) readahead(r0, 0xdc25, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="8e371f0229c6260fc08a366e1ed185057c3f3d63f88764d98a1ba6ac25688e180a793411b554934d2d8652ed2478440c9c42d1311b663008f9b96a9f3920325750a2aa6b55dc96b97fb05a9c862ce034c5093032e8affc5951b832cb6fb18b7986f4a7f43ba6c7a0bbdbd9a556672714ec6331c9d884aaab69cb5395243c0b04f6ccb39427041db45515f5125c3f525b0306501ab5cac87f6764cc4feb38", 0x9e) uname(&(0x7f00000000c0)=""/122) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="1c80c20000000180c200000086dd60c0e54400183a00fe800000000000000000000000000000ff020000010000907800000000ff020000000000000000000000000001"], 0x0) 2018/05/07 22:44:59 executing program 0: syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') [ 195.307203] do_splice_direct+0x335/0x540 [ 195.311490] do_sendfile+0x1067/0x1e40 [ 195.315529] SYSC_sendfile64+0x1b3/0x300 [ 195.319714] SyS_sendfile64+0x64/0x90 [ 195.323639] do_syscall_64+0x309/0x430 [ 195.327604] ? SYSC_sendfile+0x320/0x320 [ 195.331734] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 195.336974] RIP: 0033:0x455979 [ 195.340193] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 195.347962] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 195.355284] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 195.362604] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.369929] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 195.377254] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000031 2018/05/07 22:44:59 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 2018/05/07 22:44:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x3e, 0x7, 0x401, 0x5, 0x6, 0x0, 0x0, 0x20, 0x100, 0x8, 0xfffffffffffffffc}, 0xb) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0xc30, {{0xa, 0x4e21, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x2}}, {{0xa, 0x4e23, 0x2, @loopback={0x0, 0x1}, 0x8}}}, 0x108) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x20000000000000) setitimer(0x1ba10ce3cd61f164, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) 2018/05/07 22:44:59 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) madvise(&(0x7f0000dff000/0x200000)=nil, 0x200000, 0xb) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40682, 0x145) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54e03764d032a9ce02d9d8558c42084cd20fb3ec3704fb6"], &(0x7f0000000000)) 2018/05/07 22:44:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000999000)="390000001300094700bb61e1c3e4ffff067592aa12000000450000002000000019000a00100000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000340)={@ax25={0x3, {'h\a&l5WU'}, 0x4}, {&(0x7f0000000280)=""/98, 0x62}, &(0x7f0000000300), 0x4}, 0xa0) splice(r1, &(0x7f0000000400), r2, &(0x7f0000000440), 0x6, 0xc) recvfrom$unix(r2, &(0x7f00000000c0)=""/222, 0xde, 0x2002, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 2018/05/07 22:44:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000080)=0x1) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r3, 0x3) listen(r2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x3, 'sit0\x00', 0x2}, 0x18) 2018/05/07 22:44:59 executing program 7 (fault-call:1 fault-nth:1): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:44:59 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0xdd, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:44:59 executing program 5 (fault-call:5 fault-nth:50): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 195.667845] FAULT_INJECTION: forcing a failure. [ 195.667845] name failslab, interval 1, probability 0, space 0, times 0 [ 195.679266] CPU: 1 PID: 13657 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 195.686240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.695643] Call Trace: [ 195.698303] dump_stack+0x185/0x1d0 [ 195.702007] should_fail+0x87b/0xab0 [ 195.705811] should_failslab+0x279/0x2a0 [ 195.709996] __kmalloc_node_track_caller+0x243/0x11c0 [ 195.715303] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 195.720743] ? netlink_sendmsg+0x9a6/0x1310 [ 195.725149] __alloc_skb+0x2cf/0x9f0 [ 195.728934] ? netlink_sendmsg+0x9a6/0x1310 [ 195.733339] netlink_sendmsg+0x9a6/0x1310 [ 195.737591] ? netlink_getsockopt+0xc80/0xc80 [ 195.742186] ___sys_sendmsg+0xec0/0x1310 [ 195.746373] ? __fdget+0x4e/0x60 [ 195.749839] ? __fget_light+0x56/0x710 [ 195.753828] ? __fdget+0x4e/0x60 [ 195.757296] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 195.762758] ? __fget_light+0x6b9/0x710 [ 195.766855] SYSC_sendmsg+0x2a3/0x3d0 [ 195.770788] SyS_sendmsg+0x54/0x80 [ 195.774443] do_syscall_64+0x309/0x430 [ 195.778410] ? ___sys_sendmsg+0x1310/0x1310 [ 195.782804] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 195.788042] RIP: 0033:0x455979 [ 195.791259] RSP: 002b:00007f39c9eb8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.799024] RAX: ffffffffffffffda RBX: 00007f39c9eb96d4 RCX: 0000000000455979 [ 195.806347] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000013 [ 195.813669] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 195.820989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 195.828314] R13: 000000000000053f R14: 00000000006fbe88 R15: 0000000000000001 [ 195.833810] FAULT_INJECTION: forcing a failure. [ 195.833810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.847691] CPU: 0 PID: 13671 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 195.850944] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 195.854654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.854670] Call Trace: [ 195.854720] dump_stack+0x185/0x1d0 [ 195.854768] should_fail+0x87b/0xab0 [ 195.881580] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 195.886451] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 195.891884] ? is_bpf_text_address+0xb4/0x4b0 [ 195.895120] team0: Device veth1 is up. Set it down before adding it as a team port [ 195.896481] ? __is_insn_slot_addr+0x198/0x1c0 [ 195.896528] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 195.914228] ? update_cfs_rq_load_avg+0x662/0x1aa0 [ 195.916435] netlink: 'syz-executor2': attribute type 10 has an invalid length. [ 195.919278] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 195.919356] alloc_pages_current+0x6b5/0x970 [ 195.926860] team0: Device veth1 is up. Set it down before adding it as a team port [ 195.932134] __page_cache_alloc+0x95/0x320 [ 195.932220] __do_page_cache_readahead+0x401/0xf20 [ 195.953578] ? __msan_poison_alloca+0x15c/0x1d0 [ 195.958367] ondemand_readahead+0xc6a/0x1210 [ 195.962853] ? generic_file_read_iter+0xb43/0x4440 2018/05/07 22:44:59 executing program 7 (fault-call:1 fault-nth:2): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 195.967887] page_cache_sync_readahead+0x1e6/0x740 [ 195.972921] generic_file_read_iter+0xc3c/0x4440 [ 195.977766] blkdev_read_iter+0x20d/0x280 [ 195.982046] ? blkdev_write_iter+0x5f0/0x5f0 [ 195.986517] generic_file_splice_read+0x5d2/0x900 [ 195.991458] ? splice_shrink_spd+0x100/0x100 [ 195.995929] splice_direct_to_actor+0x4c6/0x1040 [ 196.000780] ? do_splice_direct+0x540/0x540 [ 196.005185] ? security_file_permission+0x28f/0x4b0 [ 196.007477] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 196.010323] ? rw_verify_area+0x35e/0x580 [ 196.010396] do_splice_direct+0x335/0x540 [ 196.017806] FAULT_INJECTION: forcing a failure. [ 196.017806] name failslab, interval 1, probability 0, space 0, times 0 [ 196.021958] do_sendfile+0x1067/0x1e40 [ 196.022061] SYSC_sendfile64+0x1b3/0x300 [ 196.045354] SyS_sendfile64+0x64/0x90 [ 196.049229] do_syscall_64+0x309/0x430 [ 196.053142] ? SYSC_sendfile+0x320/0x320 [ 196.057225] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 196.062427] RIP: 0033:0x455979 [ 196.065620] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 196.073346] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 196.080619] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 196.087890] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 196.095167] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 196.102448] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000032 [ 196.109751] CPU: 1 PID: 13680 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 196.116711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.126109] Call Trace: [ 196.128762] dump_stack+0x185/0x1d0 [ 196.132458] should_fail+0x87b/0xab0 [ 196.136237] should_failslab+0x279/0x2a0 [ 196.140444] kmem_cache_alloc+0x136/0xb90 [ 196.144657] ? dst_alloc+0x295/0x860 [ 196.148442] dst_alloc+0x295/0x860 [ 196.152051] ip6_route_info_create+0xaef/0x4d00 [ 196.156787] ? lwtunnel_valid_encap_type+0x110/0x360 [ 196.161991] ? rtm_to_fib6_config+0x1642/0x1b60 [ 196.166774] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 196.172255] ? rtm_to_fib6_config+0x19c8/0x1b60 [ 196.176992] ? kmsan_set_origin_inline+0x6b/0x120 [ 196.181924] ip6_route_add+0xa2/0x300 [ 196.185823] ? rtnetlink_rcv_msg+0xa32/0x1560 [ 196.190428] ? rtnetlink_rcv_msg+0xa32/0x1560 [ 196.195043] inet6_rtm_newroute+0x37e/0x27a0 [ 196.199593] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 196.205069] ? kmsan_set_origin_inline+0x6b/0x120 [ 196.210029] ? __msan_poison_alloca+0x15c/0x1d0 [ 196.214826] ? _cond_resched+0x3c/0xd0 [ 196.218786] ? rcu_all_qs+0x32/0x1f0 [ 196.222563] ? _cond_resched+0x3c/0xd0 [ 196.226519] ? rcu_all_qs+0x32/0x1f0 [ 196.230302] ? _cond_resched+0x3c/0xd0 [ 196.234293] ? ipv6_route_sysctl_init+0x5e0/0x5e0 [ 196.239208] rtnetlink_rcv_msg+0xa32/0x1560 [ 196.243647] ? SyS_sendmsg+0x54/0x80 [ 196.247475] ? netlink_sendmsg+0x9a6/0x1310 [ 196.251911] ? ___sys_sendmsg+0xec0/0x1310 [ 196.256256] ? SYSC_sendmsg+0x2a3/0x3d0 [ 196.260351] ? SyS_sendmsg+0x54/0x80 [ 196.264172] ? do_syscall_64+0x309/0x430 2018/05/07 22:45:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xffffffffffffff8a, 0x100000) 2018/05/07 22:45:00 executing program 2: r0 = socket(0x20010, 0x3, 0x0) write(r0, &(0x7f0000760fd9)="260000005e0009000000eaf83a0000000000008101000001000022000008db1ee9ff4435eade", 0x26) 2018/05/07 22:45:00 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000300)='maps\x00') ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x5, 0x8, &(0x7f0000ffc000/0x4000)=nil, 0x80000001}) [ 196.268346] ? kmsan_set_origin_inline+0x6b/0x120 [ 196.273306] ? __msan_poison_alloca+0x15c/0x1d0 [ 196.278095] ? should_failslab+0x279/0x2a0 [ 196.282457] ? kmsan_set_origin_inline+0x6b/0x120 [ 196.287416] ? kmsan_set_origin+0x9e/0x160 [ 196.291736] netlink_rcv_skb+0x378/0x600 [ 196.295899] ? rtnetlink_bind+0x120/0x120 [ 196.300128] rtnetlink_rcv+0x50/0x60 [ 196.303924] netlink_unicast+0x166b/0x1740 [ 196.308242] ? rtnetlink_net_exit+0xa0/0xa0 [ 196.312638] netlink_sendmsg+0x1048/0x1310 [ 196.316986] ? netlink_getsockopt+0xc80/0xc80 [ 196.321591] ___sys_sendmsg+0xec0/0x1310 [ 196.325796] ? __fdget+0x4e/0x60 [ 196.329263] ? __fget_light+0x56/0x710 [ 196.333232] ? __fdget+0x4e/0x60 [ 196.336704] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 196.342172] ? __fget_light+0x6b9/0x710 [ 196.346256] SYSC_sendmsg+0x2a3/0x3d0 [ 196.350202] SyS_sendmsg+0x54/0x80 [ 196.353863] do_syscall_64+0x309/0x430 [ 196.357826] ? ___sys_sendmsg+0x1310/0x1310 [ 196.362204] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 196.367429] RIP: 0033:0x455979 2018/05/07 22:45:00 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) flock(r0, 0xa) close(r1) tee(r1, r0, 0x34, 0xfffffffffffffffc) fcntl$setsig(r1, 0xa, 0x30) flistxattr(r0, &(0x7f0000000040)=""/26, 0x1a) 2018/05/07 22:45:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='smaps\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) [ 196.370645] RSP: 002b:00007f39c9eb8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.378411] RAX: ffffffffffffffda RBX: 00007f39c9eb96d4 RCX: 0000000000455979 [ 196.385725] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000013 [ 196.393050] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 196.400368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 196.407684] R13: 000000000000053f R14: 00000000006fbe88 R15: 0000000000000002 2018/05/07 22:45:00 executing program 5 (fault-call:5 fault-nth:51): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:00 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f00000058c0)='/dev/dmmidi#\x00', 0x5, 0x200000) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f000000cec0)={0x5b, 0x3, 0x8, 0x3}) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) pipe(&(0x7f000000cf00)) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f000000cf40)={0x1f, 0xae, 0xffff, 0x9, 0x4, 0x6}) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) sendmmsg(r1, &(0x7f000000cc40)=[{{&(0x7f0000000040)=@in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="5555f6dac832d2f2c80c75be05a087e2619800ac71dabae61a1ed981ce721231e9e613f30ba3e98dd2f5b2a6e1e49fb7cb3132633026713a252d28abb2f6c10229d55276fb039bd7a2466f3cfe7dc25d6a80ecfd37cb48182581415584466af0fbd5dee3136347f8dcb92dd19c67977b8c4cf65e2ff6b4417501d36838a2dc59692b8d919a7410523dc6c2d43fe62f17faeb25edbbb4fc9fd24fda8f239af3ae94c38f06715be1d90f9517e18b78c1", 0xaf}, {&(0x7f00000001c0)="a3be8f663e63b0f12aaad8e6f2e6aa7e06a8b32840797acd4978e0be574889b9d6", 0x21}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x320, 0x4}, 0x7}, {{&(0x7f0000000280)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x1, 0xe98, "a7d26efb73b14606fefa1bc88e3c57f5020a399aaeab2381d37f0e42d063f19808c29d9d52a6ca4383870eb7a620ec61c6c8b9be63caedf02fa537a8f03f21", 0x29}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000006c0)="7c190ac33d70c863648b119f9eed6f7adb8c004e6f8fa50486109d1b23476a6ffe01fe014a2d4b35e48af40e56153df3f52c89e81e252bb9", 0x38}, {&(0x7f0000000700)="7a5666c71d3426145d4d225a59574983d7e6b14aacbe8f131c488da50cbbbc7122fde47b843145fe5153ec08a1cf45682b2679bd8b1d923d6a149394aba034dc46db44a422f7a136c977b3a90cbe8c8b3ffa7dad29e06e9d966897a0a59d31405cf659a4e193fe4efa1361fe462b2f7935ad26beec336d7eced125d4f70c76b16f20f6f47a5a649e874e871d320d5f485089a6a1db153a5ec9454a8d", 0x9c}, {&(0x7f00000007c0)="c20827737051f497a4cdd87ee90851c03df758835d5978a0f409136fa0634b98d11886a27b4de8de2bebfaf64f", 0x2d}, {&(0x7f0000000800)="f3c6773a82004734f071dacf6485bbf2fbce1992492de0daf9616e012e9d33473a54dfe8be0613735cd30e61f515a5daf9e23f6ecc999d22037d4ae388fa8a80ec5c6f3eed", 0x45}, {&(0x7f0000000880)="a136e1c7a69cbdab2e772408749b5b4b03207268cd8a71245fbcfa54c6e1337fd1659ee4dffc9b4c793ad273f63a4697864020e2be7df68a1ffeefe9100ac02e0ef647f8603152a0b839f78235f02337f70c13", 0x53}, {&(0x7f0000000900)="1fed6dd3b573d1e3111db050d8a0056fe7a29a289dcdc72b31d15adba9a4a3549f8e86a3a7ebf2090523e0f00ba2f25e5e39545f64936365b55fec99075aab67f49eed648b8d1b9e130d1c283a7dcb349adef96914d096a69c533de288e0fc4130040727e12bb83b4a69de38c998a221624cf134edc53572ae33474e32ea8da35da1dcb1f40507b341f45161ad7870b0d2918ecb50fdf27c3b64d156f6e4e2c508150107a0c29cfdd197", 0xaa}, {&(0x7f00000009c0)="52a9b5f3d4c71b3a4a77d70cb64b7a8b1d4feb8ae40d860f930335a81289cac5deac73b73c1a1729e6cd9870e9289defcf669ce5292ae6815dc5c6824c4f838a7b6da9cbdda222443d9a6a4076d2dd63350ba446828cabf701bcce68e63ad0f6872030cf38c5fa288f2795cec88da1e295d7f2595cf044696e06f9eea5ef5d776ee70eb7e8343a27d78432ce4ea9", 0x8e}], 0x7, 0x0, 0x0, 0x800}, 0x9}, {{&(0x7f0000000b00)=@hci={0x1f, r2, 0x3}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000b80)="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", 0x1000}], 0x1, &(0x7f0000001bc0)=[{0x1010, 0x10a, 0x3, "67e66b22c1dedf89ea25ffecf7f4917994b6753d58991f37aa1abb64a3b219b3444b4d18c7d6164fbf1de22782cdc78af6656f3b1661f8247de6b6c284f08eab39359e1e0a08bd33dd4ef9bca46dd75431d109172c6987731a667b8f86ee9a652f2c6ea88fe96dc56e27fd81b9ff81ad5b45fdb1df077517fe69c185aecd73d51397ed610bdc80744352eb0365217f91d41385d388d10ac881e0b0f3652636827561566c7bebd31956edd93b42ced6abca6abcdd20a29163ed8e7fd51f287e37655641094e9daef429deb222deb9504ac66735db14550ba74f1a3974f4c33e0263bc2d1e983ea1707cb1e919011745451a31ef92d29de7b930a657774275f3ce56f4f20293bd4df18cb928d2b96be8f04770ddad9d7a2a4c38fa991a2e2d7cb3deb18af8e452635ceb21a2f9614c93cffc253f97226c53c0da6f83212e637f3a3912ccde69ee776fef7f8b19b83a030490feaff21576c85aef0689100bf11942db5c674b1d00034cb21cec33fb173ae5148598bc1c8589cc699bc109e6438bca25daee3d6b91c6c1148c4cf09a10b74502cbd68a4ac336749f8d2149def295f50f8d88fbc8e96a854b1e9fdcb69e0dca2912fa772f03a47d06267f133b6269973d54dd2c07da36e9095171b242425567c6ad17b91821890f85df917a70f9f270b996e4a19e494e8f6154e84f7fd675a61d0029661f6d246ecbeda195b50fcc7ace7e7ff417b81263ffc284010b64c095ab73ade299d9e09957bc14e0fe7b5f073264c2cf2c2b1d3337b21bcfe0ac41609fdb68923db465ceaef3b7beb39c8e011a398e4aaef1435386c90eb6d283fafc3623cc02a2dbe082fe4a53b1692f886beafc2171d1f400b27feef380049d6aadf8519abfe53c38ad676d8190e515cb7e31629d609332d448e94bc343d7adce822f9416059f64b544a8cb4ed1e028bcf07aa0eae09208f713c39949c6b6b647c7c618a4b564505d85ecc6ae25ca51043df797ba8a609cc813a404a83813bc10c5dd3b06bd337df13453cbd6207fb61869feb30e23969996cc6270e2f69bef8ac6843e6a6d73a811cf6f12484d76b658ea07746da551f2877a5ca429e3638bbb96e48b5ba097a81c00f17f98a429899b25ecec7cfc7f47cd0a780adef3994ec6256f673fd62437d36c4e712710921fafa51cccfa01d0df25e17f970cb9d5f8e2a8320acb61e795aa74f9dd41502bc65151f129265fc0efcd6d3c261c0c1d5220cfdcc8aabeebfb4039ac190921ae8150485f83497e12499823cf0967e2dc78e4c7a370f9bfcce7f3aeb86d6cf1a756e80794fb7380f416d3a5c433e4070ce42c4cef2992ff575a62e6194ca955b7d0f823242d64c1b5689c0fa1d8f9aa3d053619c28f54d60fea6932af650e8e7c9e8735a0cc78724efa3f06c19fbb703036fb1a35d43d59e6cc0d355a84bac1e931e59a530d393256de2e5ced0eeeffec848082fc02eb9ca8f6708ea1dbb86446cd23f8ebc1b7637bcd9125516331dae67ff061d303a6951d095752e909844fec8cbf7fbc5309de1f72c635c136c0a6e608c6cca546321a6ff44df1cf212dc1c8a272b027b2ffe319faf8aa367dde4cb5ec5cfdc49f0bbf38a189252a50061a887c5952349e97d6e9092f78ecc7e8eacef0e1f024c81587337717471787c81b7e6a79ff0132bba7b0103a7978c6233f74a1531e2a61fe155bd599d1ef17e54d37954f1749109b64f3580ce1d50ccdaef2227df174beed49feed15047d2368dfbf0883687b5ff0e709e433537d72a9e53c4a21b6cab6d117d6043fe8d10f709b99ec2775ba1fb5cf61dedfd1cfa34a717731f9abb2f8c29e82b4631a239c34b950f0c1771ab78d4c39710a14924914cb2156920033f27febe16d02e4f12883b191ffe8ef15e1263c2eb3d6b9c3cc00203f775244bd26c17d87314235470984375d3ff2ce4012eb830cf66fa996f805904d8339573b8352968b36fae92ace2208d6511248e9419b8b0706ac012f0944a0694ea2c8ba7475bc0dbd767ee913d77b097d95febc1fc9e666585997de23409e146113ac09cd93a23c5b843357ba174f06c6f2444750c1bf052943d5f80c2302a058642be0f3cf875f3492b8fbde2e7b2f436bdd74bd3cff939611e40ee4054557a3d026d8741fbccefc93ebc0ea64503c2451b6b23d36c62eaaaa031bb5177d7fc539169f4d1e0d29c3c4f91e78f901416f551dd917b978061fc305f31c4671be870984076e8e9c37a2a3b97aa0d8906aa88c32ccac64cde62173c384ac98b4e78d191ec3523b0d083ce9303d7d8dea512411a551f759185bb58e3044360970bbddc1efd12cae937a7d8510854e5d4c5d717c2519f3e7cd631c5b4b4d5ca90888c6b3e54c90d6b8945e59950bb458302c29ce5e1cc453942fd3f237b5aababd83d04a3a44ee3938dab44929b90ce5094087123a5e08b0ad9c3406bbb13606cc3c62c3b7e35310fa618e4f6d26ff26ab7ff9ab99ca78c9b9908ead7e80e4c9fc6c11338fa58a456f77aade286cd60084afd1a2d159931bd0cd08760bb2e42ad9f28f437c17b153929bc87c991a00034e12cfdd82273bb1126536a59a06eb26ec24bf60c9dbc660b8661b2440285cfc057942ef84e3f75697816af5212b248515da8b5f56e99ec43ad1250945d3f54832a00e03d43d79219cece80db8d487ee051c4ad0c49e1495dcccbed0b1cc78f059617d55dca65e79e7048491175a9a1a7ea2f071b01798dec83b65014d73d10d3b0871b5c8c773cc056c6b171c620cd497a87f6d8c85dd42dac671093a4139e217fc769f8a4d2f72462f4a5ee021be9d338d7ade4ebdb19e3be3971e308ad33edd1d4eabadf87fde17010d907f766aa090fa21c1650d3f34d776070d9692585fd379010ff0af6f70abc8d041bd4cac7414e5c37eac9fec36582b523ccdc5c93330a0e5d38bcdd97158bcde9d74a63e03a4a777fbbd76f6c21047f7efa1783567562f8f9cd58717c6f34e770032252da153a94969c7f903b424941456b50b8f74c13a2c4112941f64f3e47c2824fbea72c8f7da25a3215c864b60b1e22b30ce8930747167a9db588c9bfc8fc4c3ce13e9afe06a015c4b35fbb08aa83d0cb8332a84262f223e5d7b66c4eaae2986fa0c85f4c8218f791a0281d541559b559aeff725bcb925bf83dff59e9054a24d704aaa9df5be6570b7fcc3edc3b55ae32e7e0afaa40a9ff841a57f02583fe26c8c33dcc7a3d034f73dcf3873755aa39b33ce9bccb9c880dd2a61d464aa693fc2414d15e3a3c33c54dfe8a84b5f12fafac932b6b59bf8fdddb44f9ad38c310dee03cc967093639cb7deddd4d2e60c4bc374cdea829d5210c53540af539ff4766f854131d367631f425fcc873e9e2c9f6c0925b251254c1bc25b15d3812d0a20089a366867517ea959c3e7b2ffbb60164325ff398497d55c4cded26eec82064be81757baadefd53b42703c10f2b720d0ec20ca1963f1d0efe554a1cd7c1b7fc969303e48051086850bdc21b638eaf3f4fc7b423e2603cbf5ccf33c9f6dbd4f0e70dc89f413708c7ec3d319bcc15d60066ec560a40b1a4a9a0cce30e4c87154ccb57e48fdadeb16bab6911f6dba685a8d563d996ee4385998fb6a0ad4a4de8d7705a80866434b265406bb6c3b9ad5b3a380fb2364125a424e8984522ed895bdf21cb96665432f7a46bb8e538b7e6aab6197c142a9b3be3e119537bdf4d5e0768bc22d145de4a45fb81e056a17265bac8b09c7e414abd47654ceb1d078500fe0e9ec197d399714a3f8baae916dfed46ad7e5d1ce67084c25097633353f6ede58d5bc8129a3e0fb9292d343a1e3b6e471a7c31d7eadea3c8caac25a372f5e6ab853f51ac11ec2ad5a97e8e809c661907134d5f9a50082325198192b40149ab41218efe7ee0a3600286f16287988ff1ea07b3f3e66ba6985d836591b60b4b8502124d481af1084761ca7e542c9e16e70af6184e8a9cd24dd0d541832f7e4586991e08763c28d3706c8d3b3feebdf16fa7ae211f49f2d22fd70e6d8e5b00bccef770013cba6c159d1c0b20585473ff18df0a1219bc4610a4ecf7287600e56e4be4d17eecb9e094d84f3354f646f306a2f8312bf91c8e016ad243de27fd9cec18f9a6ecc56ddc8b86f10cb33b65a1cd76209dab31ed033d5901280ad0a4964fa30e258dab2673efa6ce8dce8530708267b2a1c49896bac40330c58c713f3f582aa5be02c054f52154e5cce0a8fe275ce8b0a255c1bcc13430ec91cf3febb8bf46bb07acf0b620c5101dcab5c01dd40d0fbca553eef2172a10b5c754de997660a0669899397f914a93ec01ba7952b536cd8210d449f9a1301546501fc870f45fced3a1892c231aeddaa6219313ae830ce4b5e8e5cc9a2e89103fb94c6f09d599d6509eabf9be9b29eaf7b34baf1a171682cf5e6c6746fb2dba46bcc81366910b04659a61f6998724c21098604a7cec9be3e4ba455873a8342a71deea05938140ef8a688bac7f70c2c3d022af84fbb74a475321b6af0baf022fabe9a4f85e432b195552594198414634fd6cd0f0196c7cfa5927a1a1d5c1bfd397e7d13a548dce89d06ec495de65050a0eb2a5d312b1a502f3664a8111afa278ba22a80db073284ae75f63fda546428e70784cb846bba5f5e43964b9d736b59760a52de91414c1e28d086d76892016e349e30b9efcc4e4a7bae2da61244e35036e98375dfc58abd252c172706be5dc05cec4ee9054d71d66e220f1137c2b4e12f427c45724f83e5e1644d754ad3d9e8b97212bd40789d783de148292655523776e5d44f1aa659c28951ca687584f428f84b510f4a17d7815fa7de8ec837bc4f5a7621b8fc8b2632501fd2071715718a0a7ad0ed8c384e0e88dbb87d59f51a099d24da10a85a87631c7646e611b114c1e2adc41f96c4d6c0a23676c0597a8f6232c25d2e1d577a851cbd8045b826aa9ff06fcde283d5b30c6bb0c67d123efdfd75ddceaa3700eda9eb9e02ba86dad36a3856d5e1dbf7df958e8929140f0d2af43a67b48e15e965eb41b61e49b3db6dd74253f2a6e69968c748441a104214d3357a8c6544ace54ff9a65cdb33f6645931ad05f41258549316c74b8832f419016c8a79df4ca59041dd87e8f11a734414b5bdda9f7e23b21f7eaf37a33d96bd75e5452ec0fb55a682a3e1c675df223aff91f7918d697a6d1332e4969669038886488df948d81e9013c4bb7839a1bf771466b274a75ba12c597291de7c9baa00a674869f41c08ae5d6b418739b53660c93c984d1deccb11ac2b459023cba56c38db82daf2ffa89a7751c194855df58cbc6b06bb8c604fce716b9d0c012077f3c6851bddf0f261a97e4abb2f46a8d751e6b3b009fd61d65aca462dc0609f37576fdce28d2a65bc50ea974eab31d4298237079ca0877b624dcb80b7dbbd03ba6cfd8a756bf6798efc28205ce358e77f792657320a4ea976fc6367e2f0a05ed4ef18be5d3d785d01a8bd9428bbd8a62875842e9730e4464b860ef9f201d348e8dde9d8abf10b930bf70d1474e360e0bcf982baa8376e7afc8a4f1fe510f6d8724068b357b7b076c2f042b385ffbbe9c286049e235dce34d268f6782e7ca897164735843a92fb919aa24113bd6de53c66f83e960e6985d8139275d1496609dc1a9b9440aaf5820f8720bdd4c05236bb23e4aeb85047ebe79126028d5c3f8d71e16151b21268d71c38f231a66d8a3c82a1df0c673cc8dcc9c5f69a66d866b72c4838f27095fdbb07e78ec10c0d922ed1aa48a37df7becf13d209cce4cab607377bc2785a33c273695"}, {0x78, 0xff, 0x2, "506fc81623a2ea6da2ceedb694b2a0b6f590da51ee4e22975d70211d32c58bc7215bc33ca9b861c8fa2168cbb4d29970b14c7c51289d594e1d4c31563f67e769fbb6dfddb2b79fca28371a8c6947511fa3cda537e8ba9495179d985b2c4264eb7e38"}], 0x1088, 0x4}, 0xfffffffffffffff8}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002c80)="b2b62acdd35b152989dd686dee6ad8e5fdb57828161e49addcccc9a2c1727a1cea83e5682f8ea694b328bbcb3f", 0x2d}, {&(0x7f0000002cc0)="40c0fca84b3b9b3cc29b66863ec1e29b8d6e3bc593797e4c57dd0a2525e34dfd9a96952b7ccd95cee812f0e995ab45543e722bc3654c120e4e5682361dbee021bfd9d11759acda3da762993ba069c316dd43dd3143658faae77ae495b8e7950040cc4283d8f15c032c337c24583395da0580c5caa22ca8264abc81514d81e2202227bf2130907a270cb4ce3cbf4c2826253b02c4ef8495e2057e6f726e0b1be9f76bbde02b1784c8dfc1360729c9ed267a0db742a30c9f454aa6624c2d064f1be13ee38417ee4a22802a5bcb96cda26119905576630b10c040a8eb9b05a6b00e49b40bf81341e1a079e1eacd088d0c9e6673dc5202e827d8796d4c9e11f1f88085eb83ae8feba576565d571aba1c4f489264c687ddc7b7a3a8f29f92be9dbca138b6cf84a7c855629a7e6d71a80caed66efe0aee6f26fc4ee8933702246c8a991baef614234be56f90877ee04ab41e7ee2689215210804fb361a6e7687a68d2ec81c8dc9b648e44d24f9db0c6a7ce06c1f57e15da5ff7ecdc6bc56968b31d65d0422718c3e6eba74c2a92527bed3ec54e5a5b7e62b906b2aa684a0defd996e1540c9c639a46a71871f251a3dbe196c8f60b4934384673fbb5ded6198dcf1c7eeafdc5d260ab930412fb848313ae39b02bb9733745f68dc99441887cbedb3ff68ede1b1b13aa0b5c92109a20c03d05b83a8ba66577564697efac7ff36ff5ecc7386d06e9231e09bde78449584b89e5a3fd2a48f5054c7d4600bec75f4b2164991ac7de2fec0183744036ab5b9844285ea54efe09c5803dd7feb77e6da6012e593d4247633058d6fa92bb45dd9c397e6a6839f935f44b2f27a22b843492025bf5e3ede11de51bd44c7969da0ad386a421b9d03e1204235943b2b2f1f01f0b77a7a03b4835e2b3acd67e0b6a5ec41d08615d02fe6d7d9507c09cb45df43e59ff4ab2db6bd109206cd138c3fc04148c1af4b581efb099e3315580203bad325531aad5ca3376b35e06a6beeda11b9cc71cbcc6f75a7ff53b3e07bfdb10a96b21c04bd2a7ab96304d98fe84d1255471715da24a4efa5a136d083ba48907b11181eb952ee659b916ef92d494030cf28ffec8447813d12129fd125e584da90c38b08b93b7db529a63e9ee9558a66b70cc15577632202f4460ad0d878edee05ba603550cf9f5fe8f3dd3aa35760d545ee676cb14b06b076791c2c66e91677526fcbbc186c91064e234bea2949d77ad3fe666f6d51c30566efa50860edb9362f5f4af40b7bd16c8888e898972fba98a0c70e9e8ee8780ea3f2842788b5fa17b8ca59cb6aa1c3c6440a23bec00c9049252af7041dd714c0cbdf189701042dfbb647e8d5f07768e5e7b15182813a52de10254f05bf39043e01dc6bb3ae312745709deba2cfd0efe101e56e0d27a32423d9c9699f71ea63e261e4f47003366dedf152e0862a1bee6a28490ba757a2e063ce392b84ae1a0682a91ff9adb48a36a2c9ab1ac6db3423de641dcbd012559ecd0bcaa7260b75d3b12a880e1b372d6d1131a5bfc1be6544d4b42fe7c09afa8190fb088bbbb9f88905b65d5847b89d1f600b444c34e0381c7542a859b70ade2dacfc0b0d25fbea102057a2eb1f4a35354c6f8615af001acfa6042607dc4d63576ff0b4a2d0df606ab109e18bc61882a6a07200daf331620def41a87ff3d1b46a57f17c623f72ed40572688bd1639e2c5d493454fb6635cb6259e1c9c5d5f98a2cea8eeb22af18d7b49052ae7e6beac6971df01ddc980c3ee879c2c17381a8fe8cd31b26d71b79fffd6b8db35eb16f2e80466bf685e4b9fa021f2f4eac18390762e2f39138fd28339e973c77d21005aa69a36f38d46310abd3eeede006419a364485b961de5934aa9cbdeb7d0ac4b1006a863bee7ace435f08c152e629e048540c25949ba9ae66254e975eaff6a7be28bfca21327450da75e249725578590f9ceee890b30d17c61762f87e27a7f9d8fb8bd6f8714c76179a03ac79641d475d59bed5831db8d12231dc4ed0ff7e0553a525d2950eaf29f7ebf53a5e71b2e1d7958ec8fda6d8b3f381283685dd4e5dce72bbdc7bc387aab03f48f7a7173e75f105d99d3f9b4bd0827621c144324fd4b19cfd12ef3e3bda5c2fa04d1eec37e1579440a38eda06bb2f9d1917a2053a0ee15a7a0988a7ed7137a6644e0dc99f6f8a73c0e2f5ec386365f5f6c000b8cecc6b08b2c75170e03073a68219bc54afe5c5238b7c086f94d803648be1b5991ae9540e8d5e54638ecb6832cabb04dc5f84f7033df71cd5e599648185271099e65d47273311539cfe5b5d4cd7d338191570d5b455936cd98d65f132a074390d30c10c79b9899a3d20b059f40da4d53b38cd43b5cc48816ae1f3c352acac3d5b17902e2e7cd9218f29af256f8d1f4d4cf91dad6cb4e65b40ba3eb288476b0fd2ed4cc3cd96330dc0f4dc35bad552cc214dfc40a9328c9d4e23464bc244c316691bd1c945dcc1fe8a8b5d8d8cd66431b207161a288bf86d0c3c21d107404e55db4db01bc19b60b13e0d2cebfe81239fa142454596d981dfacaf0c554d28dcd9ef2d2d9bd7ccf547e1427e3ec85fe899c69eb85687f341b2741ff9183836e4c82ab09aac5c318b99d4f79106ebee5ea3292ac3e7d0e198752b8f08cb65ae586e638dbea38759a9eda2ca9f837690a465cca22f64ba0a26b28c9a268eebe4045b0a391b1b3f57c4dc414cae11d5218e543f5edb0750ff72eb6896656af6b1e921dfffe9ddae3c08370c292552dc13ff92574b5fe43a540164db2d8fc46406dbbf33f4a7465d36d618df9194b4a4c1b9c0882bfce9b2a636e61ad8bae3a8a3438a641b16e7cc803b0dd9c44ad04f7ebe2733a0693b782b6fdfb75bbd9f59dba753afc75acb4ffb21070c36241dd6319eb008cd25459a8a991789e1f0ae14350700edff10c80163455557576f4bae34dfe408551e336574fc8093b1d4e45099942ad99b405543aad27ffe5e7c28b87555d0f01c182eecffc0659080272e20038063ed281c1e51ea6a4062acb6bf3fa3bc120dc30832746a4f86260620958a36916d34991d3827716ba792cd0dcd1105a058faeffe4ea6bb502461194002adc6d7277f28a2d984af43e67a33fe9825b1c6c57164e6ed1ba558de1c958da6d7f3348988b49277175ba7ae53368adc9c374ee4d4b4ca5babf0a3bfa63592d755190ac6f1593866933c406416cb32bee14d887eb3316edcb4150195efcd979d7cfbac194ec3de97a8414cfef956812d1c7918f45ccd64c770265671b14ae8ac55314171ad5580e2ebcd885a0c5627bb737701385eea4fba0a8df093889d932190714b390fea1e64102763871bf13f61bab4cb5631ffb568e14c07deac103f7378f6db212eb027d9ca5da0fe62bd6c15bf53a321a6226da2e7e3ba16ef6f01f3d80c7d9b3f3b5eefff69b220d89434f8e572c067fbfcef952b6933efc79bd5360405cddb19958c4a703245352c02203be0fc79f042330083cb2d246f65730f54367e103a4320187e46b582fba8bc28f4478c68f13ba8194c814e0e343879c566c0a082592dffc009b360cce4fc444767f8e37d3a15dc5089561617b90a7c363960da6f587ead0f1d08cc4c0dbf052063b16c8df354aea818ebb9b6282c892ae523e8285cf90403c20e464f361345ff9d6e1ef1c9ad9a3f339912b39322b749c06ec6f1754375d21c3a358bda57d37de2a05ea87ee96915968f7ff72ae2c980993d62187b1d8cbaf56402431414c03e05a507b6e3ee43f5b26453753ae0635b805ac6549120c6fa6f163d39116e4eaaa028a7f075e05d6ec454fbfa45e2bd789582899daa033c42333ffdd9223e33c49dbb59d6bde721c4794a3097d5b54320403f715057186e51527e356d871c1c224ef7e2902e0d5b628cd8864ba8f1c941b33ae8e99d8a48d040cdece5a1014646e67c61098d391c3e76b513852e0e3c46e53ec00aec62c8a5d5289a0c81fcf9045beb279fe0bd559a1ab261aa68a34cbc0856e5f606b7f725cf649358095ea765c72c72dd0d01b35fafc2a1f5e57ba61d54a668d5f322d600d27fe986ca6e65662b1de745b4a6a24286214bcb6ba7ff60eaee5c67e742b7f0cde7dc6ef08163e69d024666754882543b1bca74045f0d6c8346f68954397f36d18fecbd7181082edef75bfea37b6070f4fd16c0c1af01703b2163d0f0600eb17eebc8730637121f334a5defdf99b8a5238f47dc75427db73d94868b057e1f0b8ed6fb3f0a832168ef93e293068986114936284c5ce61e0ffa4b758ddf595c3b51f69ab7144d36b237260b40d58a79edfbb9f1ccad4cd68c4aec3a4c2322c556bea8fa48b1203e7837e1a8c05d2f635c71025d096204fc5d4ada0b51e300d5d3d0d0355d4314dc40f384cfe721bed133a70d62d78083241e2677becc0b0cc1cd13108f96f229c31e164813a2fbcf735f66e897928136949ed7058d4fb451b5bf5b527d598a70c85322576c4fcc95fac0ec779e048b89bc491a853aa35f794c5452815af0974a5e9ada9238c026fe68b2dff4438fe038cad89da5e8c142294d7cbb2a88e128951cf42089c9e2ba69759540fed2f355dfb7bb4ca562c90d5c54ae1935c25be14570836c454b6a695963c16fe24c261f7deea1b3a5f873c3cd73f527767f39baab90ce28924bfb7e2cc820904df0d099c1b5cc44c0c3a55401dcad1df983240ae101743794c2f82354e74ea0ef30d00df4507ea7b931ffe8bb70c5caa66fd4258e273b553d6a295f3e7352bc572bee5f0c668f7bec7e5d716a8f11f183f313d8d6da0a8a97714bf5173b487226a5bda53e70a85cd6530005c475588800e5198f7a4af07a0ea56e0d19ebd071bcfce60cc72cd0ba184d7307c3bbba358fcfa75322ef73758d6237a512c8fc170487406c3d67b33143783be2fcff3b32b97b0dfe45aef5f674ebad77e46bd3ae06f5e489180607d27cf1a135726a337d2d5dd374c9b654bd930bd8119fb08fc9d3a9d6bafeb203ca52ceafa3e88045515cafbda7279cbd991f94abef344e68e24e3730e8cc1bcbef9c734c5b7cee470c68c0f717bbe0f91692a0934f0cb7003c55d6087678983f18ce1fd866325076159c1e4b633f6d40128a5c48896eccba0bf2f2bcca338e2186cacb3982bb79c559471e402b85ceadb5872d43e7eb488acbf3409050bf5314f6b4d3946eca7de9f17c7f56edd3a6b899f5a6a02f7910e65ad51a571e8bc795da8560887ed2edbca0b70a300ad908205579ff7f21d8f752c7a857502a873115eb24496d3476dfec1ca69b796a2f5b7dfb54f673fb564c6623ca5bfc4492e4760b73c4afff2da3c7262b507065517b286f4eccce47203356bb0b21e95d2102c0e9e8366b415de4030114d4312109899ca60312e59e0cab503994ec8ff671f02a5381e0d6c52ca109936b2f6fd605b04c55a98f2da5d1122f35ef5c26d6df672d9e896bbdffa3bac0360eb1c74de6fbf48454388921da03c06851b23db941d110e60b0e1005fd63f4207b2cbd685b01b6c3d2c639665adc1a134a17b811e152036e893c7155c49866845f274b8152238ab9b9bd06e956091ed9224c7d4b4e425e61dbf58f6b904edb9ccaa93fd545c71cc334aebfc6e2359a13cc95594c6168840cc3d760d9b0eaf8e6babc20370481cbad6c704e747fbf5212b25430a7ead7a8544e550c3870bec46718e3eb769f835e84a0d1c1b9db0e157423015d3782222530acb1c481f2ea78d68ab2850c3ca4885e5c2fdb8e1a5a0b078855307e88bcbae01e3f05d29d47de19b4a2eac59577e6af4", 0x1000}, {&(0x7f0000003cc0)="8cb31005f00895fb877dc1d92b9575ab4a000048f4c93b2c0e08d2424c0aa617d4da0338493efd56cb60feac6574303dc71a21f652d081f6955460f7a308aa6ed545466563267bc15798426e153371f11a64491e872d4412f63f2da78961f2c7b8e0cc4c4cc6a579dc419913c58c992134949dc2ebaf76dafbca88e64e8ce147efe385a4ace8f87637363675de78e7e317b40b78ed1221cc0ef0b1f1e0b3a17cf5c223bb6fc275b0cef8a1978808100ef18f269a0ce820942044ea371adfaee7485496709a9717002673e255de3e53950a49797bedc8e530c364fb287af301be39d8955b2113deaed0c4d528fbca7b954426e0676a", 0xf5}, {&(0x7f0000003dc0)="1cf6fda06a81fd6923a6c2ef37b9865a0f77dba1b836a63ef2e867ef8267a50f9b519f3047cd1761591e4e366cf9a7e7", 0x30}, {&(0x7f0000003e00)="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", 0xff}, {&(0x7f0000003f00)="c184529933aa794df5c3d4a4cf3895c967bbc6a2cd293cd352cbacd0ea8af7f22fa7caf08700b3f30fb1c0dacf45dab634c1fa23b6a3cad1a546e73112a5f6e48cc79c3f5a704c50747c07b8a9feba522ffe113537f0acc52cd60ea98eae7a56f867558a46dc4560ca2374c8fd68a6d0107fa0f1", 0x74}], 0x6, &(0x7f0000004000)=[{0x78, 0xff, 0x3, "3d5667d623fcf6e291e3fddaf0a285e118cb9a49cc3b3397a48b9652a6da13706004f6d9cc450d1340130bc4a40cabc0d1ebb75d3521278826f0ee3835bb624a8bf8c328710b41040ea5912ed9832c6aa8cacdef963360d27d03f6e53c7da4d9bfb069980fd0"}], 0x78, 0x4}, 0x10001}, {{&(0x7f0000004080)=@hci={0x1f, r2, 0x2}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004100)="49cdc048ea855ac5efc756d9cda309133610aac97e47109c3c7754586d820ea816d6", 0x22}], 0x1, &(0x7f0000004180)=[{0x30, 0x10c, 0x400, "3abde6ddece187985db1a534132dc3a32ac9371be946207b6f6a6839"}, {0x1010, 0x0, 0x3ff, "262b5adefe9978be83bc6e23ef89a91def3410ce829065a3c7f9766d90b8f512741f05fef814646e16865ac40c495c1dfed64140b6082ee37dccc69d0c9f44be02452015fc6f4b226acf6079caa12272931f5abb659efd28247438ce36c1325f71415effeff884e2e5e45b1297f67cc49c6832b6cb18c8ecabef9c4eec03b74a9c2daace04ef530779bb5120bc7b6e507b90a4406b4d0c9f1c0a03571d6b44950a0ce48c728e7412131808599aa76c84e956306b3e03f0e3c3905f8ef8d59c6e6b0a4e17f1a6ddfa4725cbed2e24c157344c91f4e263b2b509316fe3ac9370b8defaf12554a515536b1dcc4d44178886ffbf0d17f361bdde72d8d411fc2d61b5310572ae2b93a537550219a6a7dae1d806ab7ef412a812c6b3469013f2281e7285abfab29caccd38f693a546571ab0e8421beaf585f9c7587dc747349352231351bfd164f75ad3ff88c3b3f7afb196284bc9e25f6f6dbc9b97e6d61923c85b75a291318ff2564bc254fa82e25de53c8958d997e845cc3de4ad08582410ff9d4cd51c0823220e40b51732dec36ff769f5a00404cecafbd2e5eb769542c3415c871c16da717b9fe4b12ab25daa3230dba49a01e6b1d17fa2b5251fdcad6546683d70a0b3668c658c17d3b2c894495a2027662e32c02333abeca0d853a4715b8f6a22013c2727423630b80017ac60506d3069489300f614971a2e93077f71c3960d6190c56b668ae2fe01bca69459e7b2bc7b20ccc987f837ae4b8b12c46f2622f2744222d24d7f2a206eca1d426692268965e8303ceaaefce972b37a833339a14946f3c01f09b3bc6a8247ff621ed9729e82bb270a7996658e5496afabc413f5bc54a6a8e1f9e82c3f570609c5a2cde64ba9b25fb32057fa13bbcb67139a53f8b0a85dd790fdaa3b546b08cc656d6d1d9b22165dbf2c51f2bd81ddcfea62b4b66c3ac119003e161e3cb44cf060e3e5b4efa776d1400f79c709256380936b64904de5f800d5a95562879a813273a3e20a04a6a2567f7e545237066f01b49700a4bc5510fd37b0773b25a7f2f90f20dfac0bfbc741a87434e1523abc583417a4e6773c4ed4058f6b26ab3237eda227de487f6392fc036e576da68e604a9e69f5551dc6ca38be6f65f37ed3177940e9317d563e0536053600343452deadc9d6d74a0483560d84e1000268073f00bf9abbbfa108530bb380c7912f435758fb8f7f8fa4a3f46a539e1eceba906d3c5785a6ebfc68d29bbb890baee086e819fcedc1406bf6a365fb60ed90f0a66111bf2d4b3b3acb93535d89c402b81bb23d60b790806e5af47a541900517b8035d57f9cf8dc02351d21896efbb1b6228b6514283f5b5780d806c4965b3b1c03a845dd78a8ede8267de145a1e73a0f90f2a54273402edf20afc6798ebe09696ae53270ac01f545c159dfc832825d269c3d34bc517c67c821d539bd4759e50c0598668a64f348807823ffa68431204cca0fe453e88f1bb82017f88869fb6e405956f493f9891dbb4cf98a5cf21b51945727bcea9c789ba0577b2d5e476c30ed34698b0d1a4307b34d16570499791b30fb0fbe728231c82131cdbe723e62c593ebeaebb1e2423c0ac570bdf24cd5cd1946a232ac7da798603e8ba4e93bb42c1daaa32b808e134ba55327df50aa5dd703a421e444f8cf94822e8cb25c10452f85ff1b145b3a2a2f022a82fff3eb7f8ea51130e09a9292b531a9defe1a719a3a09bc2c5108e10e8b040ae08c261c916ef7e76bbbdf3070589646fd0ddeefdc3ba5175c5812af90db50f67d6ef3ca807c8b4739d09525636d3006da5a1dde51bf12728d9d18a2056b0e3ff21548370e620b6f852bd2eff4402e7978f8a9fbe7b9bacdfc838735f394c25b779776ddbc3375b05a0b8c949d4673cc4a303ad32d40f8865137dcca488396679923a29229bf6ba98c9da3b201bb4401211be76fbf244d67e9b2e650cbb12cb32ed12dc9ab0954f3358855a7386003d5fd2f2d573f54a130c0e31bddfbfed7657490dae970e87efc576d0157d818cefc61acc151acc5df42a5e07f00b8709dd6393f3223a27573dc5817a4dac9cfd2f795d69d12b93a1e134d8766407e8e1d03459a8825207ac1f1d6283fca217a82a86fdbed14ac811458f82be92b6cab242a9a5b97a3f195575754bd10a330ff364470d288f31bfbfdc11cb86c8e0266a34e2764c8189007e29dd7a1c558fe5cece745b7aca4722a66b3b463a47adddd66ac5abe9a9036f649ad733ff6c863d3b47122f12535e7259d5ae3cbb88d8ae307cdab1263bd3054dc36bb0d88583210a56ba1576bfb7835c40310170296fb81346801c7a0198f0bee5d4c3c9a756c84d244abb63b2837ec62aae8c981dfc4f3adfc5f592248a8d4acc8ecab7f93789b565393d2d847195d1de8886588455f8c65e55465453a6cddc1ee011763b0c8d9a26a94ac7e95e935605dc809fae717d49443b5872273dfd280c045f9050ed9decca9a82ed53c523d24641d56b65315c7cda988bf864aebaf26363d3d24b9c0efd9b0dcf66bddd27795726caff73ad2332ab94464bd0781c10d2da1b64bff443310814c42d562539ac30eeee083d4e30266cd736cd33d126911d26f949414d3742464b939ad77ccdb0ea60585ef87a4b4c932df15bca6b1736cd62a79f01cfabbeae228c8f1b47c42c669d3d4b08ec4404f9881e98e795e83a44a2fe207f7d629faac60aac387d24ad9ebe1d3718d092edf4adb2294f75bad9dbcb6745e1f2638bff72c992d4f89a15afdffc875c7170f03ef77356501068506aa852b188900a48e87003bd5045eba45aaa0e7672e62f58cd03cc275299e3d2896e51db032471aa99173e2de62c8810340a361d7000cb144413983174525d13a7cd21fae8e6ce3c32f554910330fcaf2cb16bc3ddc295dc513f00f1a0d524553ed89108ac109a52abf8fe1777641a0d45ab508f7c98e6237551cd468f6dd148c99362eaaa54f65abd6a9608080bf27c20afd59bf00bff79ebebf51dc9f0c2333636316281f87dbf93a056808d8a2ae34898f9708f2829e091146f0e181bb5ee09e0b992caeebb128954f2d8e01a4c53759add35de4d43dd6556bfa3bf97e1cf84c2ad89cd560bea0013b00587b1df90780876e02e8022e066b0990575da466d7160b8721a8d8bc7aa446e231dd37cb8917c187c2130b350c8f4fa15565104d1791e73b5dd4b23439388777ebad1501e8105f67fc7525f41609eb952b87367449f0eb23f44f9c6204d71411ca31a342b9c2e25b640d1bd2c818959b837c11d1b9f4e2796d06b5ccc85abf6ea50443b2a21bf783f7a2959de8df47b1555749c2601a54ba16d1a75a0bdf84f111ba330279a9f0ed81bf6c1d0f33962fab6c30e55dff4721127ff099a77bb52b2eaf16a2959f135b50fb52b1943d9fc26f8a99afdcd640da964d25931f55541c53341c7e6dcf7e8f6d10b1517e9c02226aa06ab697a6ed41e83159f9a1908e187207d48cc2fed2195f40892af18016f7a709ee8acf32fa778bfda3ec102e34fb44d3a06acfaaeabb16e5e82855fc8ed55c8f60dc15b8fac97e993d06e16d3a122928afea38f86559c96602927e145b1c6f475ab3bd9e85be8722ade5ec43a318e5b528917149b961ea0c5ea0527b0c7913d1b7aaed3eeefbe565b2a959c9536aa0e237567b5adb4aa7cffb429d041c359744416b498838a7b63fbc3f2f5bc225131dd84d03047b2bba2382eb9c45629c37368c6e7f4cc89e7ceda3304c657ca663ba3722b073bb84fd3bdcb5ad978bd03880f569901fb09e1c5aa07d71241f1639b12a6e0991de37a324af5ce93b2abc123049a818a4fd2934bd765c2827fc82a32ac72dc095ffac42a828f7b761e16bb87f2a07f02614fb39e71b8264f6e81fcf49b822135fc902690d9badfe571e157dff328109db44166a019711bea4291cd600559735c28c58ad53d6135b4c68750ba744a83763d0012e2925a294ba15b4978c406234440d87a68a51b450f6d3fa76891b00a77cd1da09c3c9d944995e3d574a9c40c1afc6b10ef09abe39a86ba9cfb02f4ee86296391e5a04347b247c07e2ad45297ca8f0351cdc34d2481af1edac4a91223def28707b568686c3b0572dceda79453062a72dab97bf6b48e1000023748cf11693ed298bb308a40f6c0630d47b33988587a3a740b2f7885cb8d6746e82738a895e4bf4084b7fbb3c6d2d3b774633c25208917fe8a1da8590be56a8efd30f242c07b7122c3241d0736d8c0f1bce21c0a7038165f78c98b0c004b958a969f894f95339604f8fa1bb0353747249997e9f50886ab2261c5215adc0c794bd41b6ec3e22047489064c78a3ea65da7ce03407a60a7d3042b7541722abb2bcbe861710942ebc98844a7661e284f117ce16f4ebaa9138e7c0f2ec1ed5d36ebacdb826b1f9bb78444a4cf67c2c73bb94d17f9b68474ebb5fa021ed8349d741ec4f3d6002c802677758cac12016eb32d6a3d5db036bf750127ddaf6d802d02a6afe858466841f5d8c935e4119359c4ca0e25aca074cf2de95f986f5a5a92ca29e7516e77c20be2e59e7fcf127e41edeea9146cf768f048a06188b371c009f09647203b4b20e1aa60d6d8bd126ea0d65b96327f5c098e88cb54d09e8ee68fe3dc5901038b2df57a19ebf97090ad4df1af209d3d70226d78bdd85ffec8af62d0f86a3924197434eb19f6f9d797b3caa436abe846e76823ecf471db2fe04da85561e59a7e8242eba06b6175e3ab90d0bca810676a92b6f5e3126a61ff875b9019a6e170098fdc6eea8a2e85803aac3fff044ba22505c7486132598215f52c994e9c63b1627d3cb184fea89c5c4813e5f8bd8798f9f9447d6890d01a97e1217eae6a85fbed5827f3dd25ad646b33b71600d82b59ac646154ad06c7d2d1d7ac2a0461b5112a9b36ae22bfceffdbb70c92634844bba40642510f44b351bcf3a41d60c8b3423690d66b775055d9e11fbcd57ccd73feb48e514b64852a42df71a08ea0d882eef180c538511176855aef75b6e2f1141c4a8be3983ffe250b72065c3ab5389747d5e606071cc942904bb28f7246986ccd655949fd5ce9a40492209399352323ecda89a7e3950fc7a5e827171669471ec7b678f28b01ffd42b00efabdc66374ebfe0ba27ea8be81b547dafbc92d73e40796a0e88631a0cfbf3b6db06a8b93ad86710f8e7f79fa9d2ce49a033c2f6e65a7701ecddd484892a2dddce72df01b495f909f34c3036f0e58780b61970802b4bf53a98014b724934dc265890fe01bdb3adb4cbf018d8f1bb873aa49ed7d34179aec7af0012641cc1edd8104480a1283c2acbd08668c884c16f73ce62673acaf600f26d505b7caf2e0547614cbf8c2cb5dc451cc057142dbb1e5462cb7548bf0e3f8f764ff321a0a9e5efa5723fd0ca4272940c97c68dde6df42de0484a195e5cf44f4ee65ea77e41f6021bbc80189db89818864af46e23b25126f0d169e4db559338d40830bef9e05624deb70ae2c2581252d47e6c94edf944cbbe3d9d8b86c48c30031790a864480a2d1d129d8b31677492de43737d0106c38b6aa5aadf65132f4e892cd4ec1174f2be87488934dc70d8f944c88e4ff60f0dc97eaf2f87121c009bb0e93f42a152e50eec562317719b55751706fbc5a0ceb516d29880025d6fe8a37c04515b3273c18c573ddd644702ec2c045095111ca91e25ebf63d3e38b12614105dff09a89f6950a53d00c1c0b6e3692a512d711a139938fe875d87a7766230a6717d5ddbf09ce6009cdfd6fdc028dac61462b2e090859cfc47d"}, {0x80, 0x10e, 0x1, "b41302ae7c1fdb912cc90839525aa6daf0d482315bee1395d8c9c7d2679d1af79987681d2d77f824277ba47140e1c5942357f4b35aa959a0c06ee92ae467cbe5ac9e96b4b17e8e2d612de9a62361a3469eaf483ccbc9f6925f80ecccdecdb905d110598e42f03dade0341fda8f67cb1e"}, {0x88, 0x107, 0xe1, "1fbcfca8e14211ffd754b0556c5d20cbab3ab75276df5d094bb7f2d5167fb05540d7a1108b1a475802d7b51caeab470d19b63a40b2e00bd61b02a34c3cebe04c8f9d8e51e3b3a86ec98caf7f1c431cb19605094efff30102f6a15cd2c1db5f17b6a65d366a5f649f1d9fc890b4b452b2e20cf5a6"}, {0x90, 0x10c, 0x3, "ad8888f74de7895e17cf8fdb44051c70f4f362bdca0a3e95a39387418dd92e0e571170cdd028f94527e6d560368d199f6c0e5dd24a6daf49e4cc83140b749bd64013df9fc1b5ef0b7da66644e8972af360d0a8cc8be074b9362023123172de94894c1a2abd106af793ca806ee80275308d139c41f723c89c598f8a623968"}, {0x18, 0x10b, 0x8d55, "43866070bc0586"}, {0xc8, 0x1, 0x8000, "2020fd25443d96f7822edb758fa6eb8dc9dd3a770f7120f752fe025d85ab6de09f2f9fe705fb58020bf44aa496f0134a7a749818818eb2d48f3f58bc8421a1dc4cd7c029fa33632d43efc758d3d3ec7632b0872662b84255b1d1c9a6a0ed66b23f8a732821a8cd2daef927f524ca7143cc89c287fe9953892f4649c1eab31beda647224fe58debb45f149265b0af93afc36bd4202f23120764b8e1bb00604dc6599780b642ec1cdb18cdb816e23b60169820fd1d"}, {0xa8, 0x11f, 0x800, "ced184bbce3a5d9494c74ded1a6ac5383b643cefadef6c580b28a34936bb69124b84ac23a9145040947db60607aba98fe1a79612b104f86d16adc9752db144d787eb32e91e2a404a71dd8f97ac5b4482a06be3ecdf334df7d208ee27d859a7abf37de182798694ee400a65df8cbb2e976b055036cfd3a84e25c29a2a56bf9a3195c063d0c3d366940911f07ec1a8f81277"}], 0x1360, 0x4004010}}, {{&(0x7f0000005500)=@sco={0x1f, {0x981, 0xffffffff80000000, 0xd900, 0x10000, 0x7, 0xffffffffffffffbe}}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005580)="f94107f7379f3c4c2b9ee481edb755b6ee37718bf2c67a123256998276a68158aa4bb415a0793ca4755c3383508f301b3f18f746299316ce86a5638fd032799c8418b06dc4c1c11a84308f4fc50ccf01281c08dac649781d49ab310d18a635933ee188d9d64f5ad621a857f690595e350c1891c27aa382e9a3c14758c8a11076137df2b10d57a5a4a730b8beca92e4766a95f0c00a8aefcdcebb96a1fd492be0c25276d72a4d8a34be90bed8a64223ed7dcb6c9f483ad6410a26c2a1d59390b5562d06218ac67ba0b8e048d95e8fb617c173", 0xd2}, {&(0x7f0000005680)="9fe2a51d56b4116795ef1304366119761b7a06ea979a57e62589b0102f292f2e38de603f47a9c2d694cd4f6f92bb55ab30c62875a9de8bb7dc3b50b5561ae2e4430f5f66465e0212c4dd7fad89c123e8bda34ea075eb99ef33486f27f897b267542aed65c61e2a603149b62540098a3b13b3559ecd1ff8ecbf167b3b8737349e130be311ff121c43aeda9f34b1d8afb79e321e994c6cbe3871d188f0939f2e4f326ecf10", 0xa4}, {&(0x7f0000005740)="c5330f5d1275174878a85b9aa1", 0xd}, {&(0x7f0000005780)="e6abef734d55994c3c3c960233e873762ceb86f82827783db7820b2bcfc22b320baa439069a13609659bad92935fd6b96bb368edf683b76b34d1744af1c9b8e8a03973a6cd00a76320a333d2cf9e038beac966049e", 0x55}, {&(0x7f0000005800)="f5500b80ffe365458939a1f19ae2e7e50c2589f1d0c325fa67781dd06dba77f11a9409bce96775", 0x27}, {&(0x7f0000005840)="98e091aa3c1b75322de5ab6acaf8bd360caf4f8a43cf5ac74699a48c3b21d6e2b672c349548439db7214bfb4302b77d763be249de7f1eee947306027ad6c9bce9aa70365fc", 0x45}, {&(0x7f00000058c0)}], 0x7, 0x0, 0x0, 0x10}, 0x6}, {{&(0x7f0000005980)=@ll={0x11, 0x3, r2, 0x1, 0x3, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000007d00)=[{&(0x7f0000005a00)="930afa04908d6b2363a27e194451f0e6ef34dff32a323b48b4cec86e12456d4b9115c23f79518d0f8fa23b72692744b9757c21edead9b1fda90158c34d6ca4057bb193c72a509446924954a4ec0bd66318c3eac5fce018923e71fcec6a807e106244c14b2c8fcffdf64b17ccdb6c792ff90214b643142556d1b18a7873463344a894f9e81545bde511150aefb1330020da9e3ac5c3a93783fdb33e5bf7e38a2650c31390a8f5bc873352f6c0a87ff3073ab5253bf272a2384e7072e66ab09d7ee60ede415a90ce9beb38873159778af31e07b35d59bb9bf4e9303abb1ac2112e4ae3ad", 0xe3}, {&(0x7f0000005b00)="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", 0x1000}, {&(0x7f0000006b00)="6e868913a2d723c85b3d6a02f95add8f959bdfae651c4435accb06b37312f89a", 0x20}, {&(0x7f0000006b40)="100dbc28322890d6a5355b63d8f8f959a1996ad8a37d3cd35b7194bd41786cd02d2da8a82629d6643da1c21633415f67d269c8aa8af824637343b4e0195de45f08590f74982d2c9d780092ed35c105f3d36161361eceddbdd5ca1b3f5b7470e3a716ef0d963b8f25e8fd70f04816", 0x6e}, {&(0x7f0000006bc0)="8c340b8e325b5a3967db0a945e51de68085ea831e009f4d9cb76636d2051afe1229502fd6a31b568e3be0e5346721b5fd8ff9aca1cbbae21c7fd89b8a1a074716086dfe404df7de9324e8eadd30c5b35e9d814bac906cb22a381d6f2670cf60a5f9ad71efbb52f76be6cbecde241319534032971aa2a36cdd00a809686747fad9d921a21a330608cb8a8e10fb9572bac5b734233069e32d47f2081d5fcc0a9df", 0xa0}, {&(0x7f0000006c80)="2208bdad54eeaaa53aa5110f37bd7a2f9090b6a71cdee83ae502d745c7760cfe1811e39d574cfb9eba15723e4784910038b609e70de5209866724e4b13bd2f765053e26ef0c8bf238cce80edea7b09bc400bd2eb5d071601a435966ce07c3a47656fa80d0e968425c7d29f4b73c3ca0bfad3a9e5", 0x74}, {&(0x7f0000006d00)="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", 0x1000}], 0x7, &(0x7f0000007d80)=[{0x70, 0x10f, 0x7, "4e5f49577bf53b1f6787c0610d0780d7593eb5d8cfb9efacf17959170e11fe2ffe3a2b2746081882c2838c26cd21a2b1caa0677b392022c72cd881b264afb15bf73364b1f1b17306f7602224bf10189e82e9bf135dbca1d797a8"}, {0x1010, 0x11d, 0x3, "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"}], 0x1080, 0x10}, 0x333d}, {{0x0, 0x0, &(0x7f000000afc0)=[{&(0x7f0000008e00)="9a740cc82592b415b0dd419b3b2ee076f5b4d92fe2e693c80b48dd4615eb7d98df97ff7d046cd3d5433978246d9436a56ed06bf59e25b44b05bce1aec2333e29cde96c2b7381918b8756779edc665300b5b09917ce0b4c9548cefec14fb1342e6043b0f979888ef2c16eec9217102d2ad870ba020211c3e6a9d82dbb6f1d4802296f37a4835c601c648feea062d15374d5c1bf3a28222a247156d962bb924e8b1e24dfc6955aaa424b77bb25033fb4a2b296d178485333870fe3aff70c826ae47784d1e87decd2e9dd82e0286d4f8aa7b8b94eab0c0444b947af8b3bab83aec06a559f87690e90ae50084ff5ec977a684f185511a337b10d7910ab233ea9f749348b64931221eeb9b2b103f44a815f12305832a1991c7ac6ef30cf07ba90aad2468b0315ff6aa86cb90766c987678c2af28e634020641a4032c8ebc8b5b27f7fb2ce44476a43f873546d32e5e381509976dabe4f59acc19e4d841fb7fca1a32e6131b56cf8e405b92b21421599490e2bc238382c47ab01971da27813db4f9d8e4622782024c3eca39753b50cc3d2b4af8b7262cce4251af77f0acc5b1367e4ba3a81cb563e9761b0798ce918ecc898b4110edac982db84324467bed7b5d795e952210d806dbc2ce1039b90dfecc049e301f2384046d999070ecaa7925b219578a1bb48e0f7184a2b1e5158ec2e611103f88168f9e8113083c604f7a82f2004f25e05ec6983dc0523f60d7b1f73c95ccd2c71632ade8265335ef1b687b2616a28a25ff71a0f77ee7202515d05b6a306b9d1c27abb94055c440bda0cffb8a16f5e80899ceaeab183735b3f533e7ff1f26b0c1d77cc68decec9b6aa08da7ad0d4ea0e82a3e3e20dc1727b8f1f5ae6dc1898e33b6098538bad10010968580016e2edc2c2b63c981b8144d096c7e5a811f40c5eb2171645d80ef25f7801773f01fb8198f89ed64d76b1a24df7a9a9c267679a6bd49999628b2daa7e784e38ca21f7f9f8c208545110cd46a130fad5e8e3026e5a0d230f9131a3d6b93056fffc35c273533896bc9ca7f5fd97fd6b0a63af956b3960f67003213cbb82f7b4137e7dec3027d847fd5492537bfa822afae8e3c2b7892f7d34bdb6641507a50487a1ddadd352fe5ae117b16c42b63e1a23d63d0922e1f00b041e543035218e8d09896464710f714ae3ca24b4ac4c5bd0f9963209bf76d69a40219bbefd83066391e7773b26f670b189ed5697807bb99e535cdae2054340243c005cd4b1a24a96d9eb91af5e24e6516003fbf7661768d2efbf8d40d47c2503d6a1b35bb30dbc5f7c972890a7daa3fa81593d4b635f925ee5f88f9b725c5747f7820f14fe266dafa54a6696c9cb2041917e674458cbc08de782d84cb93230ef4fff52a7ebe91944d52485714990d22d48d27ed43a296e3c1ad2b0e54ee5b6047ae1b79e750863587f714869d0ec04b7350865d1b6486b0fa0dc1732fe3f02a1cad9d9c497e3b85adfd27dcd15d896afebf1ea9767b09784f148ebc1afc58b3ea1bab0b87b0d5ed175446cb5aade29d1021c69804e877a7abc6a9a675cf3776b32f4faa87ab04304ff199b2567c462401d1d26bfb50aff25d65a444567985a9a900c5389f672314051b5c70285643b5a34b3eecfd60300504c7df14b80219fa1e5665f3f034024678a912eebc15d1810ed872426b6f260fadf6e89949cc4517062602707020d686dd9b5cc7aa9f5ff3b2a054481908d45c8968263ff7a042cb8941c2b78466234188efd64c50e7be86d886b80977881b1ffede71991d0fca8e87320e17034b32be67b1cce327d46838c52f19259ec6db10c1be6d9e2d4a5859e19c1350f502f97a4d9c2d3102ac04756f3dba61f66c8de8e42c3d5eb2723fca6411c95c05198079781260a5e14e85c47da48b0ae507878683524dad7ef0ad59ad424592502463b8df93956cb8f343b75bfc44876a3fddb3eece3dc52ae964197fed4813cc75a0f87c7b308179766f33bb241789540348c54178ebee9e476703f7988e423f1649109d9b0e1635af16c826b0a1a0b8b5e111dfebc9aed6198f75831894622aabd55f2e256aab08b0d75db5eb9f7a882bcacbbcab398d1bde91a3c3b87d9f624da231fb32731c22460558cbb8f149190ae3424d71b3e3841347ebe0e3bc633a535e02e961678c06c74f62a42b16c44d0c71110df0bb8408ed58e7b0e62059180591d5757817ca2aef5e6171c80068edb10bd7e26b10e8c435aaf9656458391087f0db4b2c7351f7bf9514579bff1cfeac0d4226a320b5944caedd72992e726b6b4d0f7d97d8eabc4f4c20aa23af6106e6e55dc69116b540a91d5054e9889df595c57bb1069b0f22b45462d89e86ce9ec5fdf00cfb275b8dd22a495f562faf4a39e060298834468c80e48725ce30833ab6bdf4d7474183d56d15c9f7766b295bccf6310379ae101b1c4d815765849fb2da9e32c4c269b1249e5a805e7b142ed1ab3fdfd7091b51e36f8444ef02957b0f9252b6f9da572b1e4c3023bf21bcf17d2b416beb5060700965a446c4633627d260530c09c20aa1585bee4598a6ab86f523834eac6ab8561368e10b88053e4951ec621b3d9bb81f6a7daae7b3447f84cf00f284b7c8a771d082bc83802d6ddfc13b97efb9bcc58061b23e2c4665a2f258216a6503e3864899fc7573fc8bcebd49368c1ecdeb26062504992dbccd849463f05132f9e3d21961551e8c8e1f4b8efa837ea997ee554d71528ec87491ea9bd81f4f66027da1089a0396a7fdea5104a6c1c063b26735a33739da81d97b6080b79e7f9d887ca40a77291461b63bfdc5592970d4ff414ec9098f35bd6e9f79410553c30aae0553d33783c205a4760478322a707148c2e7a9995a638bed6d54d48158b2f05207f08cca250466e450d265b76e3d2147b4ff368998db376f58c550c3b7cf7121647d13522fb99421281123b2bfff4fe9d5f7d434b50cb4c405a49087042e6d5da0a7ea557fd676a0a49d888fa25330067bbc3b85286ead673c90a8231f4e81511148cc57a124d2476d39fffed9426855bf679f35f2e4365a2ce4d6b2eb0bf196e5b550e583661ae5cd2662557fc8439e1adc964f0c5e83e0e6485c16fb6ec9d60b305d0d1666d65473aed937d56166092333354548e119311c5ccc6fe3d14e0b9b41e1e2735a84b578dc6767acfc463eaf21f4a39479794b4ed9f36b1ea521eb9a40618d6de21e4bf55e1816f353d005d550d1b561cd216bc4154ea2128a9a098d09743a7dd1995a1df08f9b4f5d8a37a38bd5f9effefbdd5f8a2e32adaf40aae5d51a52d71a329ce3f8782b51fa84439b2591a1acb0181f4556f2dee29fc6490537db43b909fbb75970a422e9cb2837a4dbc62685a385a85da61aa3d11e3e8066ebc591297f2300ad546318861b48436bc2912835f6cd88e2e42f138217fed31e058af8270e6c3b886646c32506498d4ef52fde906b195f6551f57347f4700c458cbd190b8fdea15ec60987beeb18769b9b920f4b32bd4c076606fa924a65599f7bdd31caccdd94ffc9a5f2fc029f2931a176e68ba107423a0d4057b8dff62a00b88359c211078886cdd486e9c83d0040e7c1c41c2666a0268136275669564da6ddfae54c09bb0bccd8cc1062864d013f2030ae050fab04ba9ea82e0adce5f6ebae02ff0e41b537db24d357a3829e81e9bede99988488c20624fddbfe6ca899977e5d1573b2648e23bd892d5f63e89930bed125b744e7591c3df20ce5da1d302831a5fb3afc97e67ab35d78e10255f38fad755e7c50de8bd5fe182ad8074cacc07f14c0d1ca27f5aa1696ef02c201d4caf23a4004dbc271d018ed5af18253ea35295aafa5070bcdecfde1a7c6880afbc88101e587a8f71b3206f928c6304c39bf67e343342d7a1a75f764d04d0aa014c12eb1c015f1170a89c68c810eed9984ee92870a5ca686d468ac62b01ffc7e010697079fb855f1fdd0e2e4cfe5a39e48409de4d82af27ada5f0fc91b88cc628980dc2343c6653ad7588948bfe1b091d8432112b40889c513e12206551a411b8528e0519778878d0411de8ff1fcd57e38c25b4c3c8ba6c08e201e3bf13fce627dea6923bee2951e38a3626fabb7e96d6592b4e95f0740aef5599bc9415a6001b0bbfe2b85ea36d9e760a8f60b1821ad4bc899f04c78aeedc2744e297a156c4ad7d25210c170e9e96d4c9cf5897ed90b170ca635f34a00931be2844bd71619b9f8c5fb5fe0533aaf5963f7a1b2b6051871d78e123b64baa9947fa51f7f441e73a7fc50802939f1a66d0e951ae6f83bedbe1a5c26d8ce823caf60c099b187487ad88a0e61276575f5ec265e1faab49008c38dc3b0132f86f750c3ea7a93ab0e2a39e3e2ad300ae83e8240660a5b55ee1601f55e0dfe0093fa2aa10e8c34b270d9d379ca17ae551fcbff212179bf25007b1c4dbc3a13a8801013d1e65579ba39e5bf10941f5862f256f70f6645925a961c095be54e7fb8ad90db016f82d231f4eaac85d352ee6eb255698401c9c42e3056fd5ebefd39c79f6ea50c43f0998db6a396faa73398c10170f3e7722a27e6cdf5e2463f779483e5680d2ad5ca44ed57624bc5eddbed482169af59e48121a13349e23a7be68adceb112a1cc17082b50bf8981f4cec9e8c33367f9297dff77680bb4417111151f351e7408395842db90a00a8a0549c3bb490f41cc85e2b8b33db32b001d4be163e7143e2da07f5d632bf8bd1448fb947bc26a23957bd0340c3f747e9a1d725d15d84f2b479b5464765f602e720a72e23ef27ae83f12d8f9b124c05b86600c46444ebe434ab83e199bba31181b3454be269aa8de0f6b6b64b1d5872265d056c4a5addccb5f6c871de5ecd1f9ce58f2914d4f374f9644a1f6482d3dd3dcda8976b7823c6468b8a56e41539b58fddb05665b1549380839c35fd6efbef75f246e3cf4f918fa112236359e6493be04b69fe6a29a21e1b7f8a81723e5abd04f0af4cd33de716b34b1325eb91b2e405e055f1d0b1a6d281c302cc98a46257c1321f99554d7a05bacdcc01f553c1589d9637e2924bdccf33ed792f02f6c4111d5ee647e63c47acd6a114253194fdd408bb51b50140ddcab7ea7bcaabdb4b21635f66bb1df265bb11ee773c475f479f343a21f05fd2f3e1f15994ac4e7343b42d33578ffca62bc70f448aef06e39d248fc6d73839ea3ad80a82bb3e9639c4669f4563687b79610b41cb614a515937926608fa35672299501d2bf123d7bc74cf14faf37d29a8df1e15f7e08ec1e55ca75707d546ec7b3422f77805498bf48045f33c07d3fee5c1686566e905f03744bb000a01af46b196989f0757b5cdeff25297c599d9b707ca7d2f7af25cb36718f742e8539dab858340aab504e7441bf8a042c4dd8fc970205bdec5c3ac4a5f5809427875a86a66be7ded2cf7e3e8b359a3aecd1dcc7677a3d9ea19a7ce0c6a690fd6fb2ac3900795e706bb2245c664eed00e74a1ec91ec6207e7796b0e8fb7d3e340b04bf5475128d54da9be6eb2d80a8ba6554b83e3b1ca347596ddb2554873fc6471df83348d9a389f5d600612d2164d265474ed66ab2e2db21288817155c595bb2f0ebb14921b9a630edea20e489121343d2ecb82fc254dd9c2624899ddcf6befcc29276c5157530f43777b911deb151d67dc498bd85f68ce8b59af052f0611f94887fa3da963b26f2c1d241358b97b0815765bfa248e5c9f678926148b0f9f4816feaebeaa8cb3e1699a56df974456c4fb7fbf05cf5bd9dc251be90c7dc1787df31b33411e13a0df6b0bb10b464eddfb995c44e7f", 0x1000}, {&(0x7f0000009e00)="f80109051da31ff49ff08bb77e61895cf59649b19fc57276e0086380df1772e493229e11dd78958f4b06476729e38bef3cafa3603a2e20f952550499142c156e3a319bba3c28430a821ee47edcfb080fe11eec5d0b91969914b4ac9b5bf7c3a70d9a382a1ab0", 0x66}, {&(0x7f0000009e80)="f088819763e4475d6183ddd246cbc8728f511ea1cad7a5d2d88da3b25f155e7d55b562d8eae86ee26976e6ea0bbdd81ec9f474c15cd881856a79a228e5f3e326aebe4900623c6a069fb79c9ffd8c98595676ca10363aea4b57dd0667e7d5aeb1f740", 0x62}, {&(0x7f0000009f00)="d8e8384ab78808b50e2894a248a4b9428578db8a2bbc1e85c3c3c3e9b5e9a326c2a49f25341e17e97dd9cc3c4b475c71a2902868907b8710bf850014ed80d38a3068e947576e7c65e31cc84971f98e2627fa095b53a4bc15e81055e6a565423e39384c7c90e37013529d0299bb98de43fe2be949db98e9680530aeb520dab08b407f13f44109afd94672c27df653faabe55739a6b07c9bcc23b1229408c760e59cd5563313c0bf9591689e0c49", 0xad}, {&(0x7f0000009fc0)="4ab62904c5d5f833c5cec30afc7e94117216dd65faac73748fdfe0bd19e2a96ea014068bb53cd6520c3f93fc9f65e7eca80a367b0b7b417904560758b58bf60c1f6a141f4527c740b3b559e6f40b46617c5957f4917b45c7274c70e7c1f4ca2ddddd9a3d16e6ddad9152ea1e539e0a362f079aed0c7f6334d897a27514bf32ad3be3479a2b0eeab8073c6d3aecd0d3c7004c39cc4e5a524ec8454a1cb19544e5922c794db23dcf00ddae9416bdcae0e47910d0c64772ec4a290e5d55c1355c60329a2ff5ea3fe2a100db2fb48979ed4c1355e066f63f8c54fa1d691d8e6eb69ffe0bfee60cf54a0ecc7d6566626d810a790c6fb32e3dfa2e3a929528029c6c4840fd0ebae955b2d19d0d26f7e91290a1d02d4118407579586ef3eebd5d52832d259f2b4ba02b482eb0b722ea3f37c7274a9c1c156dd428345d9ed52c1153128348a0cddd89a6b36b93b56169483e0c8d7004b17280c8049a877f7ecc764529e72c54fe2acc1e1ff7273caaed3d7757a317c54b7ca68dcdc8b84f2b08e84713cc920789205785228b1acc7ac823d3093210784d4e39e3aa89b594d4c690629be3fd3b3784232c60b9369ef3fb14f1baf2bd7b65c3043b46840f0643365f6184236af1ec5af10391720eedd1460babd98223d63a55290856cb1fdaa76b00d1d65eefa47d48f672c79c13801e7e0b0e4140cf66f4463d7a72b0f2e946aed75bfca8327315ca06d3f90f174be87ccd68deaa8178498b4bcdc6c5243a0fc0b382f1d4a0fb168af4d95ee15e9ea2a3de38020e6da5b21f8daada2174227a9fe19231720da1d6c3c6ea6ff5580fc06a35d9b4f71f1df601f14a6548fcfc536eb382e457449908774878fcca684b897a4a0a579cfd09b9f8d73f92aed708fac3d0e6e5f8b81d5100b97ddfda084c4cca6ecf34bbd6c983949b98ff26e1212430541ae0299d2597937501245d3f0f7bc9d2d7c4173d552fc8ff69f38806a686b5f0de1e97cf58b97baae2e8d8d7fa2596d56a98b32a04dff9d955386a09b062e6063d5914656b71656314c05e078c14933cd399d7aa2870cca249c18fe15d9ccf1450f3d46d48b4a6840c7b505f87ff0379b83f75b9023a5c3df31d231e74a1a9b22ac91145b16e34ca2d6fc7a054ef9939a0cf042980610dca802e59ffc7bc301294d701196c8cbf14d8b9a79fd989dc0d639daa7e7c550401c018aa87ee37c306a121f4f42dd8e057a31b025523f43c804424b48485b249ecc1d16abe5708e7cdcd387d3b29555a231f6d4366f9f33afb970e3094d533bfd4e1b13c78dd795d1e80527c5ba4a60d3b4e0392db438b6d6e61a7502d4f98175c7a9babdcbddbf20efbbef06b3c7ffce61f601bc4b194c32d4782355d1bd55f0878aba12702030ddee8362bbbb425367efbe05236847886b90f70698db3b9ab480d9d76f3dc53a5f6d7b79612e2ac94f80303f72ed559b0c0ce43b150d20cb8e1cb918a56a2bd5f65fddca967a55d2c60cf662c10efbbac548bacece77f06983c21f98ea147bfef6b10ffbea8a7c95880911c41d91d46c73e53d5a6680db3c9398688ab90e5886137090bcf1e94475cd8fad02ff56f6b052ce54ca36d3eb823ae1d68403d65e3a7bf7218c4b09b10a6234ba32f0960fae61fcfdba622ee48e204fe41e266e099d4cd2c0a1cd26a98faa944d60a4c3947ae36d278729a52a59857a096008f2eb13fef53b8ebe936c7e090584403f6663826fc6698bcfa2534573c79ce3724bf7465aa123f3a53ae1b8edce852b3ed74cd71dd13a40df43f49c0ce7e22c2735bb4cda099380d8e24462eac6c6bdc856fa5257cbbeef5ec42aaacfdec8b099eb58a498fde661309094eb69bcaa369857b3993c9fdb106ae469e378198396fdc73d6c1eaaea0125859e469acfd80001ab6dbfcc304e7aae619746ca24121fe9f76ec5a17322842ef1cb437d6b5d7e73390e8021a777fc4d258f0854ff61eeea397191d2ff5f79154db7283501de508942cff1d488e77424512a9db2751a5a3f7c5910d7bf7d0f513afad5dbabda5e0bbefbca6376ad68999276f9abac1ee5ef883fd4e5058c76d9f7333fc3b73a3ec23836b328314073d719c7fb4a262c3025aff4e05f435e3d3e64f7f5877a9bc343117f96ffdb943d40f866def6f8e25ca9167d1ebf23090ffb19b4c840ed211fd05ffc9232e48e9655d263ca2a84818489a6161b4213bab5a316c3e91cc5d0850ba3279b7901214c32ede68572e466bcb6b8889177b00286dbbd37d1d3361eb70f355fa90d05a172dc511042d774a7373dd6e5bd2d37b9bfa8c93ad6d6fa53850d3f827ad295be37815fcd5960268402d8af1ef4e00f621e66a2f855154b5222ede5f446ea9dce2df115a73afa44aab8650541c6b2d474d20e90f6b2a6d44937ec03d8dd060509e3802c678e7e4436936c54451f4b0433af51de08348948bf1e4ce638929349dfb35ac5896e11aa3b3e051072b2ba49cd9b8d98242a2ff4591cc6355e66dd4d0dc06c22e318357b88b2214cbebc69c07d6153fa880163346987104d91608be6ba22a525633a424a5d3a02cb63eb976e634d39c2407cdfaed4c0faed2875e1ab9f8a67f66c37a0a9a952c0f2f9824cad04c6772496c453f81f9593f39f9662a1f0d1dac04944b9c55235ecca8229b290968a6520b40b19ae227f8e28394d88dc270873c3640aa59fbaed6065e41b78b8f6eec8263b27060a6d1c5a9c384b94bb1fdcf2d096606ea8d25fea2b4202e1c4aee3a38f6c320ac254bc63d2c50df6f15f134395d7b0d6b8e4232f4ad98a40289938d55b6fe4f9cbb2a9cc7ae466b6c2f080c4e0e65d33eb379957be781b81e2c2f4f101fdbe7ffffac480d502473ba1bdf1eca835d6af4a5e88891f5636164a5c5efb56f8ceb41fc984712d171233173906f3daf423bd822a491f50128676086d9429e85536e17c891f72498e9c2cd7e24a66f1bd8a92fbdefa70efdd77b93fe8ddef5ffbe3a24c7cec644099f96de0ea45ceedf39dcd3644b8ac01125ec97bb1fbeb8f988a31ead53295e95cb51e3136fc6cd8eaee8f9b32ac1594437b513391ca1f37ac70c07624b69097f16d2c99f539ccbebbbe1b7cb713d4d32dbffb9741fb8a3aa279968d5fe19549c45f1893378b34c3d233b6a1f98283598fe235a0b0f7dc7e6caebb2a4df152b1c5ac2ffe602a8892a4d00b8dce9b58db6fc46618d15723bd35fba8960e257f4bf562b95010b40a984ce8031ab86fd9c2abb51bb073bc82e36adcaae8724a9c61fc5c3b203dec7b62e57712eaa335e8b63c622666b68ae50c0f7d7c7c90672f47e2a5c045cbb859a34676d11cba9e2fe50c38d5fa636fd28b2bed8efc08a53fcf46aac4b70054f0d278315f2b0eae3912fcf3c9eb423e4046ef66d226cd55064d61ae45839e57115eb9dad48f24e7fe09d4f413818e70bead45ba8d645c2d993e1a2526f0bdf9c07b6f5d2a69d8f5b99a2a4e1a21506c5e63830fa62b124b1764799061fc791cbbd37f6c3ef8c34cac177376ffbf2dacabf8ceebe1d91187bacc9708be6cb924bb4089024e6617be5746dd3e6516ed3840c3c9bada789a19278127047f75f5c437ca2da4947ae5f840c14ee7275833c44366da47aa57c72c329ec092b66ac3b7426a9431959f0b919575fc3c84d4590337eb47df32c5946fa0cd1cf32516e77b6bcb694358a405e825a7637498933abcca4761c676dbe14b73322c37ea93ec50180861cb27dd8491c485f56cf52105fbabf9912c4128bf7fcb5035301af2e23609346aacf8fc6fdca518c3d7b6a317c84f7685ab575dae97218c9601cbf5cbe5727c27e8a66c6ecd0d66a5c3651fce9d49cc6f119997564d364393882ef4772f4a41f14045fae3ce5c29c3431c13e854ac545da147142b592608cc81b836ab8a7596e75e771475271c0e47f84c4036c86c67b15988732cb85658a409c85a40a9e6fc71d527919c6eec553122abc171700eda33c421f46c8b321510678a6ee3788815aa80e9a3ea5a75c271064367529035bf194f6be3906e535b221c3ae4fed1a5ecbb435d0160ed4b1081831bf67e1b38a1c701d956c985341b0a1cc4a9473555172f74e13f3bbb0e1ee747e85e407f3372d50ca3aa1820f3b0d2308d230d815e9160a416f45e983607c25b96c18dd74218a1e71989638f2497be841d726b617b95fd66c811fbce8c2db56c0c2f659e70ae69b6d4bf019e9c54117a8a6564cf6fc1fdce4c98359f6033475d637132c76639b8d367135fea0bbdc808c6aa7b09b3563f32307bfc29630afce00346a76a27bb4174b2c3321e5526236ee8fa4a0743dbb4ebc35168d64270a6be2b28c69f1d6a0c280039eca3d365f5931f14ee2d537e3672bcf53108a2a58c1016a80b8f7146f18c6a0b2ba5171cdb2f72fc9c1dd0ceb157a58391e7a520898723282d4fa57f9795cbf71a987e6215010901caa5d556466b7ccf4f0a5673023165086d8aac3f5ed9dcb85b7e49dea1ada2bc1592d9c7b47aabbf3bad96effd6714d636457ca6709379ab640f6552fae7727e4ce992ab6c0a8b2f718926880c5727582f25b8dd5c7432a95d6f00a865a00fe88f7da6d26991846940d62491b1169b906110b900ee4ee70c1800ef9563524055b74bfbd0e6a1dfc6e00502cf957ebbde72ba8048f1869fdf131da5f90cc8e5cf3c29d65fa3f7d111804f750af9888eb79793c3a2ed4e7319ae9f29e608d5a2a24810e10eba5212e3f838dda6a901a707798a81b12f8d86d85e57117f274446b222811658956890ef2247a35f05177fa9c4f875921849dad24be840492a41e173d2044c2754cf37586606fdaf84b0d27a81c970191a785fe95a812f76ea8c904870e59046b0488dc702d130cae4f505055c5b41f317105e3c1d9ef8b8fc284c03b7ec2237f9dd94da98af1ff6d606ede089759b69ad356154b4a5a43094c0f06e9d843ce8524da37e545b7df7f05dfe4057b2f07bef1d3bac8a448706d23e499911cfa219b5053345a45e08a1f0fa23ce2cf954adb8003b3356049cc153b2f1174fee407dafb9988bad9f4b6b6508f84b6dacc8400688b6e2b02c93867573fdf376f755c16139e6b8a90ec261336c46e569be5aa9e2117562ddf3f695af6fbc12112ce0b0e35ff982f1b1521e5f3a8aee2c5a4c67cd583bd2fd776dd6cdfe11b9a108c43a7ddbab33a89e68f707556ab812ef7e484f550913fc497ce342a3d5b0a7d547a69bd76d80e1fd26ab86f124abd7f23c81c32a43a97c29ee1bfa57e1a1132d2a034abca3e023b2bf72402f5069436d6bc9cdb5c4bf73071134f7df08b8866edbd1c52a04b05f0b28a66209d96df939b39bc22ef5fefcae3a2f95930a13e3318aa4f69acc774a1134746de7148fee8e6612ad2eb0974509a10399637860b7cf94b0b8433faccc8c8ca9187b0b204cf8cbace1e262e5faae47a10b64f177c9048f31d19ae207b8d4be44ad01045f042ff8340058360eb988a435b373c20e21658f414bb1e85577d0c38c145b4e2edc9165d247833f0ca0a7ba6ed73509b717f2b9e06fae79cc126282676f5ca5a94d64bbb178f0e549d2c27461ccba07b2c903fe38aa6249015cc9e015f4f9bb4f3b2986772422afcbe8036c5dffcdb3572cfe4ac1fa640975e12f78f32369f1a69998cf325d159eefd8740be9c421a3227d8f84b098f50e2ac660b6a5e5da499a820677f64a15035f318e82033302524a53897073e44ff608d02d691f14aaa8567f352491c544d6ea0642da30acb9fadc6c00c65fe04209494654f0870a775401e6432", 0x1000}], 0x5, &(0x7f000000b040)=[{0x1010, 0x29, 0x7, "8d9a8a479e11dea9550c7416896380f09b5592ac9807e5f0d376c4c3feb8082e6aa262ea639bd39439dda5cc23a952fe741eef78613474176f54e6a0492174f15729e1d1d1f159bd00edc9bec031f67cf807763e032c069169129e8a5f8f7eb5d402ca093361ceb6fa99e489533a7ce039f716123add04a1fd51705436f9f85a11bcc6c1bda79c72da5a17d4a11bb988abbdfb17966182a2646f6ed5ef646e13523a2bf6dc34d1df859377e316b034f3ed9b601fbd7d415a218fa7433540959bb8ae16fc9ad03cdb795f54c583a090467be2a3c801b439e37e96222ce496367064bcb8399387f5e7924fa9cc5c51a6ffd233e39c7da8405b5017c506789f866133fda60c214ee6c0ac9f6ff7b172f2b4376c2d25815a34ce0844d657b983bdb091da88aa57e77092b74818d80b44977a76688b494c8e6dbe9dae2e40dd5c408a847f9be9c46cb8a8123b1daf6adaa824a35bf96d8ba00f80ec5f98ae39d1e846937598be312145b4b2e4a0ea6faa608ffbc445ca8d73675116e6326fcdaf72b8011b0d6f064f98232754ce7c8df83eac3dfe86dd1fe11fd062a464927a8e8f09231c3d26b59c5b693e259697fc6559396de61176b1f4c3e03422c09e29327bd46f192c9f03482365ea365c4545948f3050ac61af630d1267d738df8b8b629d6c7ceeb28875215b797adda81abb16ccd68bce55452cb8594ed590d7ea8af993c031fa0cdce88738913efc7ed170d7fd2afbdb1e0e8c86f036f69fb75718e5a218d8dca5c52cc09e342e9647ade8aacd6736f9cddbf4733cbd0057ad457b150f36273d2997ae4a938e5332137e484d04b5caa3e4cd7de3cd522658622981817b35bf2da3977f6a49658c60762211b9c1839b262130c51711192b76a89ea278d8ca315eafa9656107a02fbcb355181fade6d7f0936ea37b6708770ef4189d01e996d51ecf57ce799f20be2c6325c4710b8810995a4153bb2ec47bddb0f6277a1b2e3c38f044d87fabbe7919ac13d9a613b5cb852c667c07ea20b65b8b923e3defa0ed176d1f56007fedc1ef0c81a644ea492a770548e9f7c3bfe8e9b3987f2a2a1f10b6c43279fd98dfe24d73ed9abfec815c911aca5929e15920e540b3110573b5d911d7b9dec9626a964b653af8a92b1dfb7ca5a77a66a31dcb51c22b441f1b3124ee326063e95bcf0daa2309972114e26a0bdaa640efa5e3a619388c1eceaf37b370af051c63a479f1964f149b7435b3a2ec5325f1b43852aa63b82fa5cf6a535d24d1791836a9c861434fb3e339f34f33bda7fc37d220a54e5dfc90b258aa316672da57da5c23794395bd5ff245268cf1ce8c5bf7def98c8056da9cf7acb79efea8588c629870e0a91cc720a0870917f281027db73fd1c1a5ab8879c24b5e14d0d9f532b5152b117485d7198b7de92c9f73f48d0076d1e29126818610364e0e65679ebae5456002e57e80affed9649805222d75273dddcc01a2ec9d2016935b9b88311d127c8ecb907d2a8547a036c4613ac03bc6f13039a276d6f19d9615a70bad051ac8d6df1dfa746c7e4210f6a6ff7a335f19bd37305fe594ae022be246dc76e7c22d7880e4df24eaa9641bf9aa13d17e3b8c0d9a9a19a8ee68f93e8c0e8f48b27fe58fe966e8f111a1da7237a04d2b00c5ec55f4aa200e89cac9f3701b8c5c555647ca6173d762db45deb70e74d54a40573ba7ae4ad1a6be3fe16e7be6ba95650cc5404386edf679ec56b93052c420d91ea374b29b5752bb6a9978523b75a22a67dfbfe0007d5901a09970313605644798ad1c1da320699d751b7414bf4b6ecac306a0968f0ef44c46f81bbf5fa8c0a9f176140adce09674a7291907a0d0f66605f5d2fc57e5adb6c54334cb5fe1c7efad25fd9d45261b0f69c2364123dbcf59173c46def229aef77d3587df3f1f11f6ef118c96c707ae0ceba86d2f065dc4acad5cb29c197ed3d32f6eefac3ed8f64141ec0ed2a1c920d8fbaed8d0d3bcea8a5d05ee7731e57ee3e711255c888b35ef2de689acb4b7ab1d55c1f5a45b8f7f8c63ae47240154441820ecddd5da2667029545edad078d10effa148eeec1e584505dbbdf21a0e021ba59b417211dd20dba57c1fd92ede9a5261ebbc10c8d779699f2544d3d13dfa6059ea48cc885f81c9f6239ff652f5e7ae9b3f943a297a8dfbc22f5d1966138ddc990ba4101068ed8cac2a2002c16e6e99143f2b0b9bd07004d0c8ae7f5b3f9a7b6152e3231fa22d2741e45c793a1036e277911a1499c38d6f9a4c3500f12cbfe349be7ac63e096d05c5a8d0d287019ab3507b3839645a7becbdc34728f7b46875d0bc40d0535288a3ad4ea3a7e9ebc6a70f346014b47c7091354be7bda621ef4a51f9be59c320d7d26514f352819a7bc6f807d27cd6835904fb803c5a6a72823296066b79ca4d5c3dea521e67883e7e9f31b4ccf24b1510e2a300ec6d18d2c77b954150d39019264c0dc6a567a3a49ce8ab4984126b165858da0e6aa647bdffa460091f2625ab9775b864848f75d226871cf9114a855e14e72e62c9b733c923ac0c86b07b877e2e936f7caa41b6807f61daafe3627bb9bf3e58f02e586190d5fd5e8fc22037edde11ef1803c824d05b4114f8d816ea69d4c3953dd25c811fb040ec0e942d84e00806fa7c1e0f42f7c68734f0ffb6baf4e609463fb249c376565f12d2273e33e0650af42f03e4f6f11bb2f8725cbaed52b8f8f2fa6e692644c7330b32812612c0fb6b738515bc1017d2e5d6756dc087701679562982e2851c79e39a5085d66ec792c7f6144998dae56350fd2cd96bdf96882703b57bd00f656ba19610bf90efca8924f163fe0679aad0472682ce6e1f5ec1dc1c5cbe18760b82cb69cd9f4c9b1e755b27329935e1c26fd5007f6354ef1d945da0ace6c4a4ca23b895ead66eecebce4e4b8d3daa2004d8134d45659c89dfb3247f2d7eb44fc8ac250d2c22053fac8564ba68d95d36fbf337d91aa09b07a1476d4733ebd5062f40b52b5dc560666c33caf73524255278ce4b808048bda802ebca2657858422c0c45f92e911101f98719223663283b8221f7a8e3dedc30ea3f535d3929e6f24816c8d05eba56c6d0a89fadd5f73a8895d273ec415571af9a03095b7a89606e8c00b2c94514babc9e475ec2236fc19e41fcfda6ed299ea20eaa4508b4d4d315d435b440d3dfd3cbe683a2565b76d65bbd61c6ad60635640d505bbe60d921943868e53240e4dc918ee73136e11fbf3fb2e1c28ad33c3a65cff42360db638d03b873f4f5db6bf92d924b5b7ebfbf146f031369556d52ed11840dde614f27ea468ce7806d64ae2905b5b01bc0eb14851258ecb1476e813e8d2b98055f63150f111b26a06340f840c6369f170fc1cbc361b73ca65dae4ca84abe7b43522db0ec57fe7614cad2310bc02bc6a65b46c0994c14a232af0f864b9cc9ded6ca9251be94149e2f6dfa506e15b0dcc5e44de76ac33f7fc28185edf28fc631de1f38bfabf4b839ae134d6842dc0af1a73b01d5b7d8feaf57402d9407f690bffdbc1bd470cf804a6ee2ac9600cdca85e5a87f9f22343278f653b659f8da9f77513d2fc41083ba730917ad672c483508cbdf43869531bc1b4ecbb7aeb554019560875063f2345c3cc55ceb5902a93d62bc1985150c67e92bc4f222b4c7c8b42a725f343b9f23d47eb4ff661ce3ccec0d22dfd54d3e63f16d3eb6f0330c3854878c381da93cfb1deba81b050dddc99b90e33c920c5af0d37afbb0e2a44d3fe3caecc7bca890683bdae54c4874bb95368cb99eef5b6b1c6cc699620047dd959feeeb1578b574e904b0d74fcb318b8b495f3381336bbee59017c60888aaeb65b7083a1d1839cc60e27034fdef5b4e58ec09fcc5545cd50e6d86852e938615eaeee6cbdd829769daa9c30eea294ea4178f125221124e5838e19fb4fd108a590f71bfbbc94b1dfe46b5af060c3f5bb655e519723e8c937c99d0d1b1dd2cf47215e8659e7377e98d7e01b747e31cf35a8f48878182be5c7dd6542c07342f75332383d1b33766c25669ab446fc2201fe18630fe4fd81691915af9f0d99af5ab80f12d37cb93b906e176cce69f7f9bccc48b2f95be7d47dce8efdce0768b474f63adcdbf01be901f001364d870d71cdbd1ef7b3f499c86c117938b953052af25963f9314ee08b6c9a1e803ed33fe00294d9345bbafd63a0dd7ddd5b60835c0f9beb7135ebea6a6328cca1c307b16f0d9612204de180be8db9b739d98dde33a87960cc43f6c1a8630b4d3748241576faf5641b18532129e2bd37e8cdc621e6074eb7df665dce472d0d27cc7010dbf4d7ea019ec479409a0a5d12dc678208bfa21db8c87b338aaee388824d37ef4ff356fc07d179f9090592fb27c2d58f7657724e9eb4f36439d673f1c0e20c30ea3ca30430db9797a32c688f698e2a198161c28fa70fd922b7fac27254bde0308870221e3b609e9171f1a4e389d821ba2472e5120c620801d1ee13a01352ca23d51d459e8910079d886d3ac86f93f29ca938be4949609ed9e8dc815e4fc024094a67f92f2724cc5e4c345f53d9345329424210c61a22ad1e3cd7f76f8f5c98dc11d43aec35a58068b40a30133504507f15dcb3e0954fcf195c4a47943d75e82d51667e62cdc898dce4b75f15d11aa0de451af3d34e630acaabad81314e83f541c3d4ffc0024cd29e7005031c672849d19965a38e467221654bc336d06c39dfb661fd7488ac78684888d07c336f5bb58ad98855b5aaf63e36d2337b30a5c4f3c3320a42b4c78fd915765dbcf67fdadd5b02f3e233fb4bd6532b540b4dfac37e8bdc771d28edf8a7fc0b80318c1062d8fd0357b7437dc2b986c8ef8a7cc3a54c9fecf3a78e0695da212cb6b5f10656123d66cd7078d6c72b3b14f493a06223d9efbfab36d6ad58459c5a51f6970eeecebeb9a41f0841fba08699dca276c0a89e4b23ff0f5978137d94f2b9a5866d5d63009085cb74c811969c52b6fb3149838b5ef0e299d2d7494469e2c85cc0ccf7c8ed5744bfe25bfe17786851527e9510ede0bf48aecd07aa1d082d4b8aff0ea9e4799ed370eb323738bd09d42dcfbd2b2ffa40a6fcb6ae9353a224d87dee0a45c6bde90a77d455f06e29f0ecdbc96bb780cb00d37dbad1c3495f60b4f1b318738b14a93a58f9932eeda85da36be4c2f0ebb850dadee3d2c0c517ee35b21d296146874a7f94d5f1692c32aaef09b4d9485127f15a53bf15f6bcc38c5bebb23e9834c3f75e424642faf914f8a0a776d31286fd7a0ad1a0536d5fce677c83fc2e8d3c5b51823bdee6877bfc971dc34b54ef1f562edcc35b68e08c12773ec02c4fe162c2be09111cbc80144f82055ab9d83881381dd6245584d0af1e098c7e6ac53c203596ae2ce33376232c456427ab81f10112545074e606285c63adc8a42cb2e93a3023d00ec8efb4c859e024ba1a5ba685f54dd8c0a590b2a0ecc739e763d30eaa45d6f48691057dadafed6b6dba64f2731823686c449dedcd53e14f02ade30c96c5e5f4a6cc1ddb8df50ce2e53f360db54ee9a9fa5b4665cc5dad60c0d20c0bc1841ef4682455f32610da25061e570918a785be07414e59b1b502262379108fd22aaf4610feb5532d8ef6078b9176325c67cd391209d51c0f7071b4962751b06e89f05c3ecdec2ac08a2273ca7ebfad1819d26eaa28d78e83877dc8a9d4ad2cec22ade520401e2267540102ba83d19b814eb6669718b196a2410538f7600fea75e8068e4efa1caf0bc3139c2de18d9e2bdfe0cd85da3b79127e7d3cfb36994fafbab77459b6e2a7ae"}, {0x48, 0x113, 0x1, "2a86db6d49ba1285aa2878bfa6167b184d88b6264ef2a2c36b31e65f6c9a2770c65ddb49e68f78492c39b12cdfcb5de34ac8"}, {0xd0, 0x10a, 0x6, "d1ec550e93c2ad763ae3bb4097e1f3e81a86532159942c937e22d632db307efe3c06022a1aaa17b7a8964ae9571310641ec602b1fc935c32bd83a2a2def08e30905ad3fd2d01e1c2ffb38d43e7baa304014606a12633a537c3c56d14dd9859183c69bf63cf3f108eb241afc0d591f3e00534629867449c9203c02e77877d831cff54de7d01a53537dae5f3afedb4f91c065e78adf8acda12abaa9ae1adafca7396e7eff3d82ea1677c7e733f97985c6ecafa7c621bac6c61b776a99b4188"}, {0x80, 0x103, 0x40, "b92634007b8d463713f266414ee607f0bccbc06d3f8260faf8c3ec9f6ed1596545587f212d306d079403495453f9d4fe752cf49ff5ad2bb23f341bd1c951f0a01813fe49608080f8020f261c5cb1623e94c3e0fbb23d9a6e10d42ce1ff24df336bea0f193e048ca882dcf6b0acaf"}, {0x48, 0x107, 0x0, "ea6a1e41304aff1065f2a48bd49ac7563fc8a3f91ebd50f4c0702926f1b1b95030af9c82790b042172ced4b0a564dac087b4ccf39504"}], 0x11f0, 0x4000081}, 0x1}, {{&(0x7f000000c240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x3, 0x0, 0x3, 0x1}}, 0x80, &(0x7f000000c400)=[{&(0x7f000000c2c0)="d84c31a61bcb2806a1e60a15580a87e3cceb0d4483fae43ff3724515367c12db", 0x20}, {&(0x7f000000c300)="b7bbede4fdc3bb28ef844d29c785c959fe59007da932c204b7cd4f6cd6e3fe513a998b81642958f4ac03bbcf99e675d1cf2e8f73e67cf369efd68ffdda6df6a87587acf99e9658633dae34d1b556324250a3381eabf9a7498a232bfc40848bec796ab64b2e260eae7a4b2563f942a94dbc0e87f97cf5d0cde290c4a4e2a393cdb5e684e4b036b599bf3c49a5871d64d38a517059a10b3557521c0f0c370d728a43c915f82edb534dfe52aee26adceba25ee3ab3e9afeac73e7d75906c4fa5fb6b4fddb", 0xc3}], 0x2, &(0x7f000000c440)=[{0xd8, 0x10b, 0x1, "2731266fc25a3bf2adc3b5df832d727f0f53e5653a45bb8f2ffae7d1ed3ce5a183a78c4134cd0cd7c77677fdf55e3ee97c3430a9d787ba13b67bf0c93135d1f0585568ecf2c8c9f173a9dde8a153883f33c205d86bab2743146fb38140e654c6d6d680dc010700d769ef8d097185c91649917d3b8f47e9901735f13ffc47a3b7047178371e1bb3c5cb59dfcbf46be5a8bd739036ab28db77b914890d8425f403712b5b4bc31b9186a52fdcaab82cf8fd8cfda1b6e2856ea9e970c290bb76e417bf65"}, {0x58, 0x11f, 0x24, "812f3cb3aeee65eb300a8fb67d1c0c3a538968a8496319ea6d8c02df566447d29b4f0e7911971db503855fda313dae657df8e447db61dfd8002c19c4f874ad8acb2b44"}, {0xa0, 0x1, 0x4, "3d7da22fabd55f713f662e5d04aa8d36c7fd6d55509a2145e89028ab8e6a60fbed0bf80a1dddc39f1b407d68507b7edc205fd515e656c3755732a6ecae2808131bc0b4f1f3c488ce8dc744928c44b3fd22062c12077c9ca72a0da1be7304e613f869960156d501357386dc035d4b27bc0e23f77bbc2c661c1cde6fedbade2cf4bbf1af01bbcd91b3545a9d7b70e1d97a"}, {0x68, 0x11e, 0xdd, "32977952136ece5b2b3029c9016112d946518d96e4dac034ed440075bb562772ad2e127298dad99425675a5fa795ae7654358cf702a8f8b4be3fb4d66f72c765b8b166d8990e958faad607f50667eb979349"}, {0x28, 0x11f, 0x0, "1678983c76bf4b15d881151d9b9ece1e83"}, {0x90, 0x19f, 0x101, "5b565970a1a3e80fb4344660dfe73d9c9366c367bfe86bafbf1ab91319029c1eae79ac9c49e287073b56191db14adf69a28eab35869acf07d758ffcd8a1df73e7a5e31f0e2c48ad39e48b06ab402d5183671fa4452e2e5ca32ffac89f0873c58f4267c5d8dff7c4ce3a91f2fe60d5218caa27f7f7cfb24710693393c"}, {0xe0, 0x10e, 0x4, "21dec9d688c7edcd00aed9095ba41d43685cff4c97ba78125a199704184399304ee94b396c0b5fb43b86b0063da199f71a554e6acad09036d661a93883d85a81fb73d45400825b455c14a1a31071de5fd5250c36458d5c769ef0d8ad284fc0e7d4943614223ba2c7bc461572d8f8b867e2595ab151d04a8c3309b45e44aa77d0d48543b6db1c35bbb80528085e35afd5e876845ec2ad57f7fd9c4022f240f5a46d4ee8a8a3629475f9da9c4ac83da510f76d533280832c6badadb554491ee9b229c97bdd36c93e34b97afbe90894"}], 0x3d0, 0xc0}, 0x1fd8}, {{&(0x7f000000c840)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f000000cac0)=[{&(0x7f000000c8c0)="72029dbc621463a3a61e76618cfa0140d3b69a4031ed18368e62c604202bfb51e2f045c6fa34e6467230f1fb6fbf21deef6e9d86d96ab2d54ecc2efeef5e76e22bd551bd27c9a5789f88283d2328408e32325d8ba61b101cfb7e24ebd351d28b11fe3463745020993acdaba02fd766d43b8ac3f2cda48137676f575ed8b1c91fffb5e5a5c294c9245823b15d1de3b8c2a0ea6a5042bced7f19ac30f221e1800893d0a17a79cd3901f58ff3a42e806ae0bac50e48e37e052f35caa35d5fe934d36cf6feca76ea694d256d5aa68b7173d8c08789", 0xd3}, {&(0x7f000000c9c0)="788370ce1e514aef0162a84ffde734a2563cefc98e6958ee35d6524278369cd65fcd0eb4216e80377941c946fe2bd0bbfaac1d6109b9ca668b9e06800f4c80446a50b9bcc3d0c140f69c8fec083c351039c471355cede3fb5fa55983d2d20950ced32ff7dce4f3d187f592d834c07f6ca39cb282d7bcb53a47529d5f8862503974ac4e97cf6f35903bf3e30eb2af59b01822a355385abd5ae080c4aed0cc55423e27a861289bab4e08e0c27958cd2c4ecdf118f2df82b2776fb5e26299e6348e0ece3530b7d7ece4cdeaf5643ae285a59127b84fa9e20653cb1a03e1ee529ced4d21398351d550b9d0", 0xe9}], 0x2, &(0x7f000000cb00)=[{0x58, 0x112, 0xffff, "414d37965c232cded35eadfe8c89c73416eda1e44bd179ef6c144329d44118ab8454a35fa652c6cebbb9e50c170cfe4a225d163d3487f14d1f135bbd90bc0c196c"}, {0xb8, 0x129, 0x4, "507ff67eb2a503d66644252043ee979cd13ce92f7d6ef64ae6aed5ba65ff8b17fb3b7390a65ef748adee7cc022222b3d93bd91d7c2a1340a8cfec0840b6c6f4b91514aa12aa5c71bc59ffc45c5659c18536d0e30fb30917cc699a9f2e047c84eb1061b3d7ae8553262b5f397c78a288599d852240a6a6fe7d03016dfa69701a23fe521de7210ee51e1b7b3560efd34866dbe58f5fa15245b1d28c1c589a0b5ad233674"}], 0x110}, 0x7fff}], 0xa, 0x20000000) [ 196.728684] FAULT_INJECTION: forcing a failure. [ 196.728684] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.740782] CPU: 0 PID: 13709 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 196.747756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.757158] Call Trace: [ 196.759828] dump_stack+0x185/0x1d0 [ 196.763524] should_fail+0x87b/0xab0 [ 196.767320] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 196.772156] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 196.777595] ? is_bpf_text_address+0xb4/0x4b0 [ 196.782223] ? __is_insn_slot_addr+0x198/0x1c0 [ 196.786900] ? kernel_text_address+0x34d/0x3a0 [ 196.791564] ? __kernel_text_address+0x34/0xe0 [ 196.796296] ? __save_stack_trace+0x90d/0xb00 [ 196.800890] alloc_pages_current+0x6b5/0x970 [ 196.805444] __page_cache_alloc+0x95/0x320 [ 196.809768] __do_page_cache_readahead+0x401/0xf20 [ 196.814767] ? kmsan_set_origin_inline+0x6b/0x120 [ 196.819664] ondemand_readahead+0xc6a/0x1210 [ 196.824128] ? generic_file_read_iter+0xb43/0x4440 [ 196.829111] page_cache_sync_readahead+0x1e6/0x740 [ 196.834096] generic_file_read_iter+0xc3c/0x4440 [ 196.838997] blkdev_read_iter+0x20d/0x280 [ 196.843193] ? blkdev_write_iter+0x5f0/0x5f0 [ 196.847622] generic_file_splice_read+0x5d2/0x900 [ 196.852530] ? splice_shrink_spd+0x100/0x100 [ 196.856958] splice_direct_to_actor+0x4c6/0x1040 [ 196.861762] ? do_splice_direct+0x540/0x540 [ 196.866127] ? security_file_permission+0x28f/0x4b0 [ 196.871173] ? rw_verify_area+0x35e/0x580 [ 196.875367] do_splice_direct+0x335/0x540 [ 196.879621] do_sendfile+0x1067/0x1e40 [ 196.883577] SYSC_sendfile64+0x1b3/0x300 [ 196.887692] SyS_sendfile64+0x64/0x90 [ 196.891538] do_syscall_64+0x309/0x430 [ 196.895450] ? SYSC_sendfile+0x320/0x320 [ 196.899556] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 196.904770] RIP: 0033:0x455979 [ 196.907958] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 196.915679] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 196.922954] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 196.930233] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 196.937515] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 196.944805] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000033 2018/05/07 22:45:00 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/07 22:45:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x1021000) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x8}) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x3d) 2018/05/07 22:45:00 executing program 5 (fault-call:5 fault-nth:52): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:00 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) socketpair(0x10, 0x80803, 0x81, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(r2, &(0x7f00000001c0)='./file0\x00', 0x28) r4 = socket(0xf, 0x800, 0x100) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000040)=0xfffffffffffffff9, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000200)={'team_slave_1\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2008000e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b74ec2e52bec2ed1e3048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6b555d5173dcf71f1cc2169ced6de021a0b39830df3ff39d98dafb63587fde7965d577c76bd46f592cfd71a75b7c359025c6002bf04f1964c4934b42417a2d618b9638bb0691a038f82aa83"], &(0x7f0000000000)) 2018/05/07 22:45:00 executing program 7 (fault-call:1 fault-nth:3): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) 2018/05/07 22:45:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:00 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x2) flock(r0, 0xa) close(r1) tee(r1, r0, 0x34, 0xfffffffffffffffc) fcntl$setsig(r1, 0xa, 0x30) flistxattr(r0, &(0x7f0000000040)=""/26, 0x1a) [ 197.083552] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 197.091416] FAULT_INJECTION: forcing a failure. [ 197.091416] name failslab, interval 1, probability 0, space 0, times 0 [ 197.102871] CPU: 1 PID: 13730 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 197.109847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.119252] Call Trace: [ 197.121916] dump_stack+0x185/0x1d0 [ 197.125624] should_fail+0x87b/0xab0 [ 197.129415] should_failslab+0x279/0x2a0 2018/05/07 22:45:01 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) [ 197.133557] __kmalloc+0xc2/0x350 [ 197.137080] ? lwtunnel_state_alloc+0x52/0x60 [ 197.141649] lwtunnel_state_alloc+0x52/0x60 [ 197.146036] bpf_build_state+0x2b7/0x14a0 [ 197.150275] ? lwtunnel_input+0x2d0/0x2d0 [ 197.154506] lwtunnel_build_state+0x2e1/0x560 [ 197.159085] ip6_route_info_create+0x1859/0x4d00 [ 197.163965] ? rtm_to_fib6_config+0x1642/0x1b60 [ 197.168772] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 197.174261] ? rtm_to_fib6_config+0x19c8/0x1b60 [ 197.179017] ? kmsan_set_origin_inline+0x6b/0x120 [ 197.183950] ip6_route_add+0xa2/0x300 [ 197.187870] ? rtnetlink_rcv_msg+0xa32/0x1560 [ 197.192502] ? rtnetlink_rcv_msg+0xa32/0x1560 [ 197.197123] inet6_rtm_newroute+0x37e/0x27a0 [ 197.201692] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 197.207276] ? kmsan_set_origin_inline+0x6b/0x120 [ 197.212870] ? __msan_poison_alloca+0x15c/0x1d0 [ 197.217672] ? _cond_resched+0x3c/0xd0 [ 197.221645] ? rcu_all_qs+0x32/0x1f0 [ 197.225428] ? _cond_resched+0x3c/0xd0 [ 197.229397] ? rcu_all_qs+0x32/0x1f0 2018/05/07 22:45:01 executing program 0: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000005a00)='net/route\x00') [ 197.233188] ? _cond_resched+0x3c/0xd0 [ 197.237194] ? ipv6_route_sysctl_init+0x5e0/0x5e0 [ 197.242123] rtnetlink_rcv_msg+0xa32/0x1560 [ 197.246584] ? SyS_sendmsg+0x54/0x80 [ 197.250430] ? netlink_sendmsg+0x9a6/0x1310 [ 197.254878] ? ___sys_sendmsg+0xec0/0x1310 [ 197.259229] ? SYSC_sendmsg+0x2a3/0x3d0 [ 197.263319] ? SyS_sendmsg+0x54/0x80 [ 197.267143] ? do_syscall_64+0x309/0x430 [ 197.271322] ? kmsan_set_origin_inline+0x6b/0x120 [ 197.276282] ? __msan_poison_alloca+0x15c/0x1d0 sendmmsg$nfc_llcp(r1, &(0x7f0000005fc0)=[{&(0x7f0000000680)={0x27, 0x1, 0x0, 0x4, 0x2, 0xe1, "30a649dc454d593c60412052e8c7c427b2b0038749c4f421603592e134e4be5ee9c6944a22a8b3dc661d601057504fd0db79012f894905820342d2c9f27020", 0x29}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000000)="b7513b94c65c4211a91bf319ec8c5e674118465bfb582ad31a3dbf3cc528221c", 0x20}], 0x1, &(0x7f0000000740)={0x100, 0x3a, 0xaf7, "4388824fb892e4de07fd150160667803d4d4d452c2fcbd99f786fc4aa01f5952075bdf0257c0d658d63a046b6db65f8d87402186337c56ba750591143c94a59a7ac21391c85ad8447d07a5275fec0293cc4b705b75b955f13dbb8f87d8b6127b914418e2ceae3c52be01736680fbecf6c5a7dc12f331dcb9ab93f613a735d44cde02289cd4a0691a66b7a326a78e18c033eb455fe509f59c8d290958d9248ba0961aba24950fc73088104d3bfbab8e7833556959a295d751f46405c31768732c612322e9c0c4caea5e48d59720e15bd1acde445f74efbfe9fb64175220fe608b4030ae9633d94b6090b05d"}, 0x100, 0x80}, {&(0x7f0000000840)={0x27, 0x0, 0x1, 0x4, 0x7ff, 0x6, "3a6542b657d55bfe6a63306929694d3fd2fa6c279b08c781534b6ccaa7b27044877f0e46844512a1797935fb9dd2092d135e59e6ba22b911cd713862e0a1e7", 0x19}, 0x60, &(0x7f00000008c0), 0x0, &(0x7f0000000900)={0x1010, 0x0, 0x1, "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"}, 0x1010, 0x8000}, {&(0x7f0000001940)={0x27, 0x0, 0x0, 0x5, 0x3, 0x10000, "0cd8a0831d0999d403034e9c3752e4ff6d3b9fb25170145a9a75526ec05733fd07b8e9e832c48ebc662d1477d406597bf6eede2ef0df9ab8c152f09bbe478d", 0x11}, 0x60, &(0x7f0000002f00)=[{&(0x7f00000019c0)="8dd9a09529c0aadbbbc22427e15cc36baab60824e11c372d1dd37c693da5335620be6d513d925f7b6912525fb4c629af14f6bd12ca09014fb07b6ba6ddf774f32575ce19be9347fd42e32284eb1cd1e47cab421bfbdf7cb1a1d883dbe79901446268ba32d9f6332cfecd43d503a8aebbc75b24c484263e80bcd2dda1c3ca17e11265ec1d087112ab9adb8ecb3962096748d00326000fbeb85fca64509b18a6d7d43afa23cabd7949cab91a6e1918fedd53b22d28b8e116f3c5e4b2a6e30f", 0xbe}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="3bea102ff02f35ad7a457efec2f9c7beae563a0bb31c061d5b15989431697656f57164580db1e5ce57945097a4059f019568d68901a1ea9a1c8999dc64cb242375b25910e7c12c73892279a67171da7fcb88fd9080fe8f242b6ee72c1c674171c9dc10716a7b91bc9e22", 0x6a}, {&(0x7f0000002b00)="4193241acf31bd994f2c281d83", 0xd}, {&(0x7f0000002b40)="aca699d4fd83cf91841dd04d66880954e2467d0e4ab0376d2ca32525f247be66d13b3902cc1c10d0dc19c729e06cd5efd34141bbb219ed02f7a50e22966ce2d43fe118e537f6b5e40aa00bb5f96c8c7a7b5ac9d4dc6cba4f28702c953752cbdc6628259b07e37478894e088cde64a936472df284bdb03e532e47a2f38026879ff17f3cd2fe0aa5e5ef0a6f1920f57521cfb737bba0343d5990a31bc03726bdfcb937dab9fb8d8af15451ed84af66eeb2df6a18e35ff747b3555bf285248708c722a280216538c57e3cfcfa836a35fe7a4823eb0fe1cb6162f4d75ebd8761a854f840f401f3fba276e2f6f26bb5b3b4e00e4050197d5399", 0xf7}, {&(0x7f0000002c40)="0d70ed9649f750be3b6eda8c32e412a8f395895af8e356e2f73f84f09f159eb6ee0649e97f391806c153a70a7cb2e17c68c2482da33b78286b9ad62d90cb0be1b5ae62260b45ab67dfdf952c3ceb9098567562f1223a1f15599a5ba5a08dd591f6f7e81d06348efc984964dad5cf8f95d0b311a49bd46a3d194af467a76acfe84de3a54c8978358be13cd6f7ab9d41aa7e03df49ba3d57554a958bdc036b993da0ec91d16a290df2540ee4ccc9fca153b656da64717614fa600ad4ef964b", 0xbe}, {&(0x7f0000002d00)="0589377c51dafe9c0825efe6fa5b3db794ea07da2b220f5d8dc62bb8450d01413c6580b4d2296846f3a5554acbdb9053240d0b37cddfa716f107", 0x3a}, {&(0x7f0000002d40)="4936ae2afefc0fc7cb4b481177b7a60eeeb8f10b6ff23e442a998ef4c3da6f70f4086e1349dd2fa5e391c0baad1b62f9a3f92686781b7ad30cf9df8a789bd273937a43617bf8e7739b8b67958fac0ba00aa03d765d466b0049b453ecfb04fa655dfa85e0c57f92e62d19e6c6ae2e98df743211f261445e70275a17d579a694151143fb32bbf6a5596202a5a5771c1710787847e8b076c31222794b76cc9deef0e5ad95e7b8a1994c2b8e7d386e2fcd81", 0xb0}, {&(0x7f0000002e00)="76394956e5fe5de4a467bb28ea50871825127f4c8e2c304ddd3d1ffc11b7640ed5af4391679c2587212b8e8de29f254e8a855a876a2e61ca148f9a5fc5355e2afc0cb15686762af3f81f7dae468988246c336ee54432f4c999def0aa03403a3b8a001783ac76b57d2bb22a5a169e56a20d4cfdf516c64cf1bc3075e540a83573446a0ecd4865a35ddae3a6bcfc2e5a06eefde436a3db7b60f11f7f798ece160a5c3953e6ad9a277c99a8e5a82a5f39085f4ae64adcb4f799738f5ad6912c4a70a279754fd98bc983fbdd05321e38f512e900f8ab2ddea94061d82920b110c7f2bf63f503234994", 0xe7}], 0x9, &(0x7f0000002fc0)={0x1010, 0x103, 0x0, "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"}, 0x1010, 0x4000000}, {&(0x7f0000004000)={0x27, 0x1, 0x2, 0x2, 0x5, 0x62c, "9b61fcc8be9582372ddb9e2f69491232419aa0b6f43c7a1e67ccfb28301598f6a604786f60ae6753272163fd81906c6649068e31e907105e3946de68f221e2", 0x2d}, 0x60, &(0x7f0000004280)=[{&(0x7f0000004080)="5e34a29843dee6d8fca12c3bc7f8c0980b435b27ed523e65143eb3ba3c639592bb144bc453c8c12bea31326c3646f7a5bfe357b85152ebf3f21159991c0aa47ee045db9e117d81022fd348bd83080b46565bfe505548ece718a789e3ea8934d4ba057437201a1b6d62a49214727e2659bdaff742f83389a21165e77e055c5c519dda80d323094002fb0774bc9b733d370e0d04418065e799875cc9e1b97f49299193c2", 0xa3}, {&(0x7f0000004140)="d0bc1e442ca24c4f160485c9d59e7bd8c7cfb708c67bb6fb4a4dc8e7cbbd62e9aa0af21de4c4428e9bcf7f682db2cfb2ca4cf04e3ea050449f2284d3262559df8b8449f1f584827adf3fed98135db8d058139a97", 0x54}, {&(0x7f00000041c0)="79eb0bd3120ba21aef8e945047bfab9f49f0e0937c94397e1661997e1b4a828e2334fed4ac96a6132877486fe3a92f17ead9fce748f5123204ab1433df8cb1d02c3e491b9f77746533d76ddce38d37d14caef5914d5804ebc51e75e7ddcdfd5d87aa06b7cde19ebc78a464e0485ad136de4e1fdfd31645cd658857aa2bb6d5d7dd36719f66d2c3206d0badff81beabb889fbfbbfb6d00ff3b48b8dbb11fee780bc71494fc9e34691eba5d2bfcd004a1f530f55ff97aaed", 0xb7}], 0x3, &(0x7f00000042c0)={0x68, 0x19f, 0xc84, "1f780cd98ca135f848baf5192fccfd1a7083ca47d93937553e2846d2be71ecfdbe9930cb342ad3e09163d4feefc079d92d83365de967dd3bb273b565745a1d3745e338b7683ceed5e190cb702af64c107d412181"}, 0x68, 0x20000040}, {&(0x7f0000004340)={0x27, 0x1, 0x0, 0x1, 0x3ff, 0x9, "4677a39e6af41ac11075b8e18a788ffa08699547a8873a78cc9fe5152bcf99f082fb9d2fa3054ee37ff93925806b9fc2103dc6aacbe3c9f4860e8c7241e4b1", 0x18}, 0x60, &(0x7f00000057c0)=[{&(0x7f00000043c0)="5de8410e242e165f49297b71c0f6a0f1921745d5949f79a0fbabad05310d90eae547a504c57c90a624e197e73391bad775892e0add4429b99d1e2495874927595091c8b07341708fade9c4388efe5912173c9e7e6835dd3f0f791cdefe5a31c7058e2d1e3e851148445a7fa9acba58f849c79f53af155ebc67a386b8a5bb0e04a67b79d24d626f30b3da2e4b7c342b62e4b2fbdf82", 0x95}, {&(0x7f0000004480)="24b9924379757b1d1431d4bfcfbd509d245e5ece355b9593825d718f04a865209ef6fa209b37a2673eded68c595e7dee", 0x30}, {&(0x7f00000044c0)="a33073f77d8eb2d5c8efa3ed5d8a9b9d235923dcf9cff9246ce9d6f5be4b2d290012fec8212198660d1d6d235417356924653df23bc673249df9656e282da7ad1a66b43560290f462e14805740cd8dd3ae5c52de9cda2e296463f3ca26", 0x5d}, {&(0x7f0000004540)="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", 0x1000}, {&(0x7f0000005540)="4138da67cfa13da4add5f921dc0b5b68460f10a0b831341bb8a704ddf947ccf7cff71a2fe82e3761d5574fbeb994a09b36d5901205cb5cc858a1f4317cc6", 0x3e}, {&(0x7f0000005580)="d172d55bae821015572cdddcd2ca00b8b8ec9cf1ef41d3f7874e2a0a1e2e646a1bd7828e19c8b5dda6159fd422332b13d4dac8a7a9a69527994677aa04573367b4202dcbb6b0b0cc939333db983fe0c72002e598a8651b2b1329c23c67b71e97c31c9fc8ad1befc109289c6cd43d2e35704cf3046d", 0x75}, {&(0x7f0000005600)="948016a4fef0b3cf459030adc5e7de6d941eb9d47860eed004aa2f1525ce1f137d64635b0c97aea6d87b8c9e9fb2ffe8583d8085e6ea8ca98b585fc672a4070eda5cd4768133a82c235f57297c9dd2770ad310678d4c7011b3412a39a6760b14fbbe591d4e88c48653b6d84d572e6af168f137f66a17307dcd90a87f0f3e5965b4b5e558041510f2839a06fc1f60390b41f049", 0x93}, {&(0x7f00000056c0)="2f9a9fdd1a0975e2fe276f73e3b563c469ce154bdb11d8ed98559d5e606bd8bf09a858c58c3e65afeb32f15d1f77d0cd840761bd68474922d67ed557fc99f9e9e5c701c494fa47646589b4dfefdbf8458b45efb600f75945106418b7b6c190101b388151019cfd5bc46105b3a6f43035b276c098e80365cfc07b3615690b85e44d9275baae147d6046fae1080f4917d7233cce8816ca76cd6ade741219db1977a4f63e36686c7f030f0d228cd0a63e2ab9baa22651af50778d82fce993e8669baf9c0d8c9b3ca2bdd304ab99ceb3bb1f934a37200aff06046d8262123ef285d31416c1577d82f309f1", 0xe9}], 0x8, &(0x7f0000005840)={0xd8, 0x10b, 0xac0, "41b6c25ee66055c7b3a786f61bc493657a461a074d0697195bf6f885d9e116f47144833bcc1d49dcd63fd0c4365b5bebb1911fcc7055056448d106d59f28bda66e4ddd2294c6b46e36896124a39893f8594eee33462df9f0ca75afc83cd2376955f5e6759f0b0cccb7cb0f8cfea7a29ce94986e35ba005e0cbaf3f7fa39d28832b17247a3eacc946c95269dd899572b0aa0f7656a3d05ce0b68a3c80fa29dbdce03310f6c7749c4324b0170404ef8afc621e33860a883cdb17802ec28e025208342d"}, 0xd8, 0x4000000}, {&(0x7f0000005940)={0x27, 0x0, 0x2, 0x7, 0x7, 0x9, "a32c1c0e634ee24f2025d42481ffc6769afe1d81baef3ce31b21a609d97fb185560b30c5a236222da934e6bed0384334cb49e74fb21a7b1bbde11819911221", 0x12}, 0x60, &(0x7f0000005b80)=[{&(0x7f00000059c0)="4f9ae74f98368a76662b5e", 0xb}, {&(0x7f0000005a00)}, {&(0x7f0000005a40)="34a843e0fb1135628dfccf600284a32fd03db6aca743d749ab0d734b9a54a83d9e8f18ba88f9743677a4daf9104fa656dcac4c531d56e982c16f91219925d8dab97b8a819f2342bb0bde9fd558974430dc8d33174a15d75e249a134d5aca9af1dcbbd2808d4bada06956c99c523d458e24234045bdc5d5b7509588b0f606ba04e7e44173824b3dc04acdec32b9b0148f9e5063f88f24b27520e4a2c588287fd816d9157439a1357f88861c34eac43991b239a948857c49a8136b7a5059ddec65acc5ed90b3989319a18f11a313c0f157a9631f30b42b665057c380c5eb68c988d17e21c168babacb2b9b67f884", 0xed}, {&(0x7f0000005b40)="b5b8be7bb51dc42be0d5d21e3af29e2a431a12540769b2ab757dfc3a3f75c5ae956f27b235076f160587d335c80bcc5286f211f3780a8da32d115fb4f942", 0x3e}], 0x4, 0x0, 0x0, 0x20000040}, {&(0x7f0000005bc0)={0x27, 0x0, 0x1, 0x7, 0x40, 0x2, "0f78472054b0a6abf7c002d64adb103adedc8ccd5a247572fd622dea360ac0b4d479a79133cc79648f107cf8791927bb5cd1e2840860983cf4ae5da1d02ec7", 0x3b}, 0x60, &(0x7f0000005e80)=[{&(0x7f0000005c40)="5d4e3d12ca678872ced17cbce9360ba212bef288c0e88bcadd7192603f1158b4e4ee146d926cba3e4cf1e5ec381c91545dcc77610fe42016bd21d0f4b9104066a1c24460de913e2f83571abc6ad6e8acdb7b3cce853c8ce17e37ba0312f3b67766fbfafeba4917f6b68e7e8401ee2d9d4180796340e778886979210f7c1abcfa640292b190cebb0e87219b5c9303fa6b42ee802f26f7b24943d0d8f85a4603ab5c3134fa8531efc5d3f7160bf67a01deb7", 0xb1}, {&(0x7f0000005d00)="0ce6354068c574ea998af6b4b9fdbdb5dc094b07bc83720544efb4b22a4e27903f8df683541127889940a6bfca1a3b01bd03f092ba280af04b6b2ddc", 0x3c}, {&(0x7f0000005d40)="e6ec2844cc367ea5df9252", 0xb}, {&(0x7f0000005d80)}, {&(0x7f0000005dc0)="14ce68d82c52cdea9999f62141ebd4c3f68d2acb46e1b19e4a2cf516cf3790d63d039bae5a4176d6787ddae82adb6396f9731237add8297f1403427b74e812980f62b45ca283666c547e6b9de1ebc9f07a316194c3d72063e2f977fe5e305e112cb39116e3fa762d17fec0411f47dd7bb0f7ae33a802ce943f5fa1eafe51470a89a62c3f51d09a111c821ab0201f2e7cebbcabf6d0c182e774d7785fdd58ee6334cbc0fe50e85f6d030ffc746053ca61ea12e9f3753a4eb3f0b4cce929", 0xbd}], 0x5, &(0x7f0000005f00)={0xb0, 0x1, 0x3, "f3133af2e7d3c96b7a67932ddd8e3e5277d289f9d879b8c07e7dd519a133060111f73f39e74d39e875e357df1a9336b268ba345ac3e53facc6f9c7313a1a145b20f2d73e2a01770ecb3e4794d3e4d6a0dd63e1ba4ad2e796cc83f86474a6561c8f7ad7f9503a45a98e396beed1b91bf54a501f0e0eb5a340f2a6756b8b50d4948651f6874adb0d2406476c03858a6ada45579820811a0d9d263fb8442bfc"}, 0xb0}], 0x7, 0x40044) pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) io_submit(0x0, 0x7, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10001, r1, &(0x7f0000000040)="14ee2c5273ccadd1ca90b1adff49f1906d44495bb01baa6913395cc48b0e9277c3a53ca34a8632883c1bb7bf0b2d006de815e383fb4e0730ca8ec4d9", 0x3c, 0x2, 0x0, 0x0, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f00000000c0)="c5aaf2504b59c8d9b251496dce719fb9ecb977d1e0fc073f908fb7eb6589f764b552f3c2ed9a55508c31655875e819c8e576b7c99f63572adaaa430e31911ddad538c9284cfb37c81a5b0f89305e4320018b1970b64b510ba2cbc830", 0x5c, 0x0, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f0000000180)="01c99639a95493959ddd4b510ac59a2c6ee06ebbc1317bf9a8fd6d91f8e8732e4ab00d36a0431ec13044825c82a26ec1ff56d78450795226adda61964411cf62cd245373f58be9aa414f8f6c28ab7346e632317a0cbfc5a4487fb75f7679b0ee9704016b06b414b8f52e108ac5ca4f0989d50ac6d580dd2bea30ee0c924736fa5186", 0x82, 0x1, 0x0, 0x0, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x631e, r1, &(0x7f0000000280)="0990c5a982d2fabd25f0bd8bba24c62478f7f656d8aa77ee2f", 0x19, 0x6, 0x0, 0x1, r1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000340)="12fef43faa4ef674c137e67ca57f3f5fb00344cc023cafcf2398e0a76f62ecaad660b7f85c5e9500f984da22447f72aa1a6ff315ffd52cf5c97695f85590070582dd1cdb833735c88448bf06134860f1e941d99b6a2f7c0e6eacfcc95c0ad1c47abeb14e3a5d1a6f55462772a7a7faac28577c2d22c364664e4c245ff0970b29f04cdaacff00ebf66ad2dd9690d5ebfc58ff576628a995ba961caf11e5201f37c68c9bf34c2361472b8f549b3db0016d3ab10001d59dffb19c7fae2bb96d1d94e75f723765758e7c47b02a3e2863333b5006249932d5275f1fa6b2eb658093aba517223c6c280e9e08ab2345c8d6dc862fa5f8633eed8d", 0xf7, 0x0, 0x0, 0x0, r1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xfd9, r1, &(0x7f0000000480)="2797d08ab979dcf71d4ca97e41c351cc60e734cda6dea048881449fb8af1e990743841604570bf8047642da2dee23e7a6e0d5aa769da07f786c6456759a222953edc71adec2009f3f679b8ad6db2ccfd55767b880fccca531a038ec5ead2dce1c2e8c6c5f0a95f14999e81ac13ba86d6155a8d7933734da34339aa4089ff6fbae1e1e0b197856e37d4e46bc63590c4ac7f771907abf4d64c0083c4a565ecbf991d9a33a3dcfcb157d859ee", 0xab, 0x0, 0x0, 0x1, r1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000580)="cbace1e725c3ee32a3c4f70c5b93af263ed82ec3b2c0a15156529ba6d5392fce6e05c20ed915681915e76f5b02ce2b9eae185dea4f84ea2e951e883d596e7351378de3ed195f0adbe20db0d91b7f225eca1709cf6efe4f", 0x57, 0x3, 0x0, 0x1, r1}]) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000008c0)={0x8, 0x800}) [ 197.281075] ? should_failslab+0x279/0x2a0 [ 197.285442] ? kmsan_set_origin_inline+0x6b/0x120 [ 197.290400] ? kmsan_set_origin+0x9e/0x160 [ 197.294730] netlink_rcv_skb+0x378/0x600 [ 197.298905] ? rtnetlink_bind+0x120/0x120 [ 197.303146] rtnetlink_rcv+0x50/0x60 [ 197.306969] netlink_unicast+0x166b/0x1740 [ 197.311305] ? rtnetlink_net_exit+0xa0/0xa0 [ 197.315717] netlink_sendmsg+0x1048/0x1310 [ 197.320087] ? netlink_getsockopt+0xc80/0xc80 [ 197.324713] ___sys_sendmsg+0xec0/0x1310 [ 197.328944] ? __fdget+0x4e/0x60 2018/05/07 22:45:01 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4400, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/231) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r4 = msgget$private(0x0, 0x8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)=0x0) r10 = gettid() msgctl$IPC_SET(r4, 0x1, &(0x7f0000000500)={{0x5, r5, r6, r7, r8, 0x4, 0x2af0924b}, 0xffff, 0xe55, 0x2, 0x86, 0x100000001, 0x1647, r9, r10}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) listen(r1, 0x0) listen(r3, 0x0) [ 197.332439] ? __fget_light+0x56/0x710 [ 197.336445] ? __fdget+0x4e/0x60 [ 197.339935] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 197.345416] ? __fget_light+0x6b9/0x710 [ 197.349516] SYSC_sendmsg+0x2a3/0x3d0 [ 197.353474] SyS_sendmsg+0x54/0x80 [ 197.357161] do_syscall_64+0x309/0x430 [ 197.361150] ? ___sys_sendmsg+0x1310/0x1310 [ 197.365562] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 197.370818] RIP: 0033:0x455979 [ 197.374050] RSP: 002b:00007f39c9eb8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.381832] RAX: ffffffffffffffda RBX: 00007f39c9eb96d4 RCX: 0000000000455979 [ 197.389168] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000013 [ 197.396496] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 197.403820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 197.411138] R13: 000000000000053f R14: 00000000006fbe88 R15: 0000000000000003 [ 197.423765] FAULT_INJECTION: forcing a failure. [ 197.423765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.436122] CPU: 0 PID: 13737 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 197.443097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.452500] Call Trace: [ 197.455165] dump_stack+0x185/0x1d0 [ 197.458870] should_fail+0x87b/0xab0 [ 197.462673] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 197.467529] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 197.472967] ? is_bpf_text_address+0xb4/0x4b0 [ 197.477546] ? __is_insn_slot_addr+0x198/0x1c0 [ 197.482221] ? kernel_text_address+0x34d/0x3a0 [ 197.486895] ? __kernel_text_address+0x34/0xe0 [ 197.491623] ? __save_stack_trace+0x90d/0xb00 [ 197.496251] alloc_pages_current+0x6b5/0x970 [ 197.500829] __page_cache_alloc+0x95/0x320 [ 197.505154] __do_page_cache_readahead+0x401/0xf20 [ 197.510235] ? kmsan_set_origin_inline+0x6b/0x120 [ 197.515232] ondemand_readahead+0xc6a/0x1210 [ 197.519752] ? generic_file_read_iter+0xb43/0x4440 [ 197.524814] page_cache_sync_readahead+0x1e6/0x740 [ 197.529897] generic_file_read_iter+0xc3c/0x4440 [ 197.534847] blkdev_read_iter+0x20d/0x280 [ 197.539107] ? blkdev_write_iter+0x5f0/0x5f0 [ 197.543591] generic_file_splice_read+0x5d2/0x900 [ 197.548530] ? splice_shrink_spd+0x100/0x100 [ 197.553019] splice_direct_to_actor+0x4c6/0x1040 [ 197.557877] ? do_splice_direct+0x540/0x540 [ 197.562290] ? security_file_permission+0x28f/0x4b0 [ 197.567440] ? rw_verify_area+0x35e/0x580 [ 197.571710] do_splice_direct+0x335/0x540 [ 197.575969] do_sendfile+0x1067/0x1e40 [ 197.580025] SYSC_sendfile64+0x1b3/0x300 [ 197.584234] SyS_sendfile64+0x64/0x90 [ 197.588192] do_syscall_64+0x309/0x430 [ 197.592180] ? SYSC_sendfile+0x320/0x320 [ 197.596332] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 197.601579] RIP: 0033:0x455979 [ 197.604804] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 197.612578] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 197.619907] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 197.627230] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/05/07 22:45:01 executing program 7 (fault-call:1 fault-nth:4): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:01 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1f, 0x2) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000080)=0x3) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffff7fff, 0x10001) 2018/05/07 22:45:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) [ 197.634556] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 197.641884] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000034 2018/05/07 22:45:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0x200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x1000) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r2, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r3 = fcntl$getown(r2, 0x9) getpriority(0x2, r3) listen(r0, 0x0) listen(r2, 0x0) [ 197.691869] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 197.737930] FAULT_INJECTION: forcing a failure. [ 197.737930] name failslab, interval 1, probability 0, space 0, times 0 [ 197.749500] CPU: 1 PID: 13754 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 197.756475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.765877] Call Trace: [ 197.768536] dump_stack+0x185/0x1d0 [ 197.772240] should_fail+0x87b/0xab0 [ 197.776030] should_failslab+0x279/0x2a0 [ 197.780235] kmem_cache_alloc_node+0x151/0xc70 [ 197.784914] ? rtnetlink_rcv_msg+0x1463/0x1560 [ 197.789568] ? __alloc_skb+0x203/0x9f0 [ 197.793579] __alloc_skb+0x203/0x9f0 [ 197.797454] netlink_ack+0x554/0x1140 [ 197.801378] ? kmsan_set_origin_inline+0x6b/0x120 [ 197.806314] netlink_rcv_skb+0x30e/0x600 [ 197.810475] ? rtnetlink_bind+0x120/0x120 [ 197.814707] rtnetlink_rcv+0x50/0x60 [ 197.818513] netlink_unicast+0x166b/0x1740 [ 197.822847] ? rtnetlink_net_exit+0xa0/0xa0 [ 197.827255] netlink_sendmsg+0x1048/0x1310 [ 197.831634] ? netlink_getsockopt+0xc80/0xc80 [ 197.836247] ___sys_sendmsg+0xec0/0x1310 [ 197.840441] ? switch_fpu_finish+0x6e/0x4d0 [ 197.844897] ? __fdget+0x4e/0x60 [ 197.848378] ? __fget_light+0x56/0x710 [ 197.852378] ? __fdget+0x4e/0x60 [ 197.855862] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 197.861339] ? __fget_light+0x6b9/0x710 [ 197.865450] SYSC_sendmsg+0x2a3/0x3d0 [ 197.869404] SyS_sendmsg+0x54/0x80 [ 197.873095] do_syscall_64+0x309/0x430 [ 197.877078] ? ___sys_sendmsg+0x1310/0x1310 [ 197.881480] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 197.886725] RIP: 0033:0x455979 [ 197.889960] RSP: 002b:00007f39c9eb8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.897734] RAX: ffffffffffffffda RBX: 00007f39c9eb96d4 RCX: 0000000000455979 [ 197.905061] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000013 [ 197.912387] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 197.919704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 197.927022] R13: 000000000000053f R14: 00000000006fbe88 R15: 0000000000000004 2018/05/07 22:45:02 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/07 22:45:02 executing program 7 (fault-call:1 fault-nth:5): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:02 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 2018/05/07 22:45:02 executing program 0: r0 = getpid() r1 = socket$inet6(0xa, 0x80000, 0x1) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r2 = syz_open_procfs(r0, &(0x7f0000000300)='net/route\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) lookup_dcookie(0x10000, &(0x7f0000000340)=""/4096, 0x1000) prctl$seccomp(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0x3, 0x2, 0x9}, {0x7f, 0x2, 0x6, 0x9}, {0x32, 0x5, 0x2, 0x7fff}, {0x0, 0x1, 0x100000000, 0x8}]}) pread64(r2, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:02 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r2, 0x0, 0x3}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r2, 0xc, 0x2}, 0x14) 2018/05/07 22:45:02 executing program 5 (fault-call:5 fault-nth:53): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:02 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) dup3(r0, r0, 0x80000) 2018/05/07 22:45:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x3, &(0x7f0000000040)="c379c9ea0a1af40cf41f5c5653f9a70edeaf7dec91285e85cb8df949bb8ba4aacbdd563b488f5bd42e3a9fe586bac2bc5a080bfab840fe0735eca8907c1b8f56b2fd67e2f5c1778d7bea2554ddfd8b491d9f314c03c1a3eede6ffe68850c0585e889d6a8b67fd81497bd532ea14714d75dad81564feedbcf1bd36f9221becf97702ed555ce") close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0xfffffffffffffddb) listen(r0, 0x0) listen(r2, 0x0) [ 198.198868] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 198.244192] FAULT_INJECTION: forcing a failure. [ 198.244192] name failslab, interval 1, probability 0, space 0, times 0 [ 198.255651] CPU: 1 PID: 13782 Comm: syz-executor7 Not tainted 4.16.0+ #87 [ 198.262632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.272036] Call Trace: [ 198.274708] dump_stack+0x185/0x1d0 [ 198.278413] should_fail+0x87b/0xab0 [ 198.282245] should_failslab+0x279/0x2a0 [ 198.286400] __kmalloc_node_track_caller+0x243/0x11c0 [ 198.291682] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 198.297162] ? netlink_ack+0x554/0x1140 [ 198.301261] __alloc_skb+0x2cf/0x9f0 [ 198.305098] ? netlink_ack+0x554/0x1140 [ 198.309205] netlink_ack+0x554/0x1140 [ 198.313130] ? kmsan_set_origin_inline+0x6b/0x120 [ 198.318072] netlink_rcv_skb+0x30e/0x600 [ 198.322236] ? rtnetlink_bind+0x120/0x120 [ 198.326472] rtnetlink_rcv+0x50/0x60 [ 198.330272] netlink_unicast+0x166b/0x1740 [ 198.334604] ? rtnetlink_net_exit+0xa0/0xa0 [ 198.339012] netlink_sendmsg+0x1048/0x1310 [ 198.343359] ? netlink_getsockopt+0xc80/0xc80 [ 198.347964] ___sys_sendmsg+0xec0/0x1310 [ 198.352170] ? __fdget+0x4e/0x60 [ 198.355651] ? __fget_light+0x56/0x710 [ 198.359639] ? __fdget+0x4e/0x60 [ 198.363120] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 198.368596] ? __fget_light+0x6b9/0x710 [ 198.372697] SYSC_sendmsg+0x2a3/0x3d0 [ 198.376649] SyS_sendmsg+0x54/0x80 [ 198.380321] do_syscall_64+0x309/0x430 [ 198.384298] ? ___sys_sendmsg+0x1310/0x1310 [ 198.388696] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 198.393939] RIP: 0033:0x455979 [ 198.397176] RSP: 002b:00007f39c9eb8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.404947] RAX: ffffffffffffffda RBX: 00007f39c9eb96d4 RCX: 0000000000455979 [ 198.412272] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000013 [ 198.419592] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.426919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 198.434244] R13: 000000000000053f R14: 00000000006fbe88 R15: 0000000000000005 [ 198.457880] FAULT_INJECTION: forcing a failure. [ 198.457880] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.469908] CPU: 0 PID: 13804 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 198.476883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.486292] Call Trace: [ 198.488953] dump_stack+0x185/0x1d0 [ 198.492648] should_fail+0x87b/0xab0 [ 198.496506] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 198.501360] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 198.506806] ? is_bpf_text_address+0xb4/0x4b0 [ 198.511437] ? __is_insn_slot_addr+0x198/0x1c0 [ 198.516106] ? kernel_text_address+0x34d/0x3a0 [ 198.520776] ? __kernel_text_address+0x34/0xe0 [ 198.525501] ? __save_stack_trace+0x90d/0xb00 [ 198.530126] alloc_pages_current+0x6b5/0x970 [ 198.534693] __page_cache_alloc+0x95/0x320 [ 198.539072] __do_page_cache_readahead+0x401/0xf20 [ 198.544144] ? kmsan_set_origin_inline+0x6b/0x120 [ 198.549138] ondemand_readahead+0xc6a/0x1210 [ 198.553694] ? generic_file_read_iter+0xb43/0x4440 [ 198.558753] page_cache_sync_readahead+0x1e6/0x740 [ 198.563837] generic_file_read_iter+0xc3c/0x4440 [ 198.568773] blkdev_read_iter+0x20d/0x280 [ 198.573022] ? blkdev_write_iter+0x5f0/0x5f0 [ 198.577510] generic_file_splice_read+0x5d2/0x900 [ 198.582491] ? splice_shrink_spd+0x100/0x100 [ 198.586975] splice_direct_to_actor+0x4c6/0x1040 [ 198.591828] ? do_splice_direct+0x540/0x540 [ 198.596279] ? security_file_permission+0x28f/0x4b0 [ 198.601440] ? rw_verify_area+0x35e/0x580 [ 198.605713] do_splice_direct+0x335/0x540 [ 198.610039] do_sendfile+0x1067/0x1e40 [ 198.614112] SYSC_sendfile64+0x1b3/0x300 [ 198.618330] SyS_sendfile64+0x64/0x90 [ 198.622268] do_syscall_64+0x309/0x430 [ 198.626244] ? SYSC_sendfile+0x320/0x320 [ 198.630383] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 198.635614] RIP: 0033:0x455979 [ 198.638839] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 198.646607] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:02 executing program 7 (fault-call:1 fault-nth:6): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:02 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') pread64(r1, &(0x7f0000000000), 0x0, 0x0) 2018/05/07 22:45:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = dup3(r0, r0, 0x80000) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x2, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r3, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r4, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000000c0), 0x4) 2018/05/07 22:45:02 executing program 0: r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/route\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={r2, r3, r4}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000040)="b04530d7585474de4eb9616defd193b469838a0dadea941b2a748498c64010756bcd969374453dd1799289dcb60ef5357cfd1219c9e2551fc7a0c0c11829b6078a5daabf8ade3cd79e8a59bf8a5200019fc5e061a872d4feb68df21394d7327d70877d3fb20ae2dc65ff325645927c280b18b9a50b216f64e35a37201f6158544cc2b02fd0eb938b86e56b8e2f0cb08c28f114802e31c2b111cdc2e4cad757ce2dfc5629f9525353de4498e7f9b3cf56900bc79e9a36ec3a2bba6982ac87265fe88434050d4d905c87c445938c30989fb6d1b2dc", &(0x7f0000000140)="65ad49419f62be038eba0eb66cf86c3ba26df1ebbf74de6ef21ba954bb2774b39053af0551bae95765130acdb8c3b4a84410a40e4a1582a1098069832a067835b75599998c4803bb558c18dd2ae1293d656c157aafca4155797c633c86b289bf955de0"}, 0x20) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:02 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8d54cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 198.647881] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 198.653918] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 198.653935] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 198.653952] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 198.653968] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000035 2018/05/07 22:45:02 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7ff, 0x40) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x400}}, 0x10000, 0x1ff}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r1, 0xca9}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x83, "72fb4ee956c47d5cbd774022899a7b6bc6b257706a7b027dbdc66c6de0fb04246f15dc509ad9016c3f8a2095aad56eacdeeef41607b4d2c66686d9c35263013c360afdd862b6d4e5e7df86f213dea948a0b590f029e36d2be24af2837e3ee65a4c941428e7fb3f8476064e798a2c655e56eddd6a656c30317e5fb952cbc0cc15d162e0"}, &(0x7f00000001c0)=0x8b) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0x4}, 0x8) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{r3, r4/1000+10000}, {0x77359400}}) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r5, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:02 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x10000) bind$ipx(r0, &(0x7f0000000080)={0x4, 0x10001, 0x5, "c463e3e53736", 0x1000}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r1, 0x200000000000) listen(r1, 0x6) 2018/05/07 22:45:02 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xda0, 0x1, [0x204000000]}, &(0x7f0000000100)=0xa) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x100000000, 0x6, 0x200, 0x1f, 0x2, 0x400, 0x1000, 0x7, r2}, 0x20) prctl$seccomp(0x16, 0x0, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x2874, 0xfffffffffffffffe, 0x7, 0x9}, {0x3ff, 0x7, 0x0, 0xfffffffffffffc66}, {0x1f, 0x2511, 0x1, 0x101}, {0x0, 0x800, 0x4, 0x401}, {0x0, 0x100000001, 0x6, 0x7ff}, {0x1f, 0x1f, 0x4, 0x100}, {0x9, 0xffffffffffffffff, 0x6, 0xc5a9}]}) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:03 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/07 22:45:03 executing program 5 (fault-call:5 fault-nth:54): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:03 executing program 0: syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') 2018/05/07 22:45:03 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0xa6, 0x15, 0x2}, 0x8) getsockopt$inet_int(r0, 0x10d, 0xa5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r2, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:03 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a000000000000000000000008001500060000000807000004000300"], 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:03 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c587121c34eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54e704fb64f2dd46ba30eaeeb5c1408062f3e620d7db34554fef5fc27dbc7"], &(0x7f0000000000)) 2018/05/07 22:45:03 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 2018/05/07 22:45:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r3 = getpid() r4 = getpid() r5 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000240)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc, &(0x7f0000000080)=[{&(0x7f00000002c0)={0x3fc, 0x28, 0x401, 0x70bd25, 0x25dfdbfd, "", [@nested={0x3ec, 0x35, [@generic="b468308a81d723f1f6ca781893278caeb76d06dd4a9b43fabafb1c1850c48f5f607655e8c0174918d27d72ff61f1f0b587a29f28e8090874ec42a18d0c0450468b5919686eaa2b8dd955e8fcfe6ade31245a92fd4530e6761b7d19fdbaa6d379033a7a60a1ec4180f03b64f5e4206ce7417da0c33d2f5a0a1f80c3f6244ba3244365a325e6ee17a83b4f270c314985a59ec935", @generic="8677bbc6634b4246aeb9a4ac9cc34ee26ab2ebfe07ece3e2f88044989325e0c9a3cec56e08418dd0ca323094c1707cd0130a0b1312855e48a153a540b5abeba4c1a3474e32ce1c7527714957048597fdb4820f1619243682ebbc61bbc78eb4e892c5aba3d73abcda906c59322234d1a7e0c6506d28acc19eb8f89bc063e9ca7fdf58de9e5af434237d3fac1e50fb9ec228bee5e04ff916dc0dacff91c358a963052887d0e6f70b6676d93e5e4a56a8c01d9f31407143d421dbadf40daf6957497a466048e70abacd024e5ff9b060cd9bf9e9aabc38da8d71ae6011d5ba4f691fb576dce73eb4c8c0ee", @typed={0x8, 0x7d, @pid=r3}, @generic="8e45d2f0e61386af45fb95429c5de465f05d0b440bad7bebb8324b8a1f8f88952894c8ff7af97ebb4a1cf23db89367da4eec697d0fd0aee2ffd458f031e4df18a0d1febe5944066c76a06d9a364561e73d7cd2fec49b5c597a87f7cce2bebdc2a04db04f18fd581217d63af9ebf5112c98b8c5ab96107829a1ef5c842d54cf3d18596aa9d2fe8fd15433520a13ceefc3d9c16e55d05f7c850c1396e2f30b59279b59a32cb2e281b61d2ad7f48e4c87fc1e4c66a381afb607011bdcace252bf2aa0966240d6ebe258474e3f", @typed={0xc, 0x4b, @u64=0x2}, @generic="31477cb9bb65d6fbfc1196b4e4c6d4899f1cd10fd766be7b66b23787f44ee79fa6b975750912bd558a7876ec794d01385ab7763e6bf534fdf0fe7dbf686fac44667373c1b87762368ef2ba262b95e972d91e0423c902f5c981097f6b34e2b12e3d5f25fa10079d8c1cc3882e5172d82320fb14754a833e86bf1566", @typed={0xc, 0x26, @u64=0x1}, @typed={0x14, 0x32, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @generic="301b0103fc5ffefbb9327a308da4527982697a5b7f816a2ebf27b75de890ae942a7eb3dd11a257b27bf45db90ea56ec56630f917adae532988bd533c635ead325757aec2f99bda54acc2b1ef074f8bd335f9692d528e41bdf66d183c85e15f723e420626590b0509ecf86c504f790e62b020d318106ccd959eae8728d80c6175bd25d07b9434c0ea65acc9d0a09abf67df6cdbbf57da46f3061c92b4d454696515a817a82deb91d65a35646b4b1b5e8c466a44dd08507a671268c1d2ba68d730d187db64e2647076e3887f15f883525ee9367f5c5373977aef2bc6978e7d880d8e1cfa34a37dc83f54d20ef041d9c8"]}]}, 0x3fc}], 0x1, &(0x7f0000000840)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x30, 0x1, 0x1, [r0, r0, r1, r0, r2, r0, r1, r0]}], 0x70, 0x40080}, 0x40004) listen(r0, 0x0) listen(r2, 0x0) [ 199.248922] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 199.258605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 199.320986] FAULT_INJECTION: forcing a failure. [ 199.320986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.333277] CPU: 0 PID: 13873 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 199.340255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.349662] Call Trace: [ 199.352326] dump_stack+0x185/0x1d0 [ 199.356023] should_fail+0x87b/0xab0 [ 199.359872] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 199.364733] ? __msan_metadata_ptr_for_load_4+0x10/0x20 2018/05/07 22:45:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@loopback, @loopback}, &(0x7f0000000080)=0xfe64) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000100)) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'bcsf0\x00'}) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:03 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x5) [ 199.370255] ? is_bpf_text_address+0xb4/0x4b0 [ 199.374887] ? __is_insn_slot_addr+0x198/0x1c0 [ 199.379553] ? kernel_text_address+0x34d/0x3a0 [ 199.384212] ? __kernel_text_address+0x34/0xe0 [ 199.388930] ? __save_stack_trace+0x90d/0xb00 [ 199.393551] alloc_pages_current+0x6b5/0x970 [ 199.398085] __page_cache_alloc+0x95/0x320 [ 199.402439] __do_page_cache_readahead+0x401/0xf20 [ 199.407503] ? kmsan_set_origin_inline+0x6b/0x120 [ 199.412466] ondemand_readahead+0xc6a/0x1210 2018/05/07 22:45:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000c9aa988468b7aaafef43f9d75d1ecaad1ed7c80c09f19b", @ANYRES16=r1, @ANYBLOB="2c032cbd7000fc29df250300000008000400020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x4000) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0, 0xfff}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000200)={0x0, r2}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) [ 199.417009] ? generic_file_read_iter+0xb43/0x4440 [ 199.422070] page_cache_sync_readahead+0x1e6/0x740 [ 199.427143] generic_file_read_iter+0xc3c/0x4440 [ 199.432072] blkdev_read_iter+0x20d/0x280 [ 199.436331] ? blkdev_write_iter+0x5f0/0x5f0 [ 199.440820] generic_file_splice_read+0x5d2/0x900 [ 199.445761] ? splice_shrink_spd+0x100/0x100 [ 199.450245] splice_direct_to_actor+0x4c6/0x1040 [ 199.455114] ? do_splice_direct+0x540/0x540 [ 199.459525] ? security_file_permission+0x28f/0x4b0 [ 199.464632] ? rw_verify_area+0x35e/0x580 [ 199.468911] do_splice_direct+0x335/0x540 [ 199.473211] do_sendfile+0x1067/0x1e40 [ 199.477282] SYSC_sendfile64+0x1b3/0x300 [ 199.481490] SyS_sendfile64+0x64/0x90 [ 199.485420] do_syscall_64+0x309/0x430 [ 199.489408] ? SYSC_sendfile+0x320/0x320 [ 199.493550] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 199.498795] RIP: 0033:0x455979 [ 199.502025] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 199.509809] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @rand_addr=0x7}, {0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x8, {0x2, 0x4e22}, 'veth1_to_bridge\x00'}) listen(r0, 0x0) fallocate(r0, 0x1, 0x0, 0x2) listen(r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x20000, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) 2018/05/07 22:45:03 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb606eae89a35a6794ce14d81af5f2363ddb9f7c495f83a7b2f8f31d887b351eb582574afa71b32ae3b727ba8f75533e6b86d57992466ce43d6c75fe83738770b5a548c64b80822af37743411a6b9459972855e22c5a12a02c798"], &(0x7f0000000000)) [ 199.517136] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 199.523791] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 199.524450] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 199.524468] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 199.524501] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000036 2018/05/07 22:45:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x60fd, 0x1) [ 199.620343] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:45:03 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000003c0)=""/129, &(0x7f0000000240)=0x81) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) getsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000300), &(0x7f0000000380)=0xffffffffffffff62) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0xfffffffffffffe5c) r2 = dup(r0) recvfrom$llc(r2, &(0x7f0000000480), 0x0, 0x20, &(0x7f00000004c0)={0x1a, 0x320, 0x8001, 0x8001, 0x8, 0x8, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$invalidate(0x15, r3) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='syscall\x00') ioctl$int_out(r4, 0x2, &(0x7f0000000340)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x210000, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r5) listen(r1, 0x0) inotify_init1(0x80800) listen(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f00000002c0)=0x6) 2018/05/07 22:45:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') mkdirat$cgroup(r0, &(0x7f0000000180)="8000001100", 0x1ff) r1 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='{+cgroupnodev\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r1) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:04 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r1) 2018/05/07 22:45:04 executing program 5 (fault-call:5 fault-nth:55): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:04 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x101000) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1fffffffffffff43, &(0x7f0000000100)}, 0x10) 2018/05/07 22:45:04 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x220180, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x9, 0x2, 0x1, 0x68, 0x3, 0x90e6, 0x10001, 0x4d03, 0x0, 0x1, 0x93e, 0x1000}) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:04 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x800000000008001, 0x1fe) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='fdinfo\x00') pread64(r2, &(0x7f0000000040), 0x0, 0x0) 2018/05/07 22:45:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4000, 0x0) 2018/05/07 22:45:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x2, 0x220942) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x9, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) gettid() setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x1d, 0x4) listen(r1, 0x215c) r4 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1000, 0x10d000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000140)={r5, 0x1}, 0x8) listen(r3, 0x0) 2018/05/07 22:45:04 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 200.234243] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 200.280181] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 200.303495] FAULT_INJECTION: forcing a failure. [ 200.303495] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.315521] CPU: 0 PID: 13935 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 200.322496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.331898] Call Trace: [ 200.334555] dump_stack+0x185/0x1d0 [ 200.338257] should_fail+0x87b/0xab0 [ 200.342115] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 200.346964] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 200.352399] ? is_bpf_text_address+0xb4/0x4b0 [ 200.357027] ? __is_insn_slot_addr+0x198/0x1c0 [ 200.361689] ? kernel_text_address+0x34d/0x3a0 [ 200.366350] ? __kernel_text_address+0x34/0xe0 [ 200.371061] ? __save_stack_trace+0x90d/0xb00 [ 200.375687] alloc_pages_current+0x6b5/0x970 2018/05/07 22:45:04 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000040)=0x6bd) r2 = dup(r0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x1000, 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000011000/0x3000)=nil, 0x400000}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r3, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xa19, 0x440) getsockname$ipx(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 200.380238] __page_cache_alloc+0x95/0x320 [ 200.384601] __do_page_cache_readahead+0x401/0xf20 [ 200.389687] ondemand_readahead+0xc6a/0x1210 [ 200.394247] page_cache_sync_readahead+0x1e6/0x740 [ 200.399352] generic_file_read_iter+0xc3c/0x4440 [ 200.404288] blkdev_read_iter+0x20d/0x280 [ 200.408541] ? blkdev_write_iter+0x5f0/0x5f0 [ 200.413028] generic_file_splice_read+0x5d2/0x900 [ 200.418010] ? splice_shrink_spd+0x100/0x100 [ 200.422501] splice_direct_to_actor+0x4c6/0x1040 2018/05/07 22:45:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000000)=""/178, &(0x7f00000000c0)=0xb2) [ 200.427364] ? do_splice_direct+0x540/0x540 [ 200.431805] ? security_file_permission+0x28f/0x4b0 [ 200.436916] ? rw_verify_area+0x35e/0x580 [ 200.441181] do_splice_direct+0x335/0x540 [ 200.445501] do_sendfile+0x1067/0x1e40 [ 200.449559] SYSC_sendfile64+0x1b3/0x300 [ 200.453771] SyS_sendfile64+0x64/0x90 [ 200.457722] do_syscall_64+0x309/0x430 [ 200.461707] ? SYSC_sendfile+0x320/0x320 [ 200.465849] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 200.471097] RIP: 0033:0x455979 2018/05/07 22:45:04 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1ff, 0x404000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0x1d7, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r1], @ANYRES16=r1, @ANYRES32=r1]], 0x1}, 0x1}, 0x0) 2018/05/07 22:45:04 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xa2, 0x30, 0x8001, 0x5}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa99186b98464b6a76b6d51fe74184fc85fb707b49b7fa18cbf1c150618d048424d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec4"], &(0x7f0000000000)) [ 200.474329] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 200.482106] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 200.489425] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 200.496747] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 200.504075] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 200.511406] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000037 2018/05/07 22:45:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x6b, 0x8}, {0x6, 0x6dec}, 0x311, 0x0, 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1b0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x200, 0x0) bind$ipx(r4, &(0x7f00000004c0)={0x4, 0x8001, 0x2, "10b1b7a683dc", 0xff9}, 0x10) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) listen(r0, 0x0) listen(r3, 0x0) 2018/05/07 22:45:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000)="56e3147afe4acf611ba55614e9a3be203102b5902ec5e6549cc44f17cc22c908607c738619fbc3db1915ae31fe7b8c16c314157e7ef75a25e05908f5a19f5da492425f752064471d1aa190508d7d7ed867b103ac7cacc74b5703f1de1874de4fa601dfbac59fb7aa66f15eb16fb3df808d8612d13188ec81b33c659762a0d8d29e1be23f3826f8dcb0c277e1afce47b567b5bfb83d79e73da295f09d076dcbe9d5d1b6f0e662f0c3634397f93f71e068843dc07b1cd4b4181672e0775a040c7d50918db41791a39b50de98f62be8", &(0x7f0000000100)="fd1d66de9d3d4102a4dda57da2a6f910c0486c219cad6cea63ee1f3dd5dee2da5f897bdaec6ba938afbdd54a67a76c52d929a4601b96d9bbac9b5817dd7213564b520c5f76d2dda57f302b188475630d70834a66ada16a6b6dad1e732dd78fd7a89f9f6e9a7b8ec41f52edfc539962ae53d754ebbca079c754e09f98209e436347a8dbfcfb41df8a"}, 0x20) 2018/05/07 22:45:04 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={r1, 0xd, "643ea4fc12200e37e7b0d98275"}, &(0x7f0000000140)=0x15) 2018/05/07 22:45:05 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r1) 2018/05/07 22:45:05 executing program 5 (fault-call:5 fault-nth:56): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:05 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x41, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @loopback, @local}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x7f9a4ab2fbe75996, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x0, {0x2, 0x4e24, @rand_addr=0x9}, 'ipddp0\x00'}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x20080) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000100)={0x80, 0x8, 0x100}) 2018/05/07 22:45:05 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioperm(0x7, 0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d81fe74184fc8508000000b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6c45524b478e66fe0e2db07bcab28e99b123c1f293f795e3aa9bd04fd466f9bc339da9a0da0a4f39b6c9f79dafaab61faad92803d0ab2971ddf5cf0728e6eba24664fc78412f073fabe357d09fecbceca485dae33bc69"], &(0x7f0000000000)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x102, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000300)={0x9, 0x8664, r3, 0x0, r4, 0x5, 0x3, 0x6}) 2018/05/07 22:45:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x82100) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), 0x4) 2018/05/07 22:45:05 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000000)="244b68d37534819e9a4f210de87adb094559b00805fe68ae43828d896c36d57ace5b3a28eed69d456b7147b2a95d5b3e12586b26f113d13f974c6600cf6a277381569fc122989f59bb319a1d6fb8cee8b7b8486e264062aeb7e46f7996c1a1180d0e36bbd0c2ec68d3c506e522e22ef892d7ffb11f5e9ab04bfd3b369adecbf42213e882e8021bff605c5e0ce5bf87033fa248b3e8279a9e4bf4c790", 0x9c}, {&(0x7f00000000c0)="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", 0xfa}, {&(0x7f00000001c0)="dccd4e6377abcebd13295b67973347b6eca14dcc301077e1fa3f0f3881e6ef24a8c1e8670d4373549b553cd49026c52428cd4f12b30b37cbceb41f0d684d74406b79c71f31b5e8a644df3de124d14ba3705b1ebf12cf2a4b7de5ba71954a08693aa9db940d7ea8e8aff5d1c3881f8c497ccfd03fcea4cfcb866f7d155584f39e8d0c8df0eac9ff8ce4db4b980ed64947f1dfe5", 0x93}, {&(0x7f0000000280)="9315cd5121b30c98870c6205e7aedffcb4e2d2d34b171f483d0aedf5d962b53734edaf51fec3cd4acbcc7571dacbe0a12ce47fd5dd068828c340c3734cbaee9b", 0x40}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f00000002c0)="331fa24bb1cc53117dc1b1e217a1d84c4ab73cc2e3b774488991734acac9694546c5c79c66", 0x25}, {&(0x7f0000001340)="596fa7dc9bc738", 0x7}, {&(0x7f0000001380)="462184e0dccc01db930efd7748c0b660212ef218e6fd993592ec84220913e2a8f03dbd4d7b7c49d0de63f20b3a8e64157617ef708b5b2dbc318a417a1dc03899faae5afc55ebd3c7bb903be5a4b4652bc0a0215c9abd31b5c78ce699be7126e94cad3786265a861f09c02df2fac9f63d31b45d9997d12e01f8550b51c2561b4416588698551ced5359fde4cd3586e7547eab90de9ba9b5fdea9c4c6c8a5eb9a0aee488465aaeed0982be77a6b40c62dd1fbe567d6bb49da7b6f55d7d86d8c802663803b00fb2a39e859b7d5b98c2d66530ee2f2316a4aad99d41e47406e4834a047cdf9878d7afbcdfb303dff1c8", 0xee}, {&(0x7f0000001480)="64081721cf7bb08b2aebab895cba1969c80eaca470102c123606a5feff01530653858529f78a156cf37ba707c5f22743bda237ca9f849efab40c305874b91b8bebf4a1c3764ee6", 0x47}], 0x9) 2018/05/07 22:45:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) r3 = semget(0x0, 0x3, 0x8) semctl$GETVAL(r3, 0x0, 0xc, &(0x7f0000000040)=""/3) listen(r2, 0x0) 2018/05/07 22:45:05 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 201.227268] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 201.275094] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 201.287587] FAULT_INJECTION: forcing a failure. [ 201.287587] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.299699] CPU: 0 PID: 13996 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 201.306675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.316077] Call Trace: [ 201.318741] dump_stack+0x185/0x1d0 [ 201.322450] should_fail+0x87b/0xab0 [ 201.326319] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 201.331189] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 201.336642] ? is_bpf_text_address+0xb4/0x4b0 [ 201.341278] ? __is_insn_slot_addr+0x198/0x1c0 [ 201.345954] ? kernel_text_address+0x34d/0x3a0 [ 201.350617] ? __kernel_text_address+0x34/0xe0 [ 201.355341] ? __save_stack_trace+0x90d/0xb00 [ 201.359964] alloc_pages_current+0x6b5/0x970 [ 201.364480] __page_cache_alloc+0x95/0x320 [ 201.368849] __do_page_cache_readahead+0x401/0xf20 [ 201.373914] ? kmsan_set_origin_inline+0x6b/0x120 [ 201.378914] ondemand_readahead+0xc6a/0x1210 [ 201.383468] ? generic_file_read_iter+0xb43/0x4440 [ 201.388528] page_cache_sync_readahead+0x1e6/0x740 [ 201.393603] generic_file_read_iter+0xc3c/0x4440 [ 201.398540] blkdev_read_iter+0x20d/0x280 [ 201.402816] ? blkdev_write_iter+0x5f0/0x5f0 [ 201.407297] generic_file_splice_read+0x5d2/0x900 [ 201.412238] ? splice_shrink_spd+0x100/0x100 [ 201.416723] splice_direct_to_actor+0x4c6/0x1040 [ 201.421580] ? do_splice_direct+0x540/0x540 [ 201.425977] ? security_file_permission+0x28f/0x4b0 [ 201.431127] ? rw_verify_area+0x35e/0x580 [ 201.435400] do_splice_direct+0x335/0x540 [ 201.439694] do_sendfile+0x1067/0x1e40 [ 201.443745] SYSC_sendfile64+0x1b3/0x300 [ 201.447941] SyS_sendfile64+0x64/0x90 [ 201.451878] do_syscall_64+0x309/0x430 [ 201.455866] ? SYSC_sendfile+0x320/0x320 [ 201.460012] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 201.465268] RIP: 0033:0x455979 [ 201.468495] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 201.476279] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 201.483608] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 201.490934] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 201.498253] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 201.505578] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000038 2018/05/07 22:45:06 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r1) 2018/05/07 22:45:06 executing program 0: r0 = accept$netrom(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000280)={r2, 0xa, &(0x7f0000000180)=[0x831, 0x0, 0x62, 0x9841, 0x8, 0x2, 0x1b3, 0x4, 0x541, 0x4000400], &(0x7f00000001c0)=[0x7, 0x4], 0x40, 0x1, 0x1000, &(0x7f0000000200)=[0x10000], &(0x7f0000000240)=[0x9, 0x9]}) accept4$nfc_llcp(r1, &(0x7f00000002c0), &(0x7f0000000340)=0x60, 0x80000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/route\x00') pread64(r4, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:06 executing program 6: syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') 2018/05/07 22:45:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x56, "417001a02af64d60b2d299a2a2632a76c63f77b598ce4c582d76b86f2ac50b3fe08931f39e4cbf5a60607ef770a76a2f383b8635bade9d42b71fc15b678ab9a71c995140603ed8ab50cb15b441dd02ed662d57f4549c"}, &(0x7f0000000100)=0x5e) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x1, 0xfffffffffffffffc}, &(0x7f0000000180)=0x8) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:06 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x24080, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x8, 0xf5, 0x6, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0xfffffffffffffffc, 0x6, 0x8, 0x7ff, 0x401}, 0x14) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x200080, 0x0) sysfs$1(0x1, &(0x7f0000000200)='cgroup.eth0ppp0**#wlan1*bdevmime_type)cgroup$\x00') syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c200800000000000000006ef7ca54d23c7cf2764392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:06 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/05/07 22:45:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x0, 0x400) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0xc0, &(0x7f0000000080)="8a75043dfe7fd02cceace977bf55c8c5a953be3825a4a922774e65f5e9c89d3134aae3c7814ebf6be92b45a3596691605d2068c118f69f193c12d9ef452804389ad52db14b5cedc87ed77046bcafd6bda5a4cb7449755abcdee084da47a7a035e4a06f41bbc81e9b6573a15a65fcf62ec466c2ffe3b39bca7734ddb27375f4f1daab2a01cd690e936c8fb9f4003c8d3ed83f4db085cb0f3f465d6108fb7486308ce46ea66060af7ac33971e09c606bcca360008c56484b69f6aa52693397fdd1"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c00000018000000000000000000000005000000000000000000000008231500060000000800160004000310"], 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:06 executing program 5 (fault-call:5 fault-nth:57): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 202.285989] FAULT_INJECTION: forcing a failure. [ 202.285989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.298187] CPU: 1 PID: 14032 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 202.305165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.314566] Call Trace: [ 202.317226] dump_stack+0x185/0x1d0 [ 202.320927] should_fail+0x87b/0xab0 [ 202.324788] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 202.329653] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 202.335088] ? is_bpf_text_address+0xb4/0x4b0 [ 202.339709] ? __is_insn_slot_addr+0x198/0x1c0 [ 202.344370] ? kernel_text_address+0x34d/0x3a0 [ 202.349047] ? __kernel_text_address+0x34/0xe0 [ 202.353775] ? __save_stack_trace+0x90d/0xb00 [ 202.358400] ? apic_timer_interrupt+0xa/0x20 [ 202.362949] alloc_pages_current+0x6b5/0x970 [ 202.367498] __page_cache_alloc+0x95/0x320 [ 202.371876] __do_page_cache_readahead+0x401/0xf20 [ 202.376951] ? kmsan_set_origin_inline+0x6b/0x120 [ 202.381942] ondemand_readahead+0xc6a/0x1210 [ 202.386499] ? generic_file_read_iter+0xb43/0x4440 [ 202.391571] page_cache_sync_readahead+0x1e6/0x740 [ 202.396653] generic_file_read_iter+0xc3c/0x4440 [ 202.401589] blkdev_read_iter+0x20d/0x280 [ 202.405853] ? blkdev_write_iter+0x5f0/0x5f0 [ 202.410338] generic_file_splice_read+0x5d2/0x900 [ 202.415280] ? splice_shrink_spd+0x100/0x100 [ 202.419766] splice_direct_to_actor+0x4c6/0x1040 [ 202.424618] ? do_splice_direct+0x540/0x540 [ 202.429017] ? security_file_permission+0x28f/0x4b0 [ 202.434134] ? rw_verify_area+0x35e/0x580 [ 202.438400] do_splice_direct+0x335/0x540 [ 202.442706] do_sendfile+0x1067/0x1e40 [ 202.446764] SYSC_sendfile64+0x1b3/0x300 [ 202.450975] SyS_sendfile64+0x64/0x90 [ 202.454926] do_syscall_64+0x309/0x430 [ 202.458913] ? SYSC_sendfile+0x320/0x320 [ 202.463071] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 202.468323] RIP: 0033:0x455979 [ 202.471560] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 202.479339] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) bind$netrom(r0, &(0x7f0000000040)=@full={{0x3, {"f671fc83835de2"}, 0xe0ff}, [{"a142864187649a"}, {"1f7767fa1cad7b"}, {"edf1e8de7da0e9"}, {"e918944ee3926e"}, {"3149eefc7fbff6"}, {"c0c0d2d4710e5b"}, {"56139156053fee"}, {"42edae90661784"}]}, 0x48) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0x0, 0x100001) 2018/05/07 22:45:06 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r1) 2018/05/07 22:45:06 executing program 6: r0 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x1) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x440) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x4002) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000300)='net/route\x00') pread64(r3, &(0x7f0000000000), 0x0, 0x0) 2018/05/07 22:45:06 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x8002, 0x0) 2018/05/07 22:45:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x500081}, 0xffffffffffffff30, &(0x7f00006bcff0)={&(0x7f00000001c0)=@bridge_getneigh={0x50, 0x1e, 0x600, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x1, 0x8000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MASTER={0x8, 0xa, 0x8}, @IFLA_LINKMODE={0x8, 0x11, 0xa1ba}, @IFLA_EVENT={0x8, 0x2c, 0x200}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x9, 0x4) [ 202.486660] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 202.493984] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 202.501311] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 202.508637] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000039 2018/05/07 22:45:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4}, {r0, 0x8000}, {r0, 0x100}, {r0, 0x44}, {r0, 0x1004}, {r0}, {r0, 0x2002}, {r0, 0x140}], 0x8, &(0x7f0000000080), &(0x7f00000000c0)={0x6}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) close(r0) 2018/05/07 22:45:06 executing program 5 (fault-call:5 fault-nth:58): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:06 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(0xffffffffffffffff) 2018/05/07 22:45:06 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = fcntl$getown(r0, 0x9) fcntl$setown(r0, 0x8, r1) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) [ 202.768316] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 202.828719] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 202.927705] FAULT_INJECTION: forcing a failure. [ 202.927705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.939806] CPU: 0 PID: 14074 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 202.946787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.956192] Call Trace: [ 202.958861] dump_stack+0x185/0x1d0 [ 202.962556] should_fail+0x87b/0xab0 [ 202.966415] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 202.971288] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 202.976741] ? is_bpf_text_address+0xb4/0x4b0 [ 202.981385] ? __is_insn_slot_addr+0x198/0x1c0 [ 202.986052] ? kernel_text_address+0x34d/0x3a0 [ 202.990717] ? __kernel_text_address+0x34/0xe0 [ 202.995448] ? __save_stack_trace+0x90d/0xb00 [ 203.000085] alloc_pages_current+0x6b5/0x970 [ 203.004594] __page_cache_alloc+0x95/0x320 [ 203.008964] __do_page_cache_readahead+0x401/0xf20 [ 203.014021] ? kmsan_set_origin_inline+0x6b/0x120 [ 203.018965] ondemand_readahead+0xc6a/0x1210 [ 203.023477] ? generic_file_read_iter+0xb43/0x4440 [ 203.028547] page_cache_sync_readahead+0x1e6/0x740 [ 203.033618] generic_file_read_iter+0xc3c/0x4440 [ 203.038496] blkdev_read_iter+0x20d/0x280 [ 203.042801] ? blkdev_write_iter+0x5f0/0x5f0 [ 203.047288] generic_file_splice_read+0x5d2/0x900 [ 203.052231] ? splice_shrink_spd+0x100/0x100 [ 203.056724] splice_direct_to_actor+0x4c6/0x1040 [ 203.061577] ? do_splice_direct+0x540/0x540 [ 203.066020] ? security_file_permission+0x28f/0x4b0 [ 203.071186] ? rw_verify_area+0x35e/0x580 [ 203.075422] do_splice_direct+0x335/0x540 [ 203.079719] do_sendfile+0x1067/0x1e40 [ 203.083781] SYSC_sendfile64+0x1b3/0x300 [ 203.087987] SyS_sendfile64+0x64/0x90 [ 203.091924] do_syscall_64+0x309/0x430 [ 203.095908] ? SYSC_sendfile+0x320/0x320 [ 203.100057] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 203.105314] RIP: 0033:0x455979 [ 203.108548] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 203.116327] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 203.124386] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 203.131726] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 203.139056] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 203.146382] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000003a 2018/05/07 22:45:07 executing program 5 (fault-call:5 fault-nth:59): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r2, 0xffffffffffffffff) listen(r2, 0x0) 2018/05/07 22:45:07 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x6}, 0x8, 0x800) poll(&(0x7f0000000040)=[{r0, 0x4000}, {r1, 0x8000}], 0x2, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r2, &(0x7f00008af000), 0x0, 0x0) 2018/05/07 22:45:07 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = memfd_create(&(0x7f0000000040)='syz_tun\x00', 0x3) recvfrom$packet(r2, &(0x7f0000000100)=""/236, 0xec, 0x20, &(0x7f0000000080)={0x11, 0x1c, r1, 0x1, 0x6, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) r1 = accept(r0, 0x0, &(0x7f00000000c0)) pread64(r1, &(0x7f0000000000)=""/33, 0x21, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x2b3, 0x7ff, 0x8}) 2018/05/07 22:45:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$inet6(0xa, 0x1, 0x7c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x10400, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000200)=@req={0x7, 0x80000001, 0x7fffffff, 0x1ff}, 0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0059e1820862000018000000000000050000001500060000000800160004000300000200000004000200000000000000"], 0x2c}, 0x1}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local={0xfe, 0x80, [], 0xaa}, 0x3, 0x2, 0xff, 0xf, 0x3f, 0x6, 0x3213}, &(0x7f0000000100)=0x20) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x400, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000180)={0x1, 0xffff, 0x9}) 2018/05/07 22:45:07 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:07 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r1) [ 203.376221] FAULT_INJECTION: forcing a failure. [ 203.376221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.388364] CPU: 0 PID: 14106 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 203.395347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.404754] Call Trace: [ 203.407419] dump_stack+0x185/0x1d0 [ 203.411127] should_fail+0x87b/0xab0 [ 203.414993] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 203.419865] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 203.425313] ? is_bpf_text_address+0xb4/0x4b0 [ 203.429942] ? __is_insn_slot_addr+0x198/0x1c0 [ 203.434616] ? kernel_text_address+0x34d/0x3a0 [ 203.439301] ? __kernel_text_address+0x34/0xe0 [ 203.444029] ? __save_stack_trace+0x90d/0xb00 [ 203.448671] alloc_pages_current+0x6b5/0x970 [ 203.453239] __page_cache_alloc+0x95/0x320 [ 203.457614] __do_page_cache_readahead+0x401/0xf20 [ 203.462684] ? kmsan_set_origin_inline+0x6b/0x120 [ 203.467664] ondemand_readahead+0xc6a/0x1210 [ 203.472218] ? generic_file_read_iter+0xb43/0x4440 [ 203.477304] page_cache_sync_readahead+0x1e6/0x740 [ 203.482390] generic_file_read_iter+0xc3c/0x4440 [ 203.487351] blkdev_read_iter+0x20d/0x280 [ 203.491620] ? blkdev_write_iter+0x5f0/0x5f0 [ 203.496112] generic_file_splice_read+0x5d2/0x900 [ 203.501089] ? splice_shrink_spd+0x100/0x100 [ 203.505578] splice_direct_to_actor+0x4c6/0x1040 [ 203.510529] ? do_splice_direct+0x540/0x540 [ 203.514969] ? security_file_permission+0x28f/0x4b0 [ 203.520319] ? rw_verify_area+0x35e/0x580 [ 203.524597] do_splice_direct+0x335/0x540 [ 203.528912] do_sendfile+0x1067/0x1e40 [ 203.532974] SYSC_sendfile64+0x1b3/0x300 [ 203.537180] SyS_sendfile64+0x64/0x90 [ 203.541120] do_syscall_64+0x309/0x430 [ 203.545105] ? SYSC_sendfile+0x320/0x320 [ 203.549261] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 203.554510] RIP: 0033:0x455979 [ 203.557749] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 203.565532] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:07 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)="000000000000000a00001cf05a27a800cb07adb04dc22e62ad7b3fcaf4d25bd7f026a4c7bd2348c64f6fc0715930417a9216b092a77afe54bbf73c33dc752f1b8d936038c60c23b8a4d8ca68f556193a45a6f892cad798a848933bf429b2d41e359e87171106e5bfb0a332bec2da59b8eb53bb9aac2570222b5c25c35b81cb88f8d63dfa0d8bf3a7d4f97f4481a9") pread64(r1, &(0x7f00000001c0), 0x1000001da, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x5, 0xd5b}, 0x0, 0x2, 0x4, {0x6, 0xffffffffffffffc0}, 0x7, 0x4}) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x7fff, 0x7ff}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200)=0x522, 0x4) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f00000001c0)) 2018/05/07 22:45:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000040)={0xe000000000000000, {{0x2, 0x4e23, @broadcast=0xffffffff}}}, 0x88) listen(r2, 0x0) 2018/05/07 22:45:07 executing program 3: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, 0x3f}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x2}, 0x8) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 203.572856] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 203.580187] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 203.587514] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 203.594842] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000003b 2018/05/07 22:45:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x210, 0x70bd2a, 0x25dfdbfd, {0x11}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xac8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @loopback}, &(0x7f00000001c0)=0xc) 2018/05/07 22:45:07 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) accept4$ipx(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0xffffffffffffff58, 0x80000) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x482000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/rpc\x00') pread64(r2, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7f, 0x1ffe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r3, 0x100000000, 0x929}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r4, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0xa000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x9}) listen(r5, 0x0) 2018/05/07 22:45:07 executing program 5 (fault-call:5 fault-nth:60): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:07 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = getpid() syz_open_procfs(r1, &(0x7f0000000000)='stat\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:07 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)={0x0, 0x4, [0x0, 0x0, 0x0, 0x1c3]}) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4a0f, 0x50000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x410000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000180)={0x2, 0x97, 0x1, 'queue0\x00'}) [ 203.975117] FAULT_INJECTION: forcing a failure. [ 203.975117] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 203.987278] CPU: 1 PID: 14142 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 203.994257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.003664] Call Trace: [ 204.006334] dump_stack+0x185/0x1d0 [ 204.010048] should_fail+0x87b/0xab0 [ 204.013907] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 204.018770] ? __msan_metadata_ptr_for_load_4+0x10/0x20 2018/05/07 22:45:08 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) [ 204.024206] ? is_bpf_text_address+0xb4/0x4b0 [ 204.028839] ? __is_insn_slot_addr+0x198/0x1c0 [ 204.033501] ? kernel_text_address+0x34d/0x3a0 [ 204.038165] ? __kernel_text_address+0x34/0xe0 [ 204.042892] ? __save_stack_trace+0x90d/0xb00 [ 204.047490] alloc_pages_current+0x6b5/0x970 [ 204.052002] __page_cache_alloc+0x95/0x320 [ 204.056368] __do_page_cache_readahead+0x401/0xf20 [ 204.061428] ? kmsan_set_origin_inline+0x6b/0x120 [ 204.066413] ondemand_readahead+0xc6a/0x1210 2018/05/07 22:45:08 executing program 6: socket(0x1a, 0x0, 0x6) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='schedstat\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) [ 204.070925] ? generic_file_read_iter+0xb43/0x4440 [ 204.075994] page_cache_sync_readahead+0x1e6/0x740 [ 204.081077] generic_file_read_iter+0xc3c/0x4440 [ 204.085964] blkdev_read_iter+0x20d/0x280 [ 204.090273] ? blkdev_write_iter+0x5f0/0x5f0 [ 204.094777] generic_file_splice_read+0x5d2/0x900 [ 204.099737] ? splice_shrink_spd+0x100/0x100 [ 204.104235] splice_direct_to_actor+0x4c6/0x1040 [ 204.109097] ? do_splice_direct+0x540/0x540 [ 204.113516] ? security_file_permission+0x28f/0x4b0 [ 204.118684] ? rw_verify_area+0x35e/0x580 [ 204.122966] do_splice_direct+0x335/0x540 [ 204.127288] do_sendfile+0x1067/0x1e40 [ 204.131348] SYSC_sendfile64+0x1b3/0x300 [ 204.135546] SyS_sendfile64+0x64/0x90 [ 204.139493] do_syscall_64+0x309/0x430 [ 204.143476] ? SYSC_sendfile+0x320/0x320 [ 204.147625] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 204.152874] RIP: 0033:0x455979 [ 204.156102] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 204.163875] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 204.171243] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 204.178599] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 204.185921] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 204.193248] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000003c 2018/05/07 22:45:08 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r1) 2018/05/07 22:45:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) r1 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x3, 0x200, 0x8, r1}) 2018/05/07 22:45:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) listen(r0, 0x0) listen(r2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$KDENABIO(r3, 0x4b36) 2018/05/07 22:45:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) shutdown(r0, 0x0) 2018/05/07 22:45:08 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f0000000000)=""/213, 0xd5, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000340)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x8, 0x0, r1}, {0x8, 0x1f, 0x6, 0x0, 0x0, 0x0, 0xafaf, 0x8}, {0xb71e, 0x9, 0x9, 0x1}, 0x4, 0x6e6bb7, 0x0, 0x0, 0x3}, {{@in=@loopback=0x7f000001, 0x4d5, 0xff}, 0x2, @in6=@ipv4={[], [0xff, 0xff]}, 0x3501, 0x3, 0x1, 0xfff, 0xffffffffffffff7f, 0x5, 0xde}}, 0xe8) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)=""/75) 2018/05/07 22:45:08 executing program 5 (fault-call:5 fault-nth:61): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:08 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xc85, 0x400000) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000100)=0x4) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154f62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 204.505994] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 204.550955] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 204.583711] FAULT_INJECTION: forcing a failure. [ 204.583711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.595855] CPU: 0 PID: 14187 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 204.602831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.612233] Call Trace: [ 204.614900] dump_stack+0x185/0x1d0 [ 204.618609] should_fail+0x87b/0xab0 [ 204.622472] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 204.627362] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 204.632810] ? is_bpf_text_address+0xb4/0x4b0 [ 204.637436] ? __is_insn_slot_addr+0x198/0x1c0 [ 204.642105] ? kernel_text_address+0x34d/0x3a0 [ 204.646771] ? __kernel_text_address+0x34/0xe0 [ 204.651486] ? __save_stack_trace+0x90d/0xb00 [ 204.656111] alloc_pages_current+0x6b5/0x970 [ 204.660625] __page_cache_alloc+0x95/0x320 [ 204.664944] __do_page_cache_readahead+0x401/0xf20 [ 204.670002] ? kmsan_set_origin_inline+0x6b/0x120 [ 204.674989] ondemand_readahead+0xc6a/0x1210 [ 204.679539] ? generic_file_read_iter+0xb43/0x4440 [ 204.684596] page_cache_sync_readahead+0x1e6/0x740 [ 204.689669] generic_file_read_iter+0xc3c/0x4440 [ 204.694612] blkdev_read_iter+0x20d/0x280 [ 204.698871] ? blkdev_write_iter+0x5f0/0x5f0 [ 204.703360] generic_file_splice_read+0x5d2/0x900 [ 204.708305] ? splice_shrink_spd+0x100/0x100 [ 204.712792] splice_direct_to_actor+0x4c6/0x1040 [ 204.717656] ? do_splice_direct+0x540/0x540 [ 204.722056] ? security_file_permission+0x28f/0x4b0 [ 204.727203] ? rw_verify_area+0x35e/0x580 [ 204.731474] do_splice_direct+0x335/0x540 [ 204.735768] do_sendfile+0x1067/0x1e40 [ 204.739907] SYSC_sendfile64+0x1b3/0x300 [ 204.744120] SyS_sendfile64+0x64/0x90 [ 204.748061] do_syscall_64+0x309/0x430 [ 204.752036] ? SYSC_sendfile+0x320/0x320 [ 204.756178] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 204.761434] RIP: 0033:0x455979 [ 204.764666] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 204.772453] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 204.779781] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 204.787107] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 204.794432] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 2018/05/07 22:45:08 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) mq_notify(r1, &(0x7f00000001c0)={0x0, 0x27, 0x5, @thr={&(0x7f0000000100)="81391e0f14f336889725a386bfd97b3f25c607c267c5504fd419d7573c95520018463ea40d5b2b5f12f3ec544742d67c679184ec09de46a081f98fc84238107dff9e1d066c86eabbc517372d7727fda5ac685f77540453d9858dec2f", &(0x7f0000000180)="891546b5959c0658edd3"}}) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='status\x00') pread64(r2, &(0x7f00008af000), 0xfffffef6, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0x8000, 0x2, 0x7fff, 0x3}) 2018/05/07 22:45:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10, 0x0, 0x0, 0x8}, 0xffffff12, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c000b02d11772dc9e0200000000000000000000000000000000000000000000000000000000000000000000"], 0x2c}, 0x1}, 0x0) [ 204.801756] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000003d 2018/05/07 22:45:09 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:09 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r1) 2018/05/07 22:45:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) fchmod(r0, 0x140) listen(r0, 0x0) listen(r2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x80000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', r3, r4) 2018/05/07 22:45:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x4, 0x200080000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x100000000}, @in6={0xa, 0x4e23, 0x101, @mcast1={0xff, 0x1, [], 0x1}, 0x100000000}, @in6={0xa, 0x4e20, 0x7fff, @mcast2={0xff, 0x2, [], 0x1}, 0xfa2}, @in6={0xa, 0x4e21, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x80000001}, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x800}, @in6={0xa, 0x4e21, 0x19, @mcast2={0xff, 0x2, [], 0x1}, 0x5323ebf4}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e21, 0xfff, @empty, 0x3}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20, @broadcast=0xffffffff}], 0xf4) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) socket$inet6(0xa, 0x8080f, 0x2) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000001c0)) 2018/05/07 22:45:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001540)={0x0, @multicast1}, &(0x7f0000001580)=0xc) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001640)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f00000015c0)={0x1d, r1}, 0x10, &(0x7f0000001700)={&(0x7f0000001680)={0x4, 0x30, 0x9, {r2, r3/1000+10000}, {r4, r5/1000+10000}, {0x3, 0x8000, 0x8, 0x9}, 0x1, @canfd={{0x2, 0x5, 0x2, 0x6}, 0x3a, 0x2, 0x0, 0x0, "1feb4de8057259c13ccaf58e40e7cbef9211277a0be2290c2326acb2389d5faef7080eeaf79eb35517f4eef18e39489a484723cb3d7cbf2f68dd767500cf88cb"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000010}, 0x404c080) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:09 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x8, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000180)=0x9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x84010, r2, 0x0) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) getsockopt(r0, 0x8, 0x2, &(0x7f0000000040)=""/88, &(0x7f0000000100)=0x58) 2018/05/07 22:45:09 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) ioctl$KDDISABIO(r0, 0x4b37) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x100) 2018/05/07 22:45:09 executing program 5 (fault-call:5 fault-nth:62): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 205.364370] FAULT_INJECTION: forcing a failure. [ 205.364370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.376489] CPU: 0 PID: 14226 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 205.383464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.392866] Call Trace: [ 205.395530] dump_stack+0x185/0x1d0 [ 205.399237] should_fail+0x87b/0xab0 [ 205.403101] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 205.408060] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 205.413500] ? is_bpf_text_address+0xb4/0x4b0 [ 205.418134] ? __is_insn_slot_addr+0x198/0x1c0 [ 205.422802] ? kernel_text_address+0x34d/0x3a0 [ 205.427463] ? __kernel_text_address+0x34/0xe0 [ 205.432177] ? __save_stack_trace+0x90d/0xb00 [ 205.436804] alloc_pages_current+0x6b5/0x970 [ 205.441321] __page_cache_alloc+0x95/0x320 [ 205.445682] __do_page_cache_readahead+0x401/0xf20 [ 205.450747] ? kmsan_set_origin_inline+0x6b/0x120 [ 205.455720] ondemand_readahead+0xc6a/0x1210 [ 205.460230] ? generic_file_read_iter+0xb43/0x4440 [ 205.465298] page_cache_sync_readahead+0x1e6/0x740 [ 205.470376] generic_file_read_iter+0xc3c/0x4440 [ 205.475264] blkdev_read_iter+0x20d/0x280 [ 205.479558] ? blkdev_write_iter+0x5f0/0x5f0 [ 205.484042] generic_file_splice_read+0x5d2/0x900 [ 205.488995] ? splice_shrink_spd+0x100/0x100 [ 205.493477] splice_direct_to_actor+0x4c6/0x1040 [ 205.498342] ? do_splice_direct+0x540/0x540 [ 205.502784] ? security_file_permission+0x28f/0x4b0 [ 205.507927] ? rw_verify_area+0x35e/0x580 [ 205.512191] do_splice_direct+0x335/0x540 [ 205.516580] do_sendfile+0x1067/0x1e40 [ 205.520651] SYSC_sendfile64+0x1b3/0x300 [ 205.524855] SyS_sendfile64+0x64/0x90 [ 205.528790] do_syscall_64+0x309/0x430 [ 205.532768] ? SYSC_sendfile+0x320/0x320 [ 205.536918] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 205.542170] RIP: 0033:0x455979 [ 205.545402] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 205.553182] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000002c0)={r0, r2, 0x1f, 0x5, &(0x7f00000000c0)="244f5a2cb3fb0fc9161193e1fd8617dd99d5fc5e64b9ec838d2e02195b54949e4b46b24a976c21c0aebcd835e37211d4641319835925020f5a27312d6751ea0ef860b7bf7b48ebff0529d7a87d6b8fe992109001ceaea2aa7871e9e5d9bc478c15598fc6018548d17885a8fa437fa797", 0x3, 0x40, 0x23, 0x80, 0x6b, 0xfff, 0x1f, "d7b96dd287eaa3d1548a6fe4e8b20a58064eb22be16ec336cd791d32878ffdf33781904f5eb07e084bfe1302804a197cf028a440a74468fb6f1b099e7a115fe6bdf786fe98bdac892a1ab469405a74fe52f83283aeb5f79a2a12b151d1fcd682f0e953fb15762aaaa4b0eb62e1d27a3d1c39f28aa1b957d63183505452f4fd2ea033b79cbfeaa28a95fa9245e269611d086c72a33ecbb7c0ebf3049da07c1a68bd36764599e9be5875b5f093c76a98919e2063f313a6e255eb57fb5ba7e9bf7ca0b8c1477d78becf0c229710cbcf0c66d6ef19c635f49bbd8dd171fbf38df4149aceb3ea6d024179d7e4bb7b1f108a678a98e5455aa4570d7dc9db695ec2f6534017f7316e084c03e7decb221a46e8b9edba55a91cccc528f4d6e5d92f1666b0ffa94c579913fb64a4db9c4443a3d914b18705e21b2fbc8becf7dfd972b0973ff88e00ae39558247429652f55447b17611093de83cd0eeb8a1ef8bff797cb347a8de56b356fca3f317743d4371db1bc4c45db6952167d8f774b835b6bb67056fb99d20651f2b1a173091470ca0a75bef75b0ac143907260fad98236801168f3d3e0347d3072f9431c401b8ec3bd80f79513d05dbeffe48c82276c86d68a829ab3be1d21d6338f63d829e520b25bdfb525e9d3fd824164ebb2d71dc849458fd0f803244ae64803a4d08243d92bca14acd497d40c5bfd2165bfd3009be8b7a38bc95f2e9d05352040eccf812c66863eccefbbd83871a0019dc05b68c6ecc92b7d19fc7779d35312654eef65b2eaaa89c0faa4229f3eeb956c65cf129b8911a14df6a4849c778d9d8a8aa8f8cfe2ed851e0e9f888bac6a2f86c18d7d17934899988307fdcc5d2e0a1424310d374b184d5ba965a0a37221a32706c35a7c5d26fcf524655ad15469f7024f688bab501d5e3f6985dddc8a987268a333930c21d008d19e6fbae45d2e691512a620163c27615e2367187f589fec9bf4476538ae9125aff63a5391b5219a9ec790dd8a93fe3e546e52e6b74d6bb0e27c0d3f2a5ff22ec9b86163affc3c7a1e3b5c0b7beedf676067bf3d582791c4026410cc2de0ed70a0703c0c2daae7e2b8b11eec4d028230bd6dcf9e5fd7636a8ef65c754b9b028e08d87bc0400ffd9d026fe9dc6583dd8f98ec0b98dac91d0efb4255ff14fbb9ebc36dd5e2d97f630332daa176c48c81c829e78508da36bcfe6557185f9ebc1252b91f8e029f6c313a5df4be3f9ebc01c4387438528f8919708961929e9038b1734d464e2b2a44b1e7ed74c097aea69ac8381da4b37c844022b5c1bd5622d669814dc84980c161e2ccf6921852f850acf779f2224e3eb15c19f3340b5617ae076bebdc18c25ddf22cf1e13381b9c56504d61f5d193b5a832a111da5aec4941045529ee306938b9ff1d23fb808df934d5b12614c322a7307e9d64f7bd828b8d57d33b50ac3c6dcb10d4e0528faf9fdb61d505b44099cb1d8f7474d02d95b2c7852cf47b7af1648356c732b8db8d27977ab7a3f2ac79529174d94fd97db215bb03be879c00467f22ccc1ef7d963f2aef1056b06b41e23ec690c8b305db3d6f8c200d817916220e1f66fdeb34e834c624fadf3274f7b6744f7dcf0ab95d751c57e77eee34ebb225d2ab8ebf78c745794ab2826df178dd5a15ea1e4dbc875c10c057d8ceec92413b0a11daad6eca8d39105b779fed40c53d3b91799e740f2ff640ea458a71effe9b6ccb704e243142a13feb5305518ccc348f8259d5e17da478c3435571c750a2f81faf34e07a55f64c569f43bebfcc1cf3d13c57c0678e9cafd94da74f95cfb78fd5a983b00b17d3ceb2fea60692691b850da7bcc927b7b84e20f111db4017e25efcb81e4c05bdb829b0f5d98b5762323ed03449434fe805ed29c6347015565c659f0b8314abe4f990f512742646c9587e00e6df260049b410185fb0d6fc776f8d26a94989c1f2183ff1cced7b510765f97179f5f447aa23dfc8a2f3b7be4547b671dc703ee495c2f8f9e7706ae9cdb67b42e196c11567ec31333685f043d4424ccd191ce8ef335be8a29871c043e57c77e8088721c5ce59395b6314971defe0316e65ff6e4cb3adebf81522b9c2d47f87a4dd44d1d0b2d17b62b33899437cb700e6677fcea6792c4b038b8b63268add37484264f6add088cca5e7ed1bf8408d8ed6ae22f9d8ca86ed5cd0c7a971d40e78dbef9cb7bb613f71c61eea821f64c6fab7dcc5dff143441eae6e5317bce3cd9a819dd9f896e1f6f93e062fc7cbb09aec3dfd6834c3cde14ab2daec4933380d9ce42c707ad22e7076f8c85dc4d27337239ee5d721b5afd98f81fd65752786428d1c9b1e29b757a4efc51eb158e6426bf95048bcaedfc4d1cb4a8056e66427a7d93b5b2c49bc96bb8e0cb86f1c6b303cd93804d114575492cb5189f6f132361308dd95dc22c42c92d808b019ead665f38beee5e3bc0a0a848e242aa5898ec4642faf2d60a8cbc1d005d376f3579574fa5223239cbda9263c1c3de5212a1220d6cceb04b52c55f299eca2dc4a680567b5d75912efc3b13b1999282d77ca6cbd7db910503c96f908b0c7d7925b3999606f6b344c3dc0f90e127f6d19243c1edb99468d01a2a75da5bc1761f3e02a685fdbed49b68e445e8d3e5d9881b4ef83d8b47c1895bdcfc3607dca986a1a8218fac7d33667ec8b92a5ed23759edef03dfdf834db4baefed97dee0a80a3c8a58d09d53f352ad723d76f8155e5aeaa18bb18813c3da98bfc96d5b1fb817ef06c4cb09d36e4be6fc83ea637a0a080dea5d5c3be3dc0073ad16e1b74ab1b0260e368a1c339b2271f9e14ec6c84a4f62b6ae23c6f74f5d4ea3b663dda5d2127e253dec68ad60c1f6c554e9ebac9fd53d1ed154bf03d33c9f4b22585676f42b3d5750e546d93d607fda45fa1eb4c75149c9e5d71efadefd044b5821a7464fc3cb495ba4cfedc2f0fbe794aa6f4a8dcfa5c2e0e08e81448792e0e83ca897522a5b277a8c5ec8fbdfcc0592079e0bf92ed6706a54597142faebd3c24d759d44575adbd2011579b1a4b8f869a4a4dca9b50039c561763a3c2d32fa7fcd227b3425010ee5504e8b001912ba0322d8c9c78d3cb85995a9466dd1f236e15ce68cf6c156665c95604bf2995de5fca882064d67db833a44a4d7163653931e6af2d2078fe55a1191ce74d239738e071479af69870778879bb2edfd4d040d6f5b9cc21a3665f01bd5e35bfbdb283b9f037f914ed881e467b76afb621286918fbfa1cc7726c603d1d4225384214ee5c06b840b8f939a517ab115d4b29b22ab1c0f289f3fc9f0f630450fdde93d39c5eb01698a89f91c6435a1e7c9e098fb88a3b2aacc81fc041e193085b1b47d536c724cfe6b76a43cfc4988f82d7846319165bba66838bed556c7e6b2ce0371f627e673e608201cd400a7aadca77eb46e2789f4b02156cf6999cfcb58297eff0a428a60f4194cc668c2fc9fe4b75b1b4387945fe44ee90590e33e56547ee1d6b6371fb442bf15120f4fa4e8dd22d44e765a1b03842b8cef0ffd12e7c2d73e94fe0dbe7d3c292cf47ee939f1141b288d296126e6f421baa612604825eea640abbf41836871fa1c04d7f1a2a3e8a636949af1a9fb2338a83ddf45af718bd947490e097bf33aacd48510235f0db8ff54f8ce64c677b636bbb5a2d1db96e5b1f6249403f9e3d772eea1809f1af63c5f3a37e0ef28c8a63c9c071f59519e4e488ad65e4f728f5e4aa1bf1ad673d93459ee53c976c5c8c2f297b3fb8ce19061368df821778c836f6eba8188bb2ee6e090cb07bc4f498db935cbeb652fa576979e97799b03d2f83f3ef0fb914a7a5e4d9cb111e0f27e33f74643a8eee34f5a67e0962820d58e336add7dbf76fb3797c89778cda97884955286176fede250ba618ec68c46dffec0e02de08d28d55e8921fe05708e7edae0f8714e2e036439887c14343b472d84feafbbaff65e6bf6f26b5c7732e1a09e6af467bb736b348602eedb3f937a97992b0171a084c01a895348a10f9adc2d736dc6423bbae022b52e818a39c787d678402720bec32d296d8d83e2fefb31045f96a5f1a853929c74fd52383a627280f3a85af4151deb8711bc99b15b1168ee0f145bd67067c2ecaa962cb97a3c3989e24ad451863205753ef76414d1afa33e86b422af37aa78b8013ec3c9cd04cca850b217422fe8509bd18d3f783792023fb57cc4c13bf519ab7aff0f011a057d523e7d9f6deb7fa5386b4788e026c7b98591359ca39c52163ee1e965cb086ff48feb6b9d72a2ec70948c2d61df4234b4d0d4afe136fc4927f8a0b7b3a0fe0fb219decff94538b7f100031e3fd83078c2dc8c684d98c140da9cc24a704d322d690154e02a0a79cbc20f1c6324c229b6ee959a1d568e61af81d3014b2b86360ea89babb097f236baa31a14c949aa176329adbd6c62e2c7d124764e5c33c38dbe3cb56dd090c2f68044353f5da388cdd5541b7b16e00232f4639af89c95e0fa691ae3e149c0305c808b22f9639680b149a0ff01988090072904e00c23a95b3866b29c215e271051b84992ae3e9dfe00adf4f570f7efb4494f42a1391fd5ca4f95e274ce14c6658055cb8d84af58fd54e37b431b01703621e60c87c8cc7d15d8483f460901a35625240e4524c17a30d3c5be3d1da4a1695e081c160a24cbf959de3886c814eed2328d93a156ed5364b1de01314cd6163dee269a405b6afed600504e5110f746ca58373b11338be2e81adba5ee97a767417a67ad13ca7df2eb4f7096ed567b4b371c8a84e05c224a30f7c48c837ba421e5203a1edca391de7ee55f90adac6d2811d9253c1b68bab8aaf56f5edb1f62384c3561b4cb372e38e31c476cee477c888087f30eedee403ea57bd7978e51a78bfbea3ca340507bedcf483920193f29b83f533453716d9006a8566a6a1233c650cf63e354bd900177d860732de79dcbec04d234d6535dd2d130dbb783f1882aea37cd43427623b168d33a8e6d5d8def53f669265c4b7f2de04ec47c86c5fa2bb0db019ddc0f83e78a4735a06d0ef035e7d051aea3eda34a9d038c5b1eed038cd529c84c390ea066ef6e6a2f3140aeeb4401bd935e0587e34b259ebad6df86ad9ae21c6e761cfb9957eb580e6b91593419092eeafb3a402b5c352003406b9d38b24780438225970fc2483faade6b5275ea599d113a21fae3690ef6a73c1d15f905e952b3c2ff66d907ebd85f71b3bb496cb218f871d02f5cf1619a0add070c9d0be93009c610381ac674b42372433ee89ac2b68e57b8099a25053271e7dd86a10b801078aba1cda1539366931fd7e2c389464fa818931a338944aeb58fa8fe7ece1ef935cfcff0f3b3cb9af69a653b485b47b858663cd9b9311a1cdb8d6ef60e7f5a206e07696e288919b57719a723213b01934a308b4d20e58bf52a95de05dfe930209350dc0d7914ec996ed0ed01caf2567f93d9bdbdf9644451e6724c421e2266e8ca1a27d205f8246ddd00dfe02a04bf072bb39add75c92ab0164c8935fa9d78124a00065f0c24b513588a097f8b0be4d514e4d913eb74732741db2a4168b2d8803752958cf8b96a5f44f94d155bc35e218dc4f68a48c221c67d4d085a228be619c60b3c4d214740d230f8338357d42773b5e92332834abe3941a7eee760cebbfdd56afa4ae8180a65c31e934aaeb3e4a54d93135c864c4903c46e3e391b10bea8047350c15317a68b1aa3d72587fe55120722be0f2e982fa33284ec0dc74446835b99b7b7c78979533cf4cd97af4dd38f73df75f974d0df831f894c6e73f19fe5e808c08c"}) mq_getsetattr(r0, &(0x7f0000000040)={0x3ff, 0x1, 0x7ff, 0x0, 0x0, 0x101, 0x8000, 0x7fffffff}, &(0x7f0000000080)) 2018/05/07 22:45:09 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_vs_stats\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:09 executing program 6: getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) getpgid(0xffffffffffffffff) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000180)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/raw6\x00') ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000080)=r0) pread64(r2, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:09 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r1) 2018/05/07 22:45:09 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2, 0x0) sendmmsg$nfc_llcp(r2, &(0x7f00000031c0)=[{&(0x7f0000000180)={0x27, 0x1, 0x0, 0x2, 0xffffffffffffff00, 0x7, "dadb81224924c00d6dd2ae317baa6f6eb59ef3e3c515c971ef81fa6373fad8e912ca278af6ccc11e3c86cb2e9e44e5b4b74d082cfe3d043932014bf6b4e20e", 0xb}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000000280)={0x48, 0x49487963dfd8c6cc, 0x2, "a293df32ba85c59cb526aad06a07bc5f08d92132137f4e5f88cb089ceb603f3987ef822e116cc14c733c1de6d6c1c7996f90860d755105"}, 0x48, 0x10}, {&(0x7f0000001380)={0x27, 0x0, 0x2, 0x7, 0x0, 0x9, "2d120135836be7c35d3ba812cb6f45fe72dcec0261bfe11d9c044b2c01ed8d0c33013256e9dfc40de3c2adcdfcd6f9a0abb6fa7d94b690ea688fd3eb1bc782", 0x37}, 0x60, &(0x7f0000001480)=[{&(0x7f0000001400)="03d83addadecd78b4c6510cd7823c56ed09b56da104482919c0340193a376042ed3a124fb80cba3f563b9bf1ac72362fe627c8ac7181386905c2ef6049a5b1b536bc5a550ad99057814488623432", 0x4e}], 0x1, &(0x7f00000014c0)={0x20, 0x10e, 0x0, "5515f586173da1f1c9da3cb0"}, 0x20}, {&(0x7f0000001500)={0x27, 0x1, 0x1, 0x4, 0x5, 0x1, "bd1d3a79eeb8224a217f6c3517040d0d82821d75ffe56db02bb6ec8155a164ca0de47b71dc032d620db46f21a41bb961a93ccee442b4a893ec89a85045e8a9", 0xb}, 0x60, &(0x7f0000001740)=[{&(0x7f0000001580)="ab3d5732936cddbc436006c460b09882876a7b0b58cf12f352b6ab665b12cc955ab12ae60f09d7c37d15f7db7ff07cb7504c4e73e75d9f6a31c992c04084eb70341216da9d22452adb3a7af980158d263c", 0x51}, {&(0x7f0000001600)="17ab5c843c9b9c8e09989e4e6e527dac3d894a4239fdae6e7baf2aa9659045768d13c2518b06ee186e589d1b99f07f31f051114c5762b91211793960bd068d601a05f6fc6f8869271292eccaff4e4be482b4f0ce7d6b63904e863bf58281ea33ae51ed1c33df7cb50237cf9ce0b1", 0x6e}, {&(0x7f0000001680)="ba83e6e199b9d1481a235a963c1c659a622b55fbe2b1e5982e57ced079efd704508be9c8ad5d951b1d05bc35e7e7d35024474fec2469669cd6bd64e7bb123be9311b4d8494c48add812cdeaa02be6d8aca6eb053b37e0bfa7555e7be0ed48c365ba512fa482d0c6388c1c63cc5962a760287cf126f69ca7e57981c6f8dc8c1237c891f035118c91bc0d342b96edb1bd57315453510992139edd56d17eee61da30a1cf688852929a8c20acaf4374e178a90003718", 0xb4}], 0x3, &(0x7f0000001780)={0x30, 0x0, 0x37eb, "e7ae6c53884b4c4178d78d8dfcf53dda9f1424913f67ffe90586c6cd"}, 0x30, 0x8004}, {&(0x7f00000017c0)={0x27, 0x0, 0x0, 0x7, 0x8, 0x3ff, "e580d344fc8cee373ba0d45fcf112b5a6b391c9df30edb21ab7bdbdbc57e99cccc6a0a763ed6a79d126423e56f75ee42f17db2a2e90de574563604f0ac67da", 0x20}, 0x60, &(0x7f0000001b40)=[{&(0x7f0000001840)="65ceea66d36e72588742b2ff04cb3a4e28cc822ba3a2cf7bbdd5359c80f95ac397e9c4c00e8cfc0adc082ca97e3f8bef284979054b1a1e4131bcab38afc00b40b05b167111686433834ef51206773cc49364ac324e68e0f20278719fe6999e6ef09e586128fcd92fe9da3cd48f04d5d7604fe978fd9a99d7fa965407d2ce09ae61f8896a93173cbc51df35e5498bd02de80b9fa4d693601fcaf05f0c38e714762cc24c3becb0e064b06233536d110ae392da4beca50f662531dcb7fe36cac8b12b22769400aa69360cd93215fa47d55739c5de00027c6cb7907e570520555a0b38e26825989fc3", 0xe7}, {&(0x7f0000001940)="93df66e83989dc63723153f8a333c0fa1e057a5c6caf4bb886dbe0162cb8408506d4f1ef947102c717b19f20575454f14013fa1a2726d18b44311d8ecef7ca5e6fbacecad8c72b3c86c1c9109a76c4b8399e47c684fbc0d7101dc92a92690a659a22470f6d25f3fcc297ffa22db5e9c848d8d3943255e7c651d137fdbd1933a680836b153b815c7cc42b8fbcce0ed47717e79f5c51ca119cf6795f7a846aac466461d35e6aeb783c2ab9ace61d36400e6aa951a61ccd8a9cc3277518ecd89530631299f90e552b6512dfef4509a768ead98bdc1677dcff1be0", 0xd9}, {&(0x7f0000001a40)="7ca6477f6340d30617687370ef4642a5741d9117a35f627d613cbface4c7c1d33edc1c81dc21bebe040a5ae1d106b66ea9781389609ef759d27e5c11aaa3dab86fda9b12c88ad820186432417cd6f97186fcac8b848292c2292b3446629729dcfa8c9070f1e44eef1cc5a202ac50c3cbe95b3802409d45616bdc3cea11abfcb00c02172867a24783bb1dba00b18378f8954ee59162a1867fe975548ac1e6286b6e15853c2b7a47dc9fce817eb3497d74dacc39d709dc1c04646ffe184641843a1bb9d9eadca3c065dee840f35b15fcc57a98c59b68f2", 0xd6}], 0x3, &(0x7f0000001b80)={0x68, 0x119, 0xa13, "ba8e037dafc8e2e161ee48f676def8deda0da203f832987c45cabd7408eb1f38914326ad1ae1eb4f3d4e0458ee70167e4115b848a5d52017d56879b1d6bdb0d9e3f6d945ab083269a8b8846b98679efce6"}, 0x68, 0x4}, {&(0x7f0000001c00)={0x27, 0x0, 0x1, 0x0, 0x1, 0x20, "80890feae0165e63f26bf91cef32b965b6978d09fe826e0b40982b59664420ef49ea6f4477d1dbe415765b6aad24129520032e9bf5b99f5c42fff5533fc211", 0x14}, 0x60, &(0x7f00000020c0)=[{&(0x7f0000001c80)="244e8e6b98379376145b781ca1738549c2c269777c3f756104c59f0dc2e4660b43d1979746c4aae6dc2c9b3b9f070a95d4927e91247aeb87e9daa8170478df2757e4a32b358b39ab7db95da65e6b533df9ca34190366d711e21dc9a7b2c080f433f72c845b910e1834b3f5f90af64d31d7faf3afa82ac50a6bacfceb34c864d373dac3c5a5768ba70fc19954ff21", 0x8e}, {&(0x7f0000001d40)="f4f4f0e74d9f2aebc8d6bc056be0fa83843f332d4a84d52805fb44e699830d88acc6f2c69c777108dc48dc7cceddcc0c260f55630cc286a0785e5106a5a698df17ad07d618c734f9cac9ab6735cc14d70876e72142ad07ef799e58a2e29b831fd37e3684b08d79d6acf707634336fb6fd0ee528a9c1f8d350822ace54980feea8ad1d913ed2af9bca149a1dab4ca4f7fd552335b5ccb2e", 0x97}, {&(0x7f0000001e00)="a7c84b5e85af50667cd4d8358c2616c31816ace79cb81797ebbbe5336cfea7a5a4db599b7c7075", 0x27}, {&(0x7f0000001e40)="7505cdbc0b2320d2441f8d87d6c1537e065f944b4376df649b7df130355ac16ccf36607895738833cc3b3a8e3169ebb0e5cf536990a4f2ac9f5701308d", 0x3d}, {&(0x7f0000001e80)="39762bb741871f12ba5d6da79bed3be245ae7febca4ff2cda937ab4e6256d87c631a41cf4d7d08c082410fa40e8bf9a7e45735ec4a9152f32b852a8127cc3d23a4506a1c55685cc19034b97f567d5590f091fdaf5e733c2b337164eba1657b75055c595d70a4ad08fa25fbc0", 0x6c}, {&(0x7f0000001f00)="a2a9b0412219a3f1e5b20ee6f35ad3b6c345d0ba410a262f77161f810fd7b57a1adabd8a3fca84b803ba24b8ad1a4df6a9e61a7323a4463b7209f883ad60d4", 0x3f}, {&(0x7f0000001f40)="fd8a8f6af839bac10b7cb873efe7910b5659fd02515110ee120e", 0x1a}, {&(0x7f0000001f80)="e5ff0a94c304a80d3c60331f7f98eee69213d19884bcf6839e0aad473c7e715e61583b792c580415fa0b5e719f236e6c43452405fb6942094a3ef1797e9bc4a3d0e157e5c20f65acb7f0ed05d97061bcd8fad8e605165fb1e5c2dc31109751ea6cce", 0x62}, {&(0x7f0000002000)="d0a8e776d2dd66b1bcb57c4b06f14062f39b94ff5fb255fdfef017b9f3e5fb4017e669f6e1a8fd771e5ae433dba5ed714981d8de9cd9493c12e839dd44e524eabaa832a6de3399aaa94de0bf7eceaceb689b77de998aaccd2d8e8bb5d026e0ddd29b33c70391c6a8d6672526b56f9491c8e193a207fe7e82cd658bee792e24fe1fce3bb6d1ac36b41161", 0x8a}], 0x9, &(0x7f0000002180)={0x1010, 0x108, 0x6, "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"}, 0x1010, 0x41}], 0x5, 0x1) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0xd) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r0, r4}) [ 205.560513] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 205.567842] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 205.575173] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 205.582499] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000003e 2018/05/07 22:45:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c00000018000100000000000000400300"], 0x2c}, 0x1}, 0x0) r1 = msgget(0x2, 0x1) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/102) 2018/05/07 22:45:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000002640)={0x2, 0x4e20, @broadcast=0xffffffff}, 0xffffffffffffff11) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r3 = dup2(r0, r2) recvmsg$kcm(r3, &(0x7f00000024c0)={&(0x7f0000000040)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000240)}], 0x6, &(0x7f0000002440)=""/69, 0x45, 0x20}, 0x1) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000002500)=""/255) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:10 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = dup2(r0, r0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) fcntl$getown(r2, 0x9) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:10 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff9, 0x3ff, 0x7fffffff, 0x4, 0x7e}, &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(0xffffffffffffffff) 2018/05/07 22:45:10 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}}, &(0x7f0000000280)=0x84) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0xa7e) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000440)={0x3}) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/route\x00') pread64(r3, &(0x7f00008af000), 0xfffffef6, 0x100000) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x3, 0x6, 0xa8ef, r0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) setregid(r4, r5) 2018/05/07 22:45:10 executing program 5 (fault-call:5 fault-nth:63): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') socket$packet(0x11, 0x2, 0x300) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:10 executing program 1: r0 = socket(0x0, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:10 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 206.273991] FAULT_INJECTION: forcing a failure. [ 206.273991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.286162] CPU: 1 PID: 14284 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 206.293134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.302543] Call Trace: [ 206.305223] dump_stack+0x185/0x1d0 [ 206.308931] should_fail+0x87b/0xab0 [ 206.312828] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 206.317707] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 206.323241] ? is_bpf_text_address+0xb4/0x4b0 [ 206.327866] ? __is_insn_slot_addr+0x198/0x1c0 [ 206.332521] ? kernel_text_address+0x34d/0x3a0 [ 206.337186] ? __kernel_text_address+0x34/0xe0 [ 206.341897] ? __save_stack_trace+0x90d/0xb00 [ 206.346531] alloc_pages_current+0x6b5/0x970 [ 206.351093] __page_cache_alloc+0x95/0x320 [ 206.355445] __do_page_cache_readahead+0x401/0xf20 [ 206.360540] ? kmsan_set_origin_inline+0x6b/0x120 [ 206.365509] ondemand_readahead+0xc6a/0x1210 [ 206.370020] ? generic_file_read_iter+0xb43/0x4440 [ 206.375092] page_cache_sync_readahead+0x1e6/0x740 [ 206.380178] generic_file_read_iter+0xc3c/0x4440 [ 206.385055] blkdev_read_iter+0x20d/0x280 [ 206.389338] ? blkdev_write_iter+0x5f0/0x5f0 [ 206.393818] generic_file_splice_read+0x5d2/0x900 [ 206.398802] ? splice_shrink_spd+0x100/0x100 [ 206.403287] splice_direct_to_actor+0x4c6/0x1040 [ 206.408148] ? do_splice_direct+0x540/0x540 [ 206.412590] ? security_file_permission+0x28f/0x4b0 [ 206.417755] ? rw_verify_area+0x35e/0x580 [ 206.422018] do_splice_direct+0x335/0x540 [ 206.426312] do_sendfile+0x1067/0x1e40 [ 206.430363] SYSC_sendfile64+0x1b3/0x300 [ 206.434565] SyS_sendfile64+0x64/0x90 [ 206.438506] do_syscall_64+0x309/0x430 [ 206.442486] ? SYSC_sendfile+0x320/0x320 [ 206.446633] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 206.451874] RIP: 0033:0x455979 [ 206.455101] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 206.462880] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='children\x00') pread64(r0, &(0x7f00008af000), 0x0, 0xfffff) socket$nl_route(0x10, 0x3, 0x0) 2018/05/07 22:45:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180)=0x5, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x80000001}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0x990, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x100000001}, @in6={0xa, 0x4e21, 0x7a37, @mcast2={0xff, 0x2, [], 0x1}}, @in={0x2, 0x4e21}, @in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e21, 0x80000001, @mcast2={0xff, 0x2, [], 0x1}, 0xcb}, @in={0x2, 0x4e23, @loopback=0x7f000001}], 0xdc) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/07 22:45:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e22, @broadcast=0xffffffff}, 0xfffffffffffffee4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) io_setup(0x7, &(0x7f0000000040)=0x0) io_destroy(r3) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:10 executing program 1: r0 = socket(0x1e, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:10 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x4000) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:10 executing program 6: socketpair(0xb, 0x800, 0x1f, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:10 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0x503000) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x7391, 0x5, 0x7, 0x401, 0x0, 0x101, 0x20000, 0xd, 0x800, 0xffff, 0xa3a, 0xfffffffffffffffe, 0x3, 0xff, 0x8, 0x20, 0x7, 0x2, 0xe0e, 0x100000000, 0x4, 0xac, 0x6, 0x2, 0x10000, 0x9, 0x2, 0x7fff, 0x4, 0x5, 0x5, 0x4, 0x8, 0x100, 0x3f, 0x6a, 0x0, 0x8, 0xa2d78c477424dadf, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x1000, 0x10001, 0x9, 0x0, 0x65a, 0x54c, 0x9}, r2, 0xa, r3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) [ 206.470213] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 206.477533] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 206.484860] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 206.492188] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000003f 2018/05/07 22:45:10 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a0000000000000000000000080015000600bd969e50a389a4d20300"], 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:11 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:11 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/route\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={{0x10, 0x7, 0x389d, 0x10000, 0x7f0000, 0x101}, 0x5, 0x2, 0x3142, 0x0, 0x0, "193baf36eeb86054cf34b6846aeee86af290a78045cde30894a0268f349af0f9b405c2a3da3f385fed49540b1b64b1206686be25a9c2487c41c0c134ff952b84b6d704febb954e29435cd385b53719ebd9cd476ceaeaddbc3c494fe2f6c9b64f96b8cc33277e86ba534b1c18878398ca11f559402801f16e20eb1ecd2d812671"}) pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1, 0xfffffffffffff800}, 0x90) 2018/05/07 22:45:11 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) getitimer(0x3, &(0x7f0000000040)) 2018/05/07 22:45:11 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/route\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:11 executing program 7: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)="8de562e3f4c1ff5f6150a3d06077de9b704859e4c7ebd3355fd89cee2cd91c679e456e11da407fab0f8b99a8cd5d71", 0x2f, 0xfffffffffffffffa) r1 = syz_open_dev$sndpcmp(&(0x7f00000011c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x40) r2 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r0, r2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYPTR=&(0x7f0000001240)=ANY=[@ANYPTR64=&(0x7f0000001200)=ANY=[@ANYRES16=r1, @ANYPTR], @ANYBLOB="da66e261142640abc2fa104f9856e9e0b1f0b008e040645a6b2ce5e4563b5effa4e7ab655271c9ca91", @ANYBLOB="740034330981fb5666965f5fb1c0756fa97bc5d2a3c0681d95cada5611d60bb2e4207995bd07b0f6361d1c650e513de1a8286ce4d6fa1bfd1363d13350bc2356f27597f42b9703d4bb7b4734771bcae9c69a4c5571649bc4bb87738168dabe8a94820efa65db9f1b7070499362aa3c4f5778213d73d5ad8df2fe22c69f95e3abe92be7ff77354cb4826ebdf103e890898795e78d1fb0ff0f24ef730f1240b2e029d63a32fe9e90b54421c0a6382daa8c2ab329a76ccb03aab41b83063df3c57d816b84138f"]], 0x1}, 0x1, 0x0, 0x0, 0x8890}, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x20000, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00000001c0)="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") 2018/05/07 22:45:11 executing program 5 (fault-call:5 fault-nth:64): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x100000001}, 0x1c) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) io_setup(0x5, &(0x7f0000000080)=0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x28280, 0x0) r5 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x20000) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x40800, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000006c0)={@local}, &(0x7f0000000700)=0xc) r7 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x4, 0x10000) r8 = dup2(r1, r2) io_submit(r3, 0x5, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x100000001, r1, &(0x7f00000000c0)="4b3a15ad164d083773a3f76c10f7ba4148fe7c23f41609a7fc8fcb10b17810ddf035c6d7a162aa45e63e829ca17333b918fffde3b7a03fe9795f2d3a0dbcef35fa94ae83c2decc0933b99bc61d479299508d6f885868f4b22960fd2b1ca7", 0x5e, 0x5000000000, 0x0, 0x1, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x8000, r1, &(0x7f00000001c0)="fe6f450b81328735590be4307dbb44a1daec3e03d11b60588c606ac0ce1c1a207719756a4fcfed6da768f3cc4441ed6217aa39a21fcd835d971e5754aceef68f50aeba925c5fd641af8538a1f67cd24d138ce6eec25622c3f4f387e1a99da5074958e4e448fc4adf2394db8dfa045c23a36287d03ed55e8b6ae7317f09ce64292287d5abdf4e713363960bfbe1e2318720b66245bb4e3e760bbd95c29f66f197b0cd22e513f3d6063a92", 0xaa, 0x6, 0x0, 0x1, r5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0xffffffff, r0, &(0x7f0000000340)="29bd0609390fe67782594efc4d51aef4d53b93a71d0062b3e269264123c7558cc6803a37345a4844f571073c054c42186a0914e25abfc478974f215bc1322d9d7ed7202196b003cd2946b8b4f0f259", 0x4f, 0x5, 0x0, 0x1, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x7fff, r2, &(0x7f0000000440)="73cc871618dff8455b7bef438d782ce9a6ce307c513c1cefb775c9b66ab09db94679cd5dfbef0ebecc1a5c379a7d3e09daa69fc2dabeca2f3fabadfcf33af3682edd0e30bec7a3b312827a9ad3613e5bb4c2271f3ef7d8", 0x57, 0x100000000, 0x0, 0x1, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000540)="55099177fd06ce3fe99b681ab9dbb9be8720f400ca31f220291600f4502f75fe7c421356f9aa84a14b44", 0x2a, 0x5, 0x0, 0x1, r8}]) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5336, &(0x7f0000000600)={0x200, 0x0, 0x40, 'queue1\x00', 0x10001}) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x0, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:11 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:11 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)=@delpolicy={0x5c, 0x14, 0x0, 0x70bd25, 0x25dfdbfd, {{@in=@broadcast=0xffffffff, @in=@rand_addr=0x2, 0x4e21, 0x5, 0x4e21, 0xffffffffffffffe1, 0xa, 0x80, 0x20, 0xe, 0x0, r1}, 0x6e6bb5, 0x3}, [@policy_type={0xc, 0x10, {0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1}, 0x0) fcntl$addseals(r0, 0x409, 0xd) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000600)=@get={0x1, &(0x7f0000000440), 0x6c1000000}) r2 = accept(r0, &(0x7f0000000040)=@pptp={0x0, 0x0, {0x0, @broadcast}}, &(0x7f00000000c0)=0x80) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bridge_slave_0\x00'}}) clock_nanosleep(0x1, 0x1, &(0x7f0000000300)={0x0, 0x1c9c380}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f00000001c0)={{0x0, 0x5ca, 0x5, 0x1, 0xb7}, 0xf0, 0xbe, 0x0, 0x9, 0x148, "0842fa243478757b5cef50e7a3e8624939ee9907f8513f51a7c6859b800a0dc991b72640380323cf444b686b5f3d86cd39b56f9a074741c3cce6de9e3e320a98e077ef60b39cf1337b52d0c7e8aa225b9bad338425fbf1f5cf0cc476f69e57a82eafd3c819c62cf9d9b7cc349cd1d48682806c7b4178de0d73a173fe77a94143"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000b80)={0x0, @in6={{0xa, 0x4e24, 0x48, @local={0xfe, 0x80, [], 0xaa}, 0x800}}, 0x2, 0x8, 0x401, 0x3, 0x80}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r3, 0xffffffffffff8000, 0x9, 0xae92}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) sendto$packet(r2, &(0x7f0000000800)="0b2bf4f8d768366804343c9f39998ac9854dab5838d8f09eb7c4b301c79838d84088957aed248be1b64aec5836e321ab009ea433dcebeb486f473075f6563d5072f8c2e99351d804bc9748c877db8335eb2763bac5b3d6394b8cb8d5925988dfbca5312b76ccd2df88ace3", 0x4b, 0x7fe, &(0x7f00000005c0)={0x11, 0x19, r4, 0x1, 0x80000002, 0x6, @random="6fae0764e007"}, 0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @dev}, &(0x7f0000000180)=0xc) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000640)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000440)) 2018/05/07 22:45:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:11 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x400000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:11 executing program 6: pread64(0xffffffffffffffff, &(0x7f00008af000), 0xfffffef6, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0xe5, "6b36b0b47f126230f0a3f7fb56088bbdcbe719f12d249d3ebcce560a655bb57839f5a7ea4767ff79f1eabb6c9ecd44e01ed6041b912b11954f1449ed14a95a72f742d6dd79c87059f47525434f3dfb2ceb5be9363fa8a4fe0ad9d0c9771ec6dd2807442a82807c2a55c9e94baa7ca25a2c6627ac7dd07cad3cef743999272ade803fc8887c4da41f7344cf9632e5963ea0992ad64121e9dbb5ae77b292d6b29d9598c5b125c63db6dc3a369146ddedad9de5c72c9a06a2a910c2993dab4c70c0bf7a6d1fd432298a7e24cfe87fed83cfa4fa4ce168fc2dd484043a9321ec5e6ddd538bde0e"}, &(0x7f0000000140)=0x109) 2018/05/07 22:45:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) fcntl$setpipe(r0, 0x407, 0x0) [ 207.828778] FAULT_INJECTION: forcing a failure. [ 207.828778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.840913] CPU: 0 PID: 14349 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 207.847965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.857371] Call Trace: [ 207.860027] dump_stack+0x185/0x1d0 [ 207.863728] should_fail+0x87b/0xab0 [ 207.867577] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 207.872430] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 207.877856] ? is_bpf_text_address+0xb4/0x4b0 [ 207.882478] ? __is_insn_slot_addr+0x198/0x1c0 [ 207.887140] ? kernel_text_address+0x34d/0x3a0 [ 207.891796] ? __kernel_text_address+0x34/0xe0 [ 207.896516] ? __save_stack_trace+0x90d/0xb00 [ 207.901146] alloc_pages_current+0x6b5/0x970 [ 207.905709] __page_cache_alloc+0x95/0x320 [ 207.910064] __do_page_cache_readahead+0x401/0xf20 [ 207.915105] ? kmsan_set_origin_inline+0x6b/0x120 [ 207.920039] ondemand_readahead+0xc6a/0x1210 [ 207.924584] ? generic_file_read_iter+0xb43/0x4440 [ 207.929638] page_cache_sync_readahead+0x1e6/0x740 [ 207.934712] generic_file_read_iter+0xc3c/0x4440 [ 207.939669] blkdev_read_iter+0x20d/0x280 [ 207.943918] ? blkdev_write_iter+0x5f0/0x5f0 [ 207.948397] generic_file_splice_read+0x5d2/0x900 [ 207.953334] ? splice_shrink_spd+0x100/0x100 [ 207.957818] splice_direct_to_actor+0x4c6/0x1040 [ 207.962667] ? do_splice_direct+0x540/0x540 [ 207.967108] ? security_file_permission+0x28f/0x4b0 [ 207.972259] ? rw_verify_area+0x35e/0x580 [ 207.976529] do_splice_direct+0x335/0x540 [ 207.980850] do_sendfile+0x1067/0x1e40 [ 207.984900] SYSC_sendfile64+0x1b3/0x300 [ 207.989140] SyS_sendfile64+0x64/0x90 [ 207.993089] do_syscall_64+0x309/0x430 [ 207.997080] ? SYSC_sendfile+0x320/0x320 [ 208.001227] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 208.006473] RIP: 0033:0x455979 [ 208.009699] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 208.017471] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:11 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000001c0)=""/120) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$netrom(r1, &(0x7f0000000140)=@full, &(0x7f0000000100)=0x48) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 208.024793] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 208.032111] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 208.039434] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 208.047365] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000040 2018/05/07 22:45:12 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') bind$ax25(r0, &(0x7f0000000000)={0x3, {"b450da86737ff6"}, 0x4}, 0x10) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:12 executing program 5 (fault-call:5 fault-nth:65): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:12 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10003, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x306}, 0x0, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 'teql0\x00'}) 2018/05/07 22:45:12 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioprio_set$uid(0x3, r2, 0x100) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x80, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_delroute={0x28, 0x19, 0x300, 0x70bd2d, 0x25dfdbfc, {0xa, 0x10, 0x80, 0x40, 0x0, 0x4, 0xc8, 0x6, 0x2000}, [@RTA_ENCAP={0xc, 0x16, @typed={0x8, 0x4f, @ipv4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200800000000000002efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fcbdc6ae0b679d3a43fb707b49b7fa18cbf1c150618d048c24d8f9dfa951857778ea9072e5772ec48696249b2ee4207f40a6e439271533ffff00000000e54ead2084cdc3704ff6f6a7462aa5dc953b98640944db8368736858a2532830d3656152d2711197ae2401abe2ffc2e7da38d02e61"], &(0x7f0000000000)) 2018/05/07 22:45:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) gettid() close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup3(r0, r2, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffff7, 0x8002) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) [ 208.409556] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 208.449860] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 208.460268] FAULT_INJECTION: forcing a failure. [ 208.460268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 208.472307] CPU: 0 PID: 14404 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 208.479460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.488864] Call Trace: [ 208.491530] dump_stack+0x185/0x1d0 [ 208.495238] should_fail+0x87b/0xab0 [ 208.499046] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 208.503885] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 208.509337] ? is_bpf_text_address+0xb4/0x4b0 [ 208.513972] ? __is_insn_slot_addr+0x198/0x1c0 [ 208.518645] ? kernel_text_address+0x34d/0x3a0 [ 208.523365] ? __kernel_text_address+0x34/0xe0 [ 208.528091] ? __save_stack_trace+0x90d/0xb00 [ 208.532689] alloc_pages_current+0x6b5/0x970 [ 208.537296] __page_cache_alloc+0x95/0x320 [ 208.541664] __do_page_cache_readahead+0x401/0xf20 [ 208.546724] ? kmsan_set_origin_inline+0x6b/0x120 [ 208.551691] ondemand_readahead+0xc6a/0x1210 [ 208.556233] ? generic_file_read_iter+0xb43/0x4440 [ 208.561305] page_cache_sync_readahead+0x1e6/0x740 [ 208.566386] generic_file_read_iter+0xc3c/0x4440 [ 208.571313] blkdev_read_iter+0x20d/0x280 [ 208.575645] ? blkdev_write_iter+0x5f0/0x5f0 [ 208.580132] generic_file_splice_read+0x5d2/0x900 [ 208.585101] ? splice_shrink_spd+0x100/0x100 [ 208.589582] splice_direct_to_actor+0x4c6/0x1040 [ 208.594429] ? do_splice_direct+0x540/0x540 [ 208.598855] ? security_file_permission+0x28f/0x4b0 [ 208.603956] ? rw_verify_area+0x35e/0x580 [ 208.608221] do_splice_direct+0x335/0x540 [ 208.612516] do_sendfile+0x1067/0x1e40 [ 208.616551] SYSC_sendfile64+0x1b3/0x300 [ 208.620750] SyS_sendfile64+0x64/0x90 [ 208.624696] do_syscall_64+0x309/0x430 [ 208.628674] ? SYSC_sendfile+0x320/0x320 [ 208.632817] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 208.638060] RIP: 0033:0x455979 [ 208.641297] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:45:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') setsockopt$inet_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000040)="2743feae13af8ee720ac2ae3faee24ea", 0x10) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) connect$can_bcm(r0, &(0x7f0000000000)={0x1d}, 0x10) 2018/05/07 22:45:12 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a0000000000000000000000080015000600000008001651d5875c02"], 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:12 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)="6e65742f726f75746500dc9b0836f237f01ddea380e9f5178adeb084e602226c92d890bcfaad7728a00e8daaf6dcef65bae4976678a16ccd1f444f756d4845156847c882f7b699cac0a7eaed06607ec48640bdfac9e78c4b5050996c181b6fe298090b7042b4f5d172724831874d00415b0992bc141a43947659431b9c4c5dbfcca599a15ce71f5c7b011c1da7d4dc2a8c115e6bbeb5235259f255dc64cefd78ad9776707b4c1c1b") getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2, 0xffff}, &(0x7f00000000c0)=0x8) pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:12 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x0, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:12 executing program 3: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)=""/152) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r0, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) [ 208.649109] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 208.656437] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 208.663760] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 208.671086] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 208.678413] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000041 2018/05/07 22:45:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x10000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0x1, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000140)={r3, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e1c, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000080)=0x2b3, 0x4) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000180)=0x80000001, 0x4) listen$netrom(r2, 0x10001) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r4, 0x0) [ 208.733601] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 208.795937] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:45:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f0000000000), 0xfffffffffffffe73, 0xfffffffffffffffd) 2018/05/07 22:45:13 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/route\x00') r2 = accept4$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x800) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000340)=""/4096, &(0x7f0000000080)=0x1000) fdatasync(r2) fcntl$setstatus(r1, 0x4, 0x2800) pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:13 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x0, 0x1, 0xfffffffffffffffe, &(0x7f0000000040)=[0x0], 0x1}, 0x20) ioctl$TIOCEXCL(r2, 0x540c) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e38026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:13 executing program 5 (fault-call:5 fault-nth:66): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a0000000000000000000000080015aaa70000000800160004000300"], 0x2c}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x100, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/65) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x19, "04167fc059ecdfbd990224557a10d9e04edeebcc2e878f3618"}, &(0x7f0000000180)=0x21) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x4, 0x37bc, 0x3b, 0x7fff, 0x9, 0xffff, 0x3, {r3, @in6={{0xa, 0x4e20, 0x100, @loopback={0x0, 0x1}, 0x6}}, 0x3, 0x4, 0x6, 0x100000000, 0x6}}, &(0x7f0000000300)=0xb0) 2018/05/07 22:45:13 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xd0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x8001, 0xfffffffffffffffc, 0x4, 0x9, 0xce}, &(0x7f0000000380)=0x98) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f00000001c0)=""/130, 0x7}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) sendto$llc(r5, &(0x7f0000000080)="4d4fa0ccada9951c62cbd97bbecaa89ed684623ab5b2c8a35b25d3d6dd8df38210845efe235c8d71a0f44ede5535d46d3755d8b510be7bb00ae3f585fb89c41487ebe23d83b539b444a1995c50eda056aa5d48ad0ca482adce899e212463690735cb3e9f95e7b89cfe5eb3ecc80f8c9c2207ef2f9147d1a67d3a74674772abfd9cdbdfcef7978c8590b31147d9d4b68dd24bc238273f93093b4d1c4e1c57a565fcc43cc7823f2886f99c3e784fd3cf782eb1ca3379711b9b63ee137dde4ef758d5e50f2e5c9342055f0acb8c3a1f3f2b067f24d4b048bf", 0xd7, 0x80, &(0x7f0000000180)={0x1a, 0xffff, 0x7fffffff, 0x5, 0x401, 0x7fff, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @local}, &(0x7f00000005c0)=0xc) bind(r5, &(0x7f0000000600)=@hci={0x1f, r6, 0x3}, 0x80) listen(r2, 0x0) [ 209.360569] FAULT_INJECTION: forcing a failure. [ 209.360569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.373194] CPU: 0 PID: 14457 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 209.380456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.389974] Call Trace: [ 209.392642] dump_stack+0x185/0x1d0 [ 209.396476] should_fail+0x87b/0xab0 [ 209.400322] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 209.405358] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 209.410813] ? is_bpf_text_address+0xb4/0x4b0 [ 209.415395] ? __is_insn_slot_addr+0x198/0x1c0 [ 209.420064] ? kernel_text_address+0x34d/0x3a0 [ 209.424747] ? __kernel_text_address+0x34/0xe0 [ 209.429580] ? __save_stack_trace+0x90d/0xb00 [ 209.434177] alloc_pages_current+0x6b5/0x970 [ 209.438884] __page_cache_alloc+0x95/0x320 [ 209.443463] __do_page_cache_readahead+0x401/0xf20 [ 209.448562] ? kmsan_set_origin_inline+0x6b/0x120 [ 209.453544] ondemand_readahead+0xc6a/0x1210 [ 209.455851] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 209.458226] ? generic_file_read_iter+0xb43/0x4440 [ 209.458319] page_cache_sync_readahead+0x1e6/0x740 [ 209.476814] generic_file_read_iter+0xc3c/0x4440 [ 209.481762] blkdev_read_iter+0x20d/0x280 [ 209.486009] ? blkdev_write_iter+0x5f0/0x5f0 [ 209.490490] generic_file_splice_read+0x5d2/0x900 [ 209.495418] ? splice_shrink_spd+0x100/0x100 [ 209.499894] splice_direct_to_actor+0x4c6/0x1040 [ 209.504742] ? do_splice_direct+0x540/0x540 [ 209.509174] ? security_file_permission+0x28f/0x4b0 [ 209.514401] ? rw_verify_area+0x35e/0x580 [ 209.518772] do_splice_direct+0x335/0x540 [ 209.523058] do_sendfile+0x1067/0x1e40 [ 209.527103] SYSC_sendfile64+0x1b3/0x300 [ 209.531319] SyS_sendfile64+0x64/0x90 [ 209.535271] do_syscall_64+0x309/0x430 [ 209.539267] ? SYSC_sendfile+0x320/0x320 [ 209.543418] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 209.548674] RIP: 0033:0x455979 [ 209.551918] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 2018/05/07 22:45:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a0000000000515d5c346cb5626af175dcb45962544500000800160004000300"], 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c0000041800010300000000000000000a000000000000000000000008001500060000000800160004000300"], 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:13 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f0000000000), 0x29a, 0x0) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000000)='net/unix\x00') 2018/05/07 22:45:13 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x10000, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) delete_module(&(0x7f0000000040)=',\x00', 0x0) 2018/05/07 22:45:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') accept$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r1}) pread64(r0, &(0x7f0000000080), 0x0, 0x8) [ 209.559701] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 209.567027] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 209.574358] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 209.581680] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 209.588999] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000042 2018/05/07 22:45:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) ustat(0xfffffffffffffff9, &(0x7f0000000040)) 2018/05/07 22:45:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@get={0x110, 0x13, 0x400, 0x70bd2d, 0x25dfdbff, {{'fpu(xts-twofish-3way)\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x800}, {0x8, 0x1, 0x272f}, {0x8, 0x1, 0xfffffffffffffffb}, {0x8, 0x1, 0x80}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x995d}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x80) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r3, 0x0) [ 209.806978] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 209.854724] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:45:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0x8, 0x2, 0x8001, 'queue0\x00', 0x9}) fstatfs(r0, &(0x7f00000000c0)=""/228) read(r0, &(0x7f0000000200)=""/227, 0xe3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00', 0x800}) 2018/05/07 22:45:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x0, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000000)={0x1ff, 0x1}) 2018/05/07 22:45:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x867d, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0x7ff, {{0xa, 0x4e20, 0x7fffffff, @dev={0xfe, 0x80, [], 0x21}, 0x9}}, 0x1, 0x4, [{{0xa, 0x4e23, 0x81, @empty, 0x5}}, {{0xa, 0x4e22, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, {{0xa, 0x4e24, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}, {{0xa, 0x4e20, 0x7ff, @remote={0xfe, 0x80, [], 0xbb}}}]}, 0x290) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:14 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:14 executing program 5 (fault-call:5 fault-nth:67): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000)={0x10}, 0xfffffffffffffdb5, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)=@full, &(0x7f0000000100)=0x48, 0x800) ioctl$sock_netrom_TIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) open_by_handle_at(r0, &(0x7f0000000040)={0x4c, 0x5b, "30e4ec3b5e0b5e52ea974f2010e93c6b1e55d58d6b61aae2123603d7f51ceb5985a142a8f90d3565a9d45f7b18f0ec59997a32e723237453cf5477813ed9e62b5a152dc2"}, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, &(0x7f0000000100)}, 0x10) [ 210.232422] FAULT_INJECTION: forcing a failure. [ 210.232422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 210.244488] CPU: 0 PID: 14518 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 210.251463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.260869] Call Trace: [ 210.263537] dump_stack+0x185/0x1d0 [ 210.267252] should_fail+0x87b/0xab0 [ 210.271055] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 210.275904] ? __msan_metadata_ptr_for_load_4+0x10/0x20 2018/05/07 22:45:14 executing program 0: syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000000)='smaps\x00') [ 210.281361] ? is_bpf_text_address+0xb4/0x4b0 [ 210.285945] ? __is_insn_slot_addr+0x198/0x1c0 [ 210.290612] ? kernel_text_address+0x34d/0x3a0 [ 210.295287] ? __kernel_text_address+0x34/0xe0 [ 210.300004] ? __save_stack_trace+0x90d/0xb00 [ 210.304601] alloc_pages_current+0x6b5/0x970 [ 210.309162] __page_cache_alloc+0x95/0x320 [ 210.313528] __do_page_cache_readahead+0x401/0xf20 [ 210.318591] ? kmsan_set_origin_inline+0x6b/0x120 [ 210.323655] ondemand_readahead+0xc6a/0x1210 [ 210.328167] ? generic_file_read_iter+0xb43/0x4440 [ 210.333232] page_cache_sync_readahead+0x1e6/0x740 [ 210.338347] generic_file_read_iter+0xc3c/0x4440 [ 210.343230] blkdev_read_iter+0x20d/0x280 [ 210.347705] ? blkdev_write_iter+0x5f0/0x5f0 [ 210.352200] generic_file_splice_read+0x5d2/0x900 [ 210.357193] ? splice_shrink_spd+0x100/0x100 [ 210.361685] splice_direct_to_actor+0x4c6/0x1040 [ 210.366539] ? do_splice_direct+0x540/0x540 [ 210.369545] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 210.370975] ? security_file_permission+0x28f/0x4b0 [ 210.371062] ? rw_verify_area+0x35e/0x580 [ 210.371139] do_splice_direct+0x335/0x540 [ 210.391950] do_sendfile+0x1067/0x1e40 [ 210.396000] SYSC_sendfile64+0x1b3/0x300 [ 210.400192] SyS_sendfile64+0x64/0x90 [ 210.404127] do_syscall_64+0x309/0x430 [ 210.408100] ? SYSC_sendfile+0x320/0x320 [ 210.411257] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 210.412227] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 210.412259] RIP: 0033:0x455979 2018/05/07 22:45:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:14 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/route\x00') ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x1, 0x0, 0x10001, 0x4}, {0x7ff, 0x80000001, 0x3, 0x8000}, {0x0, 0xd2, 0x401, 0x9a1}, {0x100000001, 0x4, 0x8, 0xfffffffffffff000}]}) pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:14 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x14) readahead(r0, 0x7, 0x5) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c18d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6000000000000000000"], &(0x7f0000000000)) socketpair$inet6(0xa, 0x4, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x1c) 2018/05/07 22:45:14 executing program 6: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000300)='nt/route\x00') pread64(r1, &(0x7f00008af000), 0x0, 0x0) [ 210.412275] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 210.435823] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 210.443141] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 210.450465] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 210.457786] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 210.465105] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000043 2018/05/07 22:45:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={r1, 0x6, 0x1, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) fstat(r2, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000140)={0x1, 0x6}) socket$vsock_dgram(0x28, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r3, 0x0) 2018/05/07 22:45:14 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a0d00000000000000000000080015000622dafbf53c72f8a58e09a00000000500000004000300dfd574a56da0ade76e9f1f2f26e70d015c05fab16e275ab5d1ed57276526ce9d2737837a6efc3a4d4e444c550600000000000000f5adddd90c86aa528d052e6cdbbec5e83d8e43aed6bbd726"], 0x2c}, 0x1}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002340)={0xffffffff, 0x2, 0x8}, 0xc) socketpair$ax25(0x3, 0x7, 0xcf, &(0x7f0000002380)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002400)='/dev/audio\x00', 0x2000, 0x0) r1 = dup(r0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000100)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002140)=[{{&(0x7f0000000140)=@ax25, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1, &(0x7f0000000300)=""/202, 0xca, 0x4}, 0x728}, {{&(0x7f0000000400), 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/40, 0x28}, {&(0x7f00000004c0)=""/16, 0x10}, {&(0x7f0000000500)=""/120, 0x78}, {&(0x7f0000000580)=""/10, 0xa}, {&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000640)=""/17, 0x11}, {&(0x7f0000000680)=""/234, 0xea}], 0x7, &(0x7f0000000800)=""/135, 0x87, 0x6}, 0x2}, {{&(0x7f00000008c0)=@sco, 0x80, &(0x7f0000000980)=[{&(0x7f0000000940)=""/29, 0x1d}], 0x1, &(0x7f00000009c0)=""/143, 0x8f, 0x3}, 0x6}, {{&(0x7f0000000a80)=@hci={0x0, 0x0}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/64, 0x40}], 0x1, &(0x7f0000000b80)=""/4096, 0x1000, 0x84}, 0x7ff}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c00)=""/152, 0x98}, {&(0x7f0000001cc0)=""/45, 0x2d}, {&(0x7f0000001d00)=""/10, 0xa}, {&(0x7f0000001d40)=""/225, 0xe1}], 0x4, &(0x7f0000001e80)=""/56, 0x38, 0x4}, 0xffffffffffffffe0}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/156, 0x9c}], 0x2, &(0x7f0000002080)=""/162, 0xa2, 0x3}, 0x1}], 0x6, 0x40000100, &(0x7f00000022c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002300)={'syzkaller0\x00', r2}) 2018/05/07 22:45:14 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(0xffffffffffffffff) 2018/05/07 22:45:14 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000080)) write$binfmt_elf32(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x3b5) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = syz_open_procfs(r0, &(0x7f0000000300)='net/route\x00') ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000000c0)) pread64(r3, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:14 executing program 6: pread64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xf) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x0) 2018/05/07 22:45:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x4, 0x40000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x100000000, 0x3, 0x4, 0x6256967, 0x34, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x5}}, 0x100, 0x800, 0x80000001, 0xffffffffffffff80, 0x10}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x8, 0x5, 0x7ff, 0x5, r4}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000), 0xfffffffffffffd96) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:15 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(0xffffffffffffffff) 2018/05/07 22:45:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x400, 0x10000, 0x7}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x2}, &(0x7f0000000200)=0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e22, 0xe4, @empty, 0x4}}, 0x84, 0x4}, &(0x7f0000000140)=0x90) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000180001030000ff0bcd91063f13456c4cb4eddd0000000000000a0000000000000048001500060000000800bcb333180300"], 0x2c}, 0x1}, 0x0) r1 = semget(0x3, 0x2, 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) 2018/05/07 22:45:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x20000000}) pread64(r0, &(0x7f0000000000), 0x0, 0x100000) 2018/05/07 22:45:15 executing program 2: perf_event_open(&(0x7f0000012000)={0x0, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:15 executing program 5 (fault-call:5 fault-nth:68): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:15 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000240), &(0x7f0000000280)=0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @mcast1={0xff, 0x1, [], 0x1}, 0x101}}, 0x2, 0x9, 0x400, 0x7, 0x7}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x1000, 0x0, 0x3, 0xa69}, &(0x7f0000000200)=0x18) r3 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e2c5eaf62ce1278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a64ec42084cdc3306073b78088"], &(0x7f0000000000)) 2018/05/07 22:45:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) dup3(r0, r0, 0x80000) r1 = syz_open_pts(0xffffffffffffffff, 0x10000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000040)=0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x80) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f00000000c0)=0xfffffffffffffffa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5f, 0x42902) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0xffffffffffffffff) listen(r3, 0x0) [ 211.774885] FAULT_INJECTION: forcing a failure. [ 211.774885] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.786956] CPU: 0 PID: 14602 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 211.793942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.803350] Call Trace: [ 211.806019] dump_stack+0x185/0x1d0 [ 211.809731] should_fail+0x87b/0xab0 [ 211.813536] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 211.818370] ? __msan_metadata_ptr_for_load_4+0x10/0x20 2018/05/07 22:45:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x9) shutdown(r0, 0x1) socket(0x5, 0x0, 0xffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x1}, 0x1}, 0x0) [ 211.823808] ? is_bpf_text_address+0xb4/0x4b0 [ 211.828389] ? __is_insn_slot_addr+0x198/0x1c0 [ 211.833056] ? kernel_text_address+0x34d/0x3a0 [ 211.837717] ? __kernel_text_address+0x34/0xe0 [ 211.842382] ? __save_stack_trace+0x90d/0xb00 [ 211.846969] alloc_pages_current+0x6b5/0x970 [ 211.851533] __page_cache_alloc+0x95/0x320 [ 211.855893] __do_page_cache_readahead+0x401/0xf20 [ 211.860953] ? kmsan_set_origin_inline+0x6b/0x120 [ 211.865936] ondemand_readahead+0xc6a/0x1210 [ 211.870480] ? generic_file_read_iter+0xb43/0x4440 2018/05/07 22:45:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r1, 0xffffffffffffffff) [ 211.875531] page_cache_sync_readahead+0x1e6/0x740 [ 211.880604] generic_file_read_iter+0xc3c/0x4440 [ 211.885534] blkdev_read_iter+0x20d/0x280 [ 211.889791] ? blkdev_write_iter+0x5f0/0x5f0 [ 211.894284] generic_file_splice_read+0x5d2/0x900 [ 211.899257] ? splice_shrink_spd+0x100/0x100 [ 211.903736] splice_direct_to_actor+0x4c6/0x1040 [ 211.908597] ? do_splice_direct+0x540/0x540 [ 211.913035] ? security_file_permission+0x28f/0x4b0 [ 211.918186] ? rw_verify_area+0x35e/0x580 2018/05/07 22:45:15 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20400, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f000070ffe3)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f000023effe), 0x0, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$int_in(r2, 0x541d, &(0x7f00000002c0)=0xfffffffffffffffd) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000ae7ff4)={0x80000004}) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0xffff, 0xcb6, 0x7, 0xf4f, 0xec}, 0x98) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r4, &(0x7f00008af000), 0xfffffef6, 0x100000) fgetxattr(r4, &(0x7f0000000180)=@random={'system.', 'net/route\x00'}, &(0x7f00000001c0)=""/172, 0xac) [ 211.922461] do_splice_direct+0x335/0x540 [ 211.926764] do_sendfile+0x1067/0x1e40 [ 211.930816] SYSC_sendfile64+0x1b3/0x300 [ 211.935030] SyS_sendfile64+0x64/0x90 [ 211.938986] do_syscall_64+0x309/0x430 [ 211.942974] ? SYSC_sendfile+0x320/0x320 [ 211.947122] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 211.952376] RIP: 0033:0x455979 [ 211.955612] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 211.963395] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 211.970722] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 211.978054] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 211.985384] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 211.992706] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000044 2018/05/07 22:45:16 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x90c9, 0x7fffffff, 0x9}) 2018/05/07 22:45:16 executing program 6: r0 = fanotify_init(0x20, 0x0) fallocate(r0, 0x2, 0x8, 0x800) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1, 0x2, 0x0, 0x4}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="444ec28acc1ce1569fb2e4c786412ab31df65de8c37d72034afb66400107c0be12a61acb6455edd7fd112ee5038746f3f2885f317504fcd83faf6041ed714788bc63f5d6698ca64d8ac7a039598203ab0a761da9276df98fd9ddfe506516ebfe0e1b4a6a91037046ad3d2ef5c5e799016072201c2996de2e6fd61ce3fbdf75e94434319171f96d7b7a405b3cb386e60d7c9e7f9a", 0x94}, {&(0x7f0000000140)="05a151f40c76620d6669c6b304c4344756505dcb78a86643c451cd2051a3df82d4fd0f00ce589116b289d3cc6b36970e5e362f4edd61865aea062bd2531e5e5eaad016157b1028b3e4ea3a7de7c8c026bfbd42a33ab03a58c19511d3fdd47a13b1672a896d7dabca91d37ab7b992a0bd3ca3209326cf6cf45eb73fdceb036b41a6db7462", 0x84}, {&(0x7f0000000200)="150d23f11d74bc09b32a41a5fe161176ce296cd9cc1d3e823f3ad710bb3e4b40e565adc07dcdf9862f0be0c9bd09f285748c9e0c6c95aa2ab69ebfc559c191e7b6967759fb658fa43f", 0x49}, {&(0x7f0000000280)="3a9a05f196a0006562b0de9c08f1f05f15a772fd65c54b91db4a2aa05c950a1ff4c4f01ca33d7d3b5a19955e003df59ca9d0624944d44676ed488dbde1234ea9edce2fe7da30dace8172d43c757866d951e9", 0x52}, {&(0x7f0000000340)="1c26cb57d9b31ca44ee1b20a8bbd77fa90b0d3860b90d82c053855d37b40120f0d6c2f088c0c183c62b3846382c1709660203a91d7ba00", 0x37}], 0x5, &(0x7f0000000400), 0xfffffffffffffeda, 0x4001}, 0x4000000) pread64(r1, &(0x7f0000000080), 0x0, 0x0) 2018/05/07 22:45:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xb90a, 0x400000) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:16 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000500edcd174fcda200000000000000000000000a000000ffffffffffffffff08001500060000000800160004000300dee662721c4ca9b6657691eb94300aac89640e6c161ae04e883816dfb12e374a93cf8a5be9fae6e4fb5e46d5e2a1b109a6906303ef5b6d9771be38fa1e66b3073e4572a92849a04a2d79e5c193ae49fdf1ee6cb86d"], 0x2c}, 0x1}, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000040)={0x8, 0x45a3a00f, 0x2, 0x10000, 0x9, [{0x8, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x2080}, {0x800, 0x7, 0x401, 0x0, 0x0, 0x800}, {0x3, 0xffffffffffffffff, 0x7ff, 0x0, 0x0, 0x480}, {0x0, 0x7d, 0x6}, {0x7fff, 0x200, 0xfd2f147, 0x0, 0x0, 0x405}, {0x1, 0x7, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3d, 0x7}, {0x8, 0x0, 0x6, 0x0, 0x0, 0x200}, {0x1000, 0xffffffffffff8001, 0x100000000, 0x0, 0x0, 0x1000}]}) 2018/05/07 22:45:16 executing program 5 (fault-call:5 fault-nth:69): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:16 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x80000000, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x57ab, 0x40) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) 2018/05/07 22:45:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f0000000000), 0x0, 0x100000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) 2018/05/07 22:45:16 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x64, "a95b156092e35fa424310a158506f7be0e6bc88de3432770719ba3c7d8f280646536e54e1cdd82cbcd804cf01cd9dc9dbd3ecd79e8ac878f17d1fc04bfccb74bd338cde4c0e17961da5bf56f25bdca3fc26a9dfea6d14dbb9b4fc394533c852b8bb33de7"}, &(0x7f0000000080)=0x6c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x3, 0x9, [0x9, 0x5, 0x7, 0x5, 0x7dc1a6c2, 0x1, 0xfffffffffffffffd, 0x9, 0x80000000]}, &(0x7f0000000240)=0x1a) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x7a, 0x20, 0x678, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x53d, 0x40, {r3, @in6={{0xa, 0x4e22, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x30}}, 0x101, 0x4, 0x6, 0xfffffffffffffff7, 0x9}}, &(0x7f0000000340)=0xb0) r4 = syz_open_procfs(r0, &(0x7f00000000c0)='net/raw\x00') ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000040)=0x6) pread64(r4, &(0x7f00008af000), 0xfffffef6, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) 2018/05/07 22:45:16 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(0xffffffffffffffff) 2018/05/07 22:45:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x90002, 0x8) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0xd4cd}}, [0x3ff, 0xfe, 0x8, 0x64, 0x0, 0x7, 0x2, 0x4, 0x9, 0x100, 0x5, 0x200, 0xe, 0x5, 0x80000000]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r4, 0x3}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x1, 0x3, 0x8, r6}, &(0x7f00000001c0)=0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r8 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x101201) recvfrom$llc(r8, &(0x7f0000000080)=""/27, 0x1b, 0x100, &(0x7f00000000c0)={0x1a, 0x17, 0xaf1, 0x9, 0x2, 0x7, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x2) listen(r7, 0x0) 2018/05/07 22:45:16 executing program 2: perf_event_open(&(0x7f0000012000)={0x0, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) [ 212.817354] FAULT_INJECTION: forcing a failure. [ 212.817354] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.829410] CPU: 1 PID: 14662 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 212.836385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.845788] Call Trace: [ 212.848450] dump_stack+0x185/0x1d0 [ 212.852152] should_fail+0x87b/0xab0 [ 212.855952] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 212.860964] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 212.866400] ? is_bpf_text_address+0xb4/0x4b0 [ 212.870977] ? __is_insn_slot_addr+0x198/0x1c0 [ 212.875656] ? kernel_text_address+0x34d/0x3a0 [ 212.880321] ? __kernel_text_address+0x34/0xe0 [ 212.885040] ? __save_stack_trace+0x90d/0xb00 [ 212.889630] alloc_pages_current+0x6b5/0x970 [ 212.894196] __page_cache_alloc+0x95/0x320 [ 212.898580] __do_page_cache_readahead+0x401/0xf20 [ 212.903656] ? kmsan_set_origin_inline+0x6b/0x120 [ 212.908657] ondemand_readahead+0xc6a/0x1210 2018/05/07 22:45:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) fchownat(r0, &(0x7f0000000000)='./file0\x00', r1, r2, 0x1800) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x4}, 0x8) [ 212.913222] ? generic_file_read_iter+0xb43/0x4440 [ 212.918284] page_cache_sync_readahead+0x1e6/0x740 [ 212.923392] generic_file_read_iter+0xc3c/0x4440 [ 212.928339] blkdev_read_iter+0x20d/0x280 [ 212.932600] ? blkdev_write_iter+0x5f0/0x5f0 [ 212.937086] generic_file_splice_read+0x5d2/0x900 [ 212.942066] ? splice_shrink_spd+0x100/0x100 [ 212.946552] splice_direct_to_actor+0x4c6/0x1040 [ 212.951417] ? do_splice_direct+0x540/0x540 [ 212.956794] ? security_file_permission+0x28f/0x4b0 [ 212.961910] ? rw_verify_area+0x35e/0x580 [ 212.966188] do_splice_direct+0x335/0x540 [ 212.970503] do_sendfile+0x1067/0x1e40 [ 212.974560] SYSC_sendfile64+0x1b3/0x300 [ 212.978778] SyS_sendfile64+0x64/0x90 [ 212.982745] do_syscall_64+0x309/0x430 [ 212.986755] ? SYSC_sendfile+0x320/0x320 [ 212.990903] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 212.996143] RIP: 0033:0x455979 [ 212.999373] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 213.007154] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') pread64(r0, &(0x7f0000000040), 0x0, 0x0) 2018/05/07 22:45:17 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r4 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x3ff800, 0x400000) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000540)={0x5, 0x1, 0x0, 0x7b, &(0x7f0000000380)=""/123, 0xd4, &(0x7f0000000400)=""/212, 0x15, &(0x7f0000000500)=""/21}) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)=0x0) setresuid(r2, r3, r5) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:17 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a000000000000000000080000000000000000000800160004000300"], 0x2c}, 0x1}, 0x0) [ 213.014478] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 213.021798] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 213.029126] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 213.036451] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000045 2018/05/07 22:45:17 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) r2 = getpgid(0xffffffffffffffff) fcntl$setown(r0, 0x8, r2) fallocate(r0, 0x3, 0x5, 0x2) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7fffffff, 0x20040) 2018/05/07 22:45:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet6(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)={0x303, 0x33}, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000040)="63f805122ed121ace6bec0e6ddc8c2467b34bac0fa7337a9ff528e2e1ace5798a9928d88a24b526c2adcf5ee0bf9598247afeac9b8a3168b15b29ec55944e3b271baa877770da3efc058ce1467aa7554488851b32999b38854c2ff71a511c17eca3344bc83d720e56ea5436a64977f40acf3b1dcfd3675446f84dc04eba4e96609754bbe074fa0f674e9a9c4ec443e059b51036af9777ce133431c0463d0855c7945dfd32f01d71b488099272812050305a7ffa5233c05c151a074b8090f121a36a1244cb07ebb88bb6f1a2164e1d054408e125be1cd2a6781", 0xd9) listen(r0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000240), &(0x7f00000002c0)=0xc) listen(r2, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000012c0)=""/4096, &(0x7f0000000140)=0x1000) [ 213.142634] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. [ 213.170263] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/07 22:45:17 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) tkill(r1, 0x3f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925da520e165bccf3e959aa9918d51fe74139fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec420"], &(0x7f0000000000)) 2018/05/07 22:45:17 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x452400, 0xc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000100)={0x1, 0x3, 0x10000, 0x0, 0x0, [], [], [], 0x5ec7f511, 0x3}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 213.415983] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 213.434928] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:45:17 executing program 6: pread64(0xffffffffffffffff, &(0x7f00008af000), 0xfffffef6, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) 2018/05/07 22:45:17 executing program 5 (fault-call:5 fault-nth:70): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = socket$unix(0x1, 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) pread64(r1, &(0x7f00008af000), 0x0, 0x100000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 2018/05/07 22:45:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffdbd, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x80000000, @local={0xfe, 0x80, [], 0xaa}, 0x80000001}}}, 0x2db) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x6) 2018/05/07 22:45:17 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffe) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:17 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000002c0)=0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, 0x11, 0x0, 0x70bd29, 0x25dfdbfd, {0x16}, [@generic="e79cee789eb79094cfd42e589323be874279242183f7a4dc81ac7cbf1e78e5c3c79546f598a2169d83a1c78e27daf848b22c1e0e7b0656fe3e9b6ec68d76021b6460c887648d13f94135e93f166039e960621676ec192c6f258a22e46ef5077669a5fe8145e16cb1ae46a57fb97382aa33c9149d83cd24d6e3540115048178ff4bce43f8c6cbd5fb48b9e636674e9e3dab0cba"]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) 2018/05/07 22:45:17 executing program 1: perf_event_open(&(0x7f0000012000)={0x0, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:17 executing program 2: perf_event_open(&(0x7f0000012000)={0x0, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) [ 213.811658] FAULT_INJECTION: forcing a failure. [ 213.811658] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.827739] CPU: 0 PID: 14728 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 213.834718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.844121] Call Trace: [ 213.846786] dump_stack+0x185/0x1d0 [ 213.850491] should_fail+0x87b/0xab0 [ 213.854297] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 213.859146] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 213.864594] ? is_bpf_text_address+0xb4/0x4b0 [ 213.869193] ? __is_insn_slot_addr+0x198/0x1c0 [ 213.873873] ? kernel_text_address+0x34d/0x3a0 [ 213.878548] ? __kernel_text_address+0x34/0xe0 [ 213.883296] ? __save_stack_trace+0x90d/0xb00 [ 213.887920] alloc_pages_current+0x6b5/0x970 [ 213.892486] __page_cache_alloc+0x95/0x320 [ 213.896858] __do_page_cache_readahead+0x401/0xf20 [ 213.901924] ? kmsan_set_origin_inline+0x6b/0x120 [ 213.906908] ondemand_readahead+0xc6a/0x1210 [ 213.911408] ? generic_file_read_iter+0xb43/0x4440 [ 213.916461] page_cache_sync_readahead+0x1e6/0x740 [ 213.921516] generic_file_read_iter+0xc3c/0x4440 [ 213.926377] blkdev_read_iter+0x20d/0x280 [ 213.930668] ? blkdev_write_iter+0x5f0/0x5f0 [ 213.935138] generic_file_splice_read+0x5d2/0x900 [ 213.940082] ? splice_shrink_spd+0x100/0x100 [ 213.944561] splice_direct_to_actor+0x4c6/0x1040 [ 213.949412] ? do_splice_direct+0x540/0x540 [ 213.953818] ? security_file_permission+0x28f/0x4b0 [ 213.958967] ? rw_verify_area+0x35e/0x580 [ 213.963253] do_splice_direct+0x335/0x540 [ 213.967573] do_sendfile+0x1067/0x1e40 [ 213.971641] SYSC_sendfile64+0x1b3/0x300 [ 213.975853] SyS_sendfile64+0x64/0x90 [ 213.979791] do_syscall_64+0x309/0x430 [ 213.983761] ? SYSC_sendfile+0x320/0x320 [ 213.987893] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 213.993132] RIP: 0033:0x455979 [ 213.996363] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 214.004140] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 2018/05/07 22:45:17 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2e00d7a9180f010300008100000400000a00000000000000050783970dba0e54"], 0x2c}, 0x1}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r2, 0x3b, "05e6f46aaf22e71852bb92d395e1e32e7301b67e346ae2f3778a07113c79fffd25c04889fdd28bad8d64fd2baa6b12daee661c81ab409f462f9bd1"}, &(0x7f00000001c0)=0x43) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={{r3, r4/1000+30000}}) 2018/05/07 22:45:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) bind$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, {0x5, 0x2, 0xdaa, 0x6, 0x7ff, 0x392}, 0x260}, 0xa) listen(r2, 0x0) 2018/05/07 22:45:17 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 214.011468] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 214.018782] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 214.026109] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 214.033441] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000046 2018/05/07 22:45:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) 2018/05/07 22:45:18 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) setpriority(0x1, r0, 0x1c) syz_open_dev$random(&(0x7f0000000100)='/dev/random\x00', 0x0, 0x400000) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/softnet_stat\x00') pread64(r2, &(0x7f00008af000), 0xfffffef6, 0x0) ptrace$setopts(0x4206, r1, 0x5, 0x63) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x400000, 0x0) 2018/05/07 22:45:18 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:18 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x5c}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e20, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}}, &(0x7f0000000440)=0x84) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x400) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r3) r4 = getpid() r5 = syz_open_procfs(r4, &(0x7f0000000300)='net/route\x00') pread64(r5, &(0x7f00008af000), 0xfffffef6, 0x100000) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x0, 0x21, 0x2, 0x9}, 0x8) bind$ipx(r5, &(0x7f0000000000)={0x4, 0xb3d, 0x7, "4934271c7c84", 0x81}, 0x10) recvfrom$inet(r2, &(0x7f00000001c0)=""/173, 0xad, 0x2161, &(0x7f0000000280)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) 2018/05/07 22:45:18 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2008080594e685e669072be64392efa4f91e28026c83dee8154cd6a766636c5eaf61061278925dae959aa9918d51fe74184fcf1c150618d048c24d8f9cfa972e5772ecc997486bb2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb68062e6d9781953d433fb2314bdad49000029091991fac70e9f884b394ce6e13636637ad3cd148bdb58bc2bd2af"], &(0x7f0000000000)) 2018/05/07 22:45:18 executing program 5 (fault-call:5 fault-nth:71): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:18 executing program 1: perf_event_open(&(0x7f0000012000)={0x0, 0x70, 0xfffffffffffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:18 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) [ 214.625709] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 214.644015] FAULT_INJECTION: forcing a failure. [ 214.644015] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.656176] CPU: 0 PID: 14766 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 214.663154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.672560] Call Trace: [ 214.675236] dump_stack+0x185/0x1d0 [ 214.678948] should_fail+0x87b/0xab0 [ 214.682760] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 214.686722] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 214.687595] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 214.687631] ? is_bpf_text_address+0xb4/0x4b0 [ 214.687667] ? __is_insn_slot_addr+0x198/0x1c0 [ 214.687711] ? kernel_text_address+0x34d/0x3a0 [ 214.714210] ? __kernel_text_address+0x34/0xe0 [ 214.718931] ? __save_stack_trace+0x90d/0xb00 [ 214.723511] alloc_pages_current+0x6b5/0x970 [ 214.728049] __page_cache_alloc+0x95/0x320 [ 214.732395] __do_page_cache_readahead+0x401/0xf20 [ 214.737439] ? kmsan_set_origin_inline+0x6b/0x120 [ 214.742419] ondemand_readahead+0xc6a/0x1210 [ 214.746955] ? generic_file_read_iter+0xb43/0x4440 [ 214.752014] page_cache_sync_readahead+0x1e6/0x740 [ 214.757092] generic_file_read_iter+0xc3c/0x4440 [ 214.762026] blkdev_read_iter+0x20d/0x280 [ 214.766280] ? blkdev_write_iter+0x5f0/0x5f0 [ 214.770766] generic_file_splice_read+0x5d2/0x900 [ 214.775741] ? splice_shrink_spd+0x100/0x100 [ 214.780227] splice_direct_to_actor+0x4c6/0x1040 [ 214.785086] ? do_splice_direct+0x540/0x540 [ 214.789531] ? security_file_permission+0x28f/0x4b0 [ 214.794683] ? rw_verify_area+0x35e/0x580 [ 214.798961] do_splice_direct+0x335/0x540 [ 214.803290] do_sendfile+0x1067/0x1e40 [ 214.807349] SYSC_sendfile64+0x1b3/0x300 [ 214.811565] SyS_sendfile64+0x64/0x90 [ 214.815513] do_syscall_64+0x309/0x430 [ 214.819502] ? SYSC_sendfile+0x320/0x320 2018/05/07 22:45:18 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001800010300000000000000000a000000000000000000000008001500060000d53332631f8ed402000800160004000300"], 0x2c}, 0x1}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x5, 0x14, 0x4, "36d3b72e5a5a5f09adf7c9c82a6727c98b4e0b13fd5267f20fe5f8ce52d5be882787ddd898ab34012e81cb93ba2bddd61ea560b2adc5f5bb160291f35f607f45", "791c3902f9a144cae97492f165bd9585099053dcd95c856657115ba1af2f67d8ec00c1e61b24d6bb63a58a798ef6a562f35569e8e67ac94a71d842ec247eba2a", "a7b5f55efa7a7ad7a34fc61494c38dbd821cc54619cb7123afe0e4adeae04c4c", [0x9, 0x6]}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getrule={0x14, 0x22, 0x0, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2018/05/07 22:45:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x200000, 0x80) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) io_setup(0x94, &(0x7f0000000040)=0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0xffffffffffffff9c, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x202000, 0x0) r7 = dup(r1) io_submit(r4, 0x3, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x8000, r3, &(0x7f0000000080)="9826c293e94342ef2974e436ba5ea4daf304e7e1a4e87a0721052596ce7cf671a6a9f2717990e3f807ac9df02f522b4c0a90016ac40396f9baab15882ce8c4d3cc52553971f6e7d72cd8708f0e2c9852b0bfd73d6fc787a591f9d769f3f770bc011951a735cd2db789e18b0e02a2b6f8ad0dc3a90f12b6c5011886bd6f02613fbde228600a319c73", 0x88, 0x8a9b, 0x0, 0x1, r5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4415, r2, &(0x7f0000000200)="538c43f40f794712810793", 0xb, 0x0, 0x0, 0x1, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x400000004000, r1, &(0x7f0000000300)="f6a226b8c81dda843af5ed69460dc92eb770cc383a6aace4d7404e71feb1094ad8c6060e9f32ec4ee6b50c0c6a318326aee62dd04fbe7a9f259b88f843945f4d116ca6d22781eeee622cf2957f2accd01e93f237266714bc549c3f0bec50bc9d572a587b93b33b92bc8fdf6799b22faa19d05f1ca63f19393f9e0671f3e81b6255139a11848c259f8d6b7afa2b70758bad2ffcb2a8c7cc3624bf5770410258486cbf08eb37faa2dfe79902ec8de4534e1dcfbbf994745d24a6b9ff5d2b0308e9accabdbf7d2b05e5d46810153610e1c2d12512c862242557c29d58408c4d1de33a1cd14e456a1ad569", 0xe9, 0xac, 0x0, 0x0, r7}]) listen(r1, 0x8800000000000000) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000540)=""/19) listen(r3, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000500)=0xb546, 0x4) 2018/05/07 22:45:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x101000, 0x41) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) pread64(r0, &(0x7f00008af000), 0xfffffffffffffd1b, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a31d3e06d7c0a3b6fa6d4ac12b7bb83b1cc529b25d75fc39148c00fc8ae86aef20cff7b5de6800d17345c812f0f7e4a29fcb376c9d94caadafe9e7cf36c694e72fc598f4169d815444b173c4faab6c4b06916f96a55673edf2dce04ffe3f645fe880c4da4b65b7074f0b1bb9ec4ae84614ed563e7edb736e2601b71d637b797eca0ace080ba5bac20dc7119803483d3814633462b29603d8d79cdaf02820bce8755643b240e87362429508d6aa3861affc03d019061bb635ac99b89931d79a23de5cb654f8ad7c3bf134ba7a8fbfc8ba5ea48cdbcf3681272c263aa9a33ad17a6d4925a56fc18a9419f112f93f6116664c14d8b49f4b218b9f7432b82c93d4ecf5738c819d8536908b607ec9310c727a3beb23e8ecd199a5c130e7191e4b9d630088b8a0c6aa0b558c433d1d1d1b8bcdaf612c977852727e7be48626c5badcbc604af8aa83aa543c031e6f0b65136fb170e52903d9467fba181ba7433e50d32"], 0xe4) [ 214.823656] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 214.828903] RIP: 0033:0x455979 [ 214.832143] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 214.839919] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 214.847247] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 214.854572] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 214.861900] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 214.869225] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000047 2018/05/07 22:45:18 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x92001, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000540)={{0x4, 0x7, 0x6, 0x8, 0x7, 0x3a46}, 0x7, 0x401, 0x1, 0x8, 0x1, "d894a25940b952c79f227a2d6127b84319061922f0ac704e20329977f75e4ad949eb85e06666729fdb594359875837dc8e87e4d74c9dd4ea9918f4ebef6280dde1ddf406418ecc5c1f2a888c9a91216ee6e7d5999edad2d508d1b0530bdab0c0ab6915e6a2689d1380f96e397b7b6b977b58f3a51e30e165adce9b404a9a419d"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x210, 0x70bd26, 0x25dfdbfd, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20040081) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x43, &(0x7f0000000480)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [{[{0x9100, 0x1ff, 0x4, 0x3}], {0x8100, 0x3f, 0x3261, 0x4}}], {@arp={0x806, @generic={0x334, 0x9a7f, 0x6, 0x9, 0x8, @random="ea34be51f020", "703784c32a58faefff", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}, "e08bf0104a049cd09396c02f8e2b5d2b"}}}}, &(0x7f0000000500)={0x1, 0x3, [0xf58, 0xf44, 0xb11, 0x2ef]}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e20, 0x3f, @empty, 0x7}}, [0x0, 0xa9, 0x3, 0x3, 0x100000001, 0x101, 0x3, 0x1, 0xea67, 0xfffffffffffffffd, 0x0, 0x37, 0x3, 0x100000000, 0x3]}, &(0x7f00000002c0)=0x100) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000600)={0x2, 0x1, 0xff, 0xfffffffffffff36a, 0x0, 0xf3}) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000340)=""/4096) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r1, 0x1}) getsockopt$inet_mreq(r0, 0x0, 0x200000001d, &(0x7f00000000c0)={@local}, &(0x7f0000000100)) 2018/05/07 22:45:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/07 22:45:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x7, 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r3, &(0x7f0000000140)=""/171, 0xab, 0x0, &(0x7f0000000040)=@generic={0x4, "870f470b386880335aa80c6344f67aef8b8a19e7b5a79bac91afe285a92df6ba88e6dc02aeafc7f1cfca1c801f2062c7f108ae57d0aaf464ef5990957ff839878ad39cc473686db323909e5774d0276ca365179eafde3305609c66da20292f42d59ed7806ce38af1e1663b6eb89b1408eb0fa732b2737ec948a625f9578d"}, 0x80) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r2, 0x2) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f00000000c0)="3de081fb16c4a0d41289fc5586cb22746078596ebab85440e858568e4ce90baab92fe969fa95b87f4028730820074db8528566c55e8f1c2709526e11f4e61caa14d918c0867519226f95b63f486edbc9") listen(r2, 0x0) 2018/05/07 22:45:19 executing program 5 (fault-call:5 fault-nth:72): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) [ 215.176536] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:45:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0x0, 0x100000) 2018/05/07 22:45:19 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e2806d1ab5c9cf4394990ca226c83dee8154cd6a5e6636c5eaf62c61278925dae959aa9918d51fe74184fc85fb020049b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6c98730b841eed7dba413b515916e4f56c2c1c1d2d19947605a368a900e5a179fea4aae83bbf1976371e8df1c285ef439f594c4004ef85fb29a688ef8e9488fa3574601d2cf2fb7"], &(0x7f0000000000)) [ 215.234457] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 215.268696] FAULT_INJECTION: forcing a failure. [ 215.268696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 215.280761] CPU: 1 PID: 14807 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 215.287743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.297147] Call Trace: [ 215.299810] dump_stack+0x185/0x1d0 [ 215.303512] should_fail+0x87b/0xab0 [ 215.307309] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 215.312145] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 215.317587] ? is_bpf_text_address+0xb4/0x4b0 [ 215.322173] ? __is_insn_slot_addr+0x198/0x1c0 [ 215.326845] ? kernel_text_address+0x34d/0x3a0 [ 215.331521] ? __kernel_text_address+0x34/0xe0 [ 215.336248] ? __save_stack_trace+0x90d/0xb00 [ 215.340847] alloc_pages_current+0x6b5/0x970 [ 215.345413] __page_cache_alloc+0x95/0x320 [ 215.349793] __do_page_cache_readahead+0x401/0xf20 [ 215.354874] ondemand_readahead+0xc6a/0x1210 [ 215.359386] ? generic_file_read_iter+0xb43/0x4440 [ 215.364442] page_cache_sync_readahead+0x1e6/0x740 [ 215.369507] generic_file_read_iter+0xc3c/0x4440 [ 215.374375] blkdev_read_iter+0x20d/0x280 [ 215.378606] ? blkdev_write_iter+0x5f0/0x5f0 [ 215.383082] generic_file_splice_read+0x5d2/0x900 [ 215.388063] ? splice_shrink_spd+0x100/0x100 [ 215.392540] splice_direct_to_actor+0x4c6/0x1040 [ 215.397379] ? do_splice_direct+0x540/0x540 [ 215.401775] ? security_file_permission+0x28f/0x4b0 [ 215.406917] ? rw_verify_area+0x35e/0x580 [ 215.411139] do_splice_direct+0x335/0x540 [ 215.415433] do_sendfile+0x1067/0x1e40 [ 215.419473] SYSC_sendfile64+0x1b3/0x300 [ 215.423668] SyS_sendfile64+0x64/0x90 [ 215.427609] do_syscall_64+0x309/0x430 [ 215.431579] ? SYSC_sendfile+0x320/0x320 2018/05/07 22:45:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1260028}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="403786b4263c504c237e534e0c0f58bc6df6f8de7db097d4a0f83bee533ab7e4e7bb02db90e80a824c01486fda273bd37486cd6b5d0ce2a5a9aff113b0c213a1718372108623b3aff591b754f286148a2bcc61cbbed9f0c6c252ba1f711c4704d2ca71fc8453dd52a288d19042c0d9b6da079fbce8634a79d7df9b", @ANYRES16=r1, @ANYBLOB="040c2bbd70000104000010000000080005000affffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) pread64(r0, &(0x7f00008af000), 0x1000002a8, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x100000001}, &(0x7f0000000180)=0x8) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000200)={0x65ea, 0x8}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0xfffffffffffffff7, @remote={0xfe, 0x80, [], 0xbb}, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r2, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x8}, 0x8) 2018/05/07 22:45:19 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) [ 215.435711] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 215.440954] RIP: 0033:0x455979 [ 215.444172] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 215.451941] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 215.459264] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 215.466583] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 215.473897] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 2018/05/07 22:45:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) [ 215.481216] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000048 2018/05/07 22:45:20 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x880) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000100)) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x102) connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, {0x400, 0x7ff, 0x4, 0xff, 0x3cb, 0x5}, 0x3f}, 0xa) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) 2018/05/07 22:45:20 executing program 6: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000300)='net/route\x00') pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:20 executing program 1: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:20 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={"73797a8274756e003900000085020300", 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6}, 0x14) syslog(0x3, &(0x7f0000000040)=""/15, 0xf) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2}, 0x8) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:20 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)="6e650500726f757465bd11189d8ee0c850e700") pread64(r1, &(0x7f00008af000), 0xfffffef6, 0x100000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xae, "35c2be32da770494b7c93fd822ead57bc8e947910db31d4fa9b56377d2b38801f2562f2ef40eb7890178249bb9949a51cda2fcbf3d0c5b5a6901f0c4efae8a1324dbe33e7c24fd1a8f9165e099521c57df6afc7f5a881fa27e41ea8f290fa646fe28f4f493950b47d8e5af3080b2df8f9489358938cdbf986972f3cb908d50480bb1de5d07bf9e671a1bb74963e2b93e91d81fcaf2c5fe67bfaf1252e451d78f6486c54bc7065dc4bcda6590aebd"}, &(0x7f0000000180)=0xb6) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x40}, &(0x7f0000000200)=0x8) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000000)={0x7, 0xc6}) 2018/05/07 22:45:20 executing program 5 (fault-call:5 fault-nth:73): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:20 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:20 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x800) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x6, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r1, 0x0) listen(r3, 0x0) [ 216.398427] netlink: 'syz-executor7': attribute type 21 has an invalid length. 2018/05/07 22:45:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x100000) fstat(r0, &(0x7f0000000000)) 2018/05/07 22:45:20 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x20000000) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x480) getsockname$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f00000000c0)=0x1c) 2018/05/07 22:45:20 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000180)='stack\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000000)={'gretap0\x00', 0x8001}) pread64(r2, &(0x7f00008af000), 0x231, 0x0) [ 216.618577] FAULT_INJECTION: forcing a failure. [ 216.618577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.630636] CPU: 0 PID: 14863 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 216.637612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.647014] Call Trace: [ 216.649703] dump_stack+0x185/0x1d0 [ 216.653402] should_fail+0x87b/0xab0 [ 216.657197] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 216.662039] ? __msan_metadata_ptr_for_load_4+0x10/0x20 2018/05/07 22:45:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x400680, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={[], 0xfffffffeffffffff, 0x1000000000000, 0x20, 0x101, 0x6, r4}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) [ 216.667483] ? is_bpf_text_address+0xb4/0x4b0 [ 216.672073] ? __is_insn_slot_addr+0x198/0x1c0 [ 216.676741] ? kernel_text_address+0x34d/0x3a0 [ 216.681392] ? __kernel_text_address+0x34/0xe0 [ 216.686109] ? __save_stack_trace+0x90d/0xb00 [ 216.690705] alloc_pages_current+0x6b5/0x970 [ 216.695280] __page_cache_alloc+0x95/0x320 [ 216.699658] __do_page_cache_readahead+0x401/0xf20 [ 216.704730] ? kmsan_set_origin_inline+0x6b/0x120 [ 216.707307] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 216.709705] ondemand_readahead+0xc6a/0x1210 [ 216.709762] ? generic_file_read_iter+0xb43/0x4440 [ 216.727026] page_cache_sync_readahead+0x1e6/0x740 [ 216.732114] generic_file_read_iter+0xc3c/0x4440 [ 216.737000] blkdev_read_iter+0x20d/0x280 [ 216.741315] ? blkdev_write_iter+0x5f0/0x5f0 [ 216.745810] generic_file_splice_read+0x5d2/0x900 [ 216.750802] ? splice_shrink_spd+0x100/0x100 [ 216.755304] splice_direct_to_actor+0x4c6/0x1040 [ 216.760176] ? do_splice_direct+0x540/0x540 [ 216.764626] ? security_file_permission+0x28f/0x4b0 [ 216.769792] ? rw_verify_area+0x35e/0x580 [ 216.774052] do_splice_direct+0x335/0x540 [ 216.778360] do_sendfile+0x1067/0x1e40 [ 216.782421] SYSC_sendfile64+0x1b3/0x300 [ 216.786626] SyS_sendfile64+0x64/0x90 [ 216.790557] do_syscall_64+0x309/0x430 [ 216.794537] ? SYSC_sendfile+0x320/0x320 [ 216.798682] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 216.803929] RIP: 0033:0x455979 [ 216.807158] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 216.814936] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 216.815593] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 216.822249] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 216.822267] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 216.822284] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 216.822301] R13: 0000000000000514 R14: 00000000006fba80 R15: 0000000000000049 2018/05/07 22:45:21 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) accept$netrom(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x6) socket$l2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$random(&(0x7f0000000180)='/dev/random\x00', 0x0, 0x4000) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) pread64(0xffffffffffffffff, &(0x7f00008af000), 0xfffffef6, 0x100000) 2018/05/07 22:45:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) pread64(r0, &(0x7f00008af000), 0xfffffef6, 0x0) 2018/05/07 22:45:21 executing program 3: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', r1}) connect(r0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x81, 0xfffffffeffffffff, 0xfffffffffffffffc, 0x7fff, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) r3 = request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000200)='syz_tun\x00', 0xfffffffffffffffb) keyctl$assume_authority(0x10, r3) syz_emit_ethernet(0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c200800000000000000006ef64392efa4f91e28026c83dee8154cd6a766636c5eaf62c61278925dae959aa9918d51fe74184fc85fb707b49b7fa18cbf1c150618d048c24d8f9cfa972e5772ecc8696249b2ee4207f40a6e43d2715338038e12499e9e31de54ec42084cdc3704fb6"], &(0x7f0000000000)) 2018/05/07 22:45:21 executing program 7: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x90400, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x9, 0x1, 0x66, 0x22fa, 0x80}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x4, @empty, 0x8}}, 0x8, 0x7, 0x80000000, 0x9, 0x82}, &(0x7f0000000240)=0x98) 2018/05/07 22:45:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0xffffffffffffffb8) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x400000, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000240)) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) listen(r0, 0x0) listen(r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) bind$can_raw(r3, &(0x7f0000000400)={0x1d, r4}, 0x10) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1, 0x0) sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="c3da828e9153a48ce438630b1921282d0be109d0de0902eca23930c39449ada04cc4b59d1795c5ddb18a6194c5f5eb08397feded3bb91e44bf33a302c9f6640bf0ad55e0109a27aea1ca555f5fb989c1e1ee282b4791a0917e20b152fd176a93395336d2cb775b4dbfe2541ea83830519fe9446d58295b123003873eeac0f77049dc7dd659f11f821395d1e01b7b7c25319478e1b7b76d55150494def45589755bd2e315ee4176b5c3d0fdb57182ac9f309cb953a5e0447d2d4b060c9aefd682562bb5f51609e0476dbbba55db79877cbbb675abe969c00d561f801d04d219a3", 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x4) 2018/05/07 22:45:21 executing program 2: perf_event_open(&(0x7f0000012000)={0x2, 0x70, 0xfffffffffffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x3d86ece6cc649f6, 0x0) close(r0) 2018/05/07 22:45:21 executing program 5 (fault-call:5 fault-nth:74): r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r0, &(0x7f0000000240), 0x20000102000007) 2018/05/07 22:45:21 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000180)='stack\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000000)={'gretap0\x00', 0x8001}) pread64(r2, &(0x7f00008af000), 0x231, 0x0) [ 217.408216] ================================================================== [ 217.415679] BUG: KMSAN: uninit-value in kallsyms_lookup+0x152/0x910 [ 217.422108] CPU: 0 PID: 14904 Comm: syz-executor1 Not tainted 4.16.0+ #87 [ 217.430001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.439377] Call Trace: [ 217.441988] dump_stack+0x185/0x1d0 [ 217.445648] ? kallsyms_lookup+0x152/0x910 [ 217.449906] kmsan_report+0x142/0x240 [ 217.453727] ? futex_wait_queue_me+0x475/0x710 [ 217.458335] __msan_warning_32+0x6c/0xb0 [ 217.462420] ? futex_wait_queue_me+0x475/0x710 [ 217.467025] kallsyms_lookup+0x152/0x910 [ 217.471107] ? __msan_poison_alloca+0x15c/0x1d0 [ 217.475890] ? futex_wait_queue_me+0x476/0x710 [ 217.480485] __sprint_symbol+0x147/0x5b0 [ 217.484564] ? kmsan_set_origin_inline+0x6b/0x120 [ 217.489429] ? futex_wait_queue_me+0x476/0x710 [ 217.494032] sprint_backtrace+0x7f/0x90 [ 217.498035] ? futex_wait_queue_me+0x476/0x710 [ 217.502636] symbol_string+0x19f/0x230 [ 217.506547] ? futex_wait_queue_me+0x476/0x710 [ 217.511155] ? kmsan_set_origin_inline+0x6b/0x120 [ 217.516021] ? __msan_poison_alloca+0x15c/0x1d0 [ 217.520715] ? vsnprintf+0xa2d/0x33c0 [ 217.524542] ? pointer+0xa8/0x1410 [ 217.528092] ? vsnprintf+0xa2d/0x33c0 [ 217.531919] ? futex_wait_queue_me+0x476/0x710 [ 217.536516] pointer+0xdb9/0x1410 [ 217.540000] ? futex_wait_queue_me+0x476/0x710 [ 217.544598] vsnprintf+0xa2d/0x33c0 [ 217.548254] seq_printf+0x29f/0x420 [ 217.551916] ? save_stack_trace_tsk+0x26a/0x2f0 [ 217.556601] ? futex_wait_queue_me+0x476/0x710 [ 217.561202] ? futex_wait_queue_me+0x476/0x710 [ 217.565805] ? futex_wait_queue_me+0x476/0x710 [ 217.570406] proc_pid_stack+0x326/0x470 [ 217.574403] proc_single_show+0x1af/0x300 [ 217.578568] ? proc_pid_wchan+0x250/0x250 [ 217.582733] ? proc_single_open+0x90/0x90 [ 217.586903] seq_read+0xc7d/0x2260 [ 217.590484] ? __vfs_read+0xc9/0x9b0 [ 217.594222] ? seq_open+0x360/0x360 [ 217.597879] __vfs_read+0x1a5/0x9b0 [ 217.601534] vfs_read+0x36c/0x6c0 [ 217.605011] SYSC_pread64+0x275/0x310 2018/05/07 22:45:21 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x33f0, 0x1) accept(r0, 0x0, &(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x41) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x8000, @local={0xfe, 0x80, [], 0xaa}, 0x3e3f}}, 0x7, 0x7, 0x1a99c000, 0x3, 0x5}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x2}, 0x8) [ 217.608827] SyS_pread64+0x65/0x90 [ 217.612378] do_syscall_64+0x309/0x430 [ 217.616284] ? SYSC_write+0x360/0x360 [ 217.620110] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 217.625305] RIP: 0033:0x455979 [ 217.628497] RSP: 002b:00007f5524121c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 217.636217] RAX: ffffffffffffffda RBX: 00007f55241226d4 RCX: 0000000000455979 [ 217.643510] RDX: 0000000000000231 RSI: 00000000208af000 RDI: 0000000000000014 [ 217.650794] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 217.658082] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 217.665376] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000000 [ 217.672662] [ 217.674302] Uninit was stored to memory at: [ 217.678651] kmsan_internal_chain_origin+0x12b/0x210 [ 217.683792] __msan_chain_origin+0x69/0xc0 [ 217.688064] __save_stack_trace+0x829/0xb00 [ 217.689366] netlink: 'syz-executor7': attribute type 21 has an invalid length. [ 217.692406] save_stack_trace_tsk+0x258/0x2f0 [ 217.692424] proc_pid_stack+0x26a/0x470 [ 217.692437] proc_single_show+0x1af/0x300 [ 217.692448] seq_read+0xc7d/0x2260 [ 217.692464] __vfs_read+0x1a5/0x9b0 [ 217.692477] vfs_read+0x36c/0x6c0 [ 217.692491] SYSC_pread64+0x275/0x310 [ 217.692500] SyS_pread64+0x65/0x90 [ 217.692529] do_syscall_64+0x309/0x430 [ 217.725247] FAULT_INJECTION: forcing a failure. [ 217.725247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.726910] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 217.726914] Uninit was stored to memory at: [ 217.726931] kmsan_internal_chain_origin+0x12b/0x210 [ 217.726942] __msan_chain_origin+0x69/0xc0 [ 217.726974] update_stack_state+0x959/0xa40 [ 217.730627] CPU: 1 PID: 14912 Comm: syz-executor5 Not tainted 4.16.0+ #87 [ 217.734397] unwind_next_frame+0x618/0xe50 [ 217.734441] __save_stack_trace+0x734/0xb00 [ 217.746215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.751385] save_stack_trace_tsk+0x258/0x2f0 [ 217.751414] proc_pid_stack+0x26a/0x470 [ 217.755714] Call Trace: [ 217.760802] proc_single_show+0x1af/0x300 [ 217.760827] seq_read+0xc7d/0x2260 [ 217.765084] dump_stack+0x185/0x1d0 [ 217.769351] __vfs_read+0x1a5/0x9b0 [ 217.769375] vfs_read+0x36c/0x6c0 [ 217.776320] should_fail+0x87b/0xab0 [ 217.780505] SYSC_pread64+0x275/0x310 [ 217.780531] SyS_pread64+0x65/0x90 [ 217.784888] __alloc_pages_nodemask+0x5fe/0x5dc0 [ 217.794213] do_syscall_64+0x309/0x430 [ 217.798721] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 217.802641] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 217.802657] Disabling lock debugging due to kernel taint [ 217.805268] ? is_bpf_text_address+0xb4/0x4b0 [ 217.809371] Kernel panic - not syncing: panic_on_warn set ... [ 217.809371] [ 217.812925] ? __is_insn_slot_addr+0x198/0x1c0 [ 217.875708] ? kernel_text_address+0x34d/0x3a0 [ 217.880314] ? __kernel_text_address+0x34/0xe0 [ 217.884984] ? __save_stack_trace+0x90d/0xb00 [ 217.889513] alloc_pages_current+0x6b5/0x970 [ 217.894002] __page_cache_alloc+0x95/0x320 [ 217.898297] __do_page_cache_readahead+0x401/0xf20 [ 217.903295] ? kmsan_set_origin_inline+0x6b/0x120 [ 217.908202] ondemand_readahead+0xc6a/0x1210 [ 217.912681] ? generic_file_read_iter+0xb43/0x4440 [ 217.917681] page_cache_sync_readahead+0x1e6/0x740 [ 217.922687] generic_file_read_iter+0xc3c/0x4440 [ 217.927556] blkdev_read_iter+0x20d/0x280 [ 217.931750] ? blkdev_write_iter+0x5f0/0x5f0 [ 217.936173] generic_file_splice_read+0x5d2/0x900 [ 217.941070] ? splice_shrink_spd+0x100/0x100 [ 217.945497] splice_direct_to_actor+0x4c6/0x1040 [ 217.950290] ? do_splice_direct+0x540/0x540 [ 217.954660] ? security_file_permission+0x28f/0x4b0 [ 217.959920] ? rw_verify_area+0x35e/0x580 [ 217.964123] do_splice_direct+0x335/0x540 [ 217.968352] do_sendfile+0x1067/0x1e40 [ 217.972329] SYSC_sendfile64+0x1b3/0x300 [ 217.976466] SyS_sendfile64+0x64/0x90 [ 217.980343] do_syscall_64+0x309/0x430 [ 217.984261] ? SYSC_sendfile+0x320/0x320 [ 217.988350] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 217.993554] RIP: 0033:0x455979 [ 217.996750] RSP: 002b:00007fd0d14dec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 218.004477] RAX: ffffffffffffffda RBX: 00007fd0d14df6d4 RCX: 0000000000455979 [ 218.011777] RDX: 0000000020000240 RSI: 0000000000000013 RDI: 0000000000000015 [ 218.019058] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 218.026344] R10: 0020000102000007 R11: 0000000000000246 R12: 0000000000000016 [ 218.033625] R13: 0000000000000514 R14: 00000000006fba80 R15: 000000000000004a [ 218.040916] CPU: 0 PID: 14904 Comm: syz-executor1 Tainted: G B 4.16.0+ #87 [ 218.049162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.058529] Call Trace: [ 218.061147] dump_stack+0x185/0x1d0 [ 218.064795] panic+0x39d/0x940 [ 218.068019] ? kallsyms_lookup+0x152/0x910 [ 218.072270] kmsan_report+0x238/0x240 [ 218.076089] ? futex_wait_queue_me+0x475/0x710 [ 218.080687] __msan_warning_32+0x6c/0xb0 [ 218.084769] ? futex_wait_queue_me+0x475/0x710 [ 218.089368] kallsyms_lookup+0x152/0x910 [ 218.093440] ? __msan_poison_alloca+0x15c/0x1d0 [ 218.098131] ? futex_wait_queue_me+0x476/0x710 [ 218.102734] __sprint_symbol+0x147/0x5b0 2018/05/07 22:45:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)='.dead\x00', r1) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="6f4f0e073a8b4ed952825a91928a2d94ee6d1e78d70159ac7e5215fe6e45810892e789926b9dea2d51e5d735efcb4aed8f5a1671e8d7d351ab0abfff010c6bf23ddb4d3739c3cf3257c40fb4c2933f60171effbe022a9dc89658dd540ee94d9925fbd97028582a0f", 0x0, r2) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x3}}]}, 0x2c}, 0x1}, 0x0) [ 218.106807] ? kmsan_set_origin_inline+0x6b/0x120 [ 218.111671] ? futex_wait_queue_me+0x476/0x710 [ 218.116284] sprint_backtrace+0x7f/0x90 [ 218.120290] ? futex_wait_queue_me+0x476/0x710 [ 218.124889] symbol_string+0x19f/0x230 [ 218.128811] ? futex_wait_queue_me+0x476/0x710 [ 218.133417] ? kmsan_set_origin_inline+0x6b/0x120 [ 218.138288] ? __msan_poison_alloca+0x15c/0x1d0 [ 218.142988] ? vsnprintf+0xa2d/0x33c0 [ 218.146804] ? pointer+0xa8/0x1410 [ 218.150363] ? vsnprintf+0xa2d/0x33c0 [ 218.154185] ? futex_wait_queue_me+0x476/0x710 2018/05/07 22:45:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0x1000) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=ANY=[@ANYBLOB="2c00001800010300000000000000000a00050000000070d9a0051e2c290000080015000600000008001600"], 0x2c}, 0x1}, 0x0) [ 218.158783] pointer+0xdb9/0x1410 [ 218.162265] ? futex_wait_queue_me+0x476/0x710 [ 218.166866] vsnprintf+0xa2d/0x33c0 [ 218.170540] seq_printf+0x29f/0x420 [ 218.174211] ? save_stack_trace_tsk+0x26a/0x2f0 [ 218.178896] ? futex_wait_queue_me+0x476/0x710 [ 218.183587] ? futex_wait_queue_me+0x476/0x710 [ 218.188203] ? futex_wait_queue_me+0x476/0x710 [ 218.192810] proc_pid_stack+0x326/0x470 [ 218.196812] proc_single_show+0x1af/0x300 [ 218.200987] ? proc_pid_wchan+0x250/0x250 [ 218.205157] ? proc_single_open+0x90/0x90 [ 218.209327] seq_read+0xc7d/0x2260 [ 218.212902] ? __vfs_read+0xc9/0x9b0 [ 218.216632] ? seq_open+0x360/0x360 [ 218.220288] __vfs_read+0x1a5/0x9b0 [ 218.223945] vfs_read+0x36c/0x6c0 [ 218.227429] SYSC_pread64+0x275/0x310 [ 218.231254] SyS_pread64+0x65/0x90 [ 218.234824] do_syscall_64+0x309/0x430 [ 218.234842] ? SYSC_write+0x360/0x360 [ 218.234859] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 218.234869] RIP: 0033:0x455979 [ 218.234875] RSP: 002b:00007f5524121c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 218.234885] RAX: ffffffffffffffda RBX: 00007f55241226d4 RCX: 0000000000455979 [ 218.234892] RDX: 0000000000000231 RSI: 00000000208af000 RDI: 0000000000000014 [ 218.234897] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 218.234903] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 218.234908] R13: 00000000000004bc R14: 00000000006fb240 R15: 0000000000000000 [ 218.235415] Dumping ftrace buffer: [ 218.235419] (ftrace buffer empty) [ 218.235423] Kernel Offset: disabled [ 218.306559] Rebooting in 86400 seconds..