xecuting program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={0x3, @bcast}) 00:55:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, r5, 0x2d440bee7672413d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x22}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000800}, 0x0) [ 326.225636] RAX: ffffffffffffffda RBX: 000000000001ab00 RCX: 000000000045d5b9 [ 326.233338] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 326.240610] RBP: 00007fad492f9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 326.247878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.256201] R13: 00007ffcc8687c7f R14: 00007fad492fa9c0 R15: 000000000118cf4c 00:55:09 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}], r1, 0x1, 0x1, 0x48}}, 0x20) 00:55:09 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) 00:55:09 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7ff7fffffffe, 0x5ffa01) dup(r0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 326.353640] FAULT_INJECTION: forcing a failure. [ 326.353640] name failslab, interval 1, probability 0, space 0, times 0 [ 326.377426] CPU: 0 PID: 23243 Comm: syz-executor.5 Not tainted 4.14.197-syzkaller #0 [ 326.385392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.394757] Call Trace: [ 326.397392] dump_stack+0x1b2/0x283 [ 326.401034] should_fail.cold+0x10a/0x154 [ 326.406192] should_failslab+0xd6/0x130 [ 326.410180] __kmalloc+0x2c1/0x400 [ 326.413734] ? usb_hcd_submit_urb+0x5c8/0x1ee0 [ 326.418327] usb_hcd_submit_urb+0x5c8/0x1ee0 [ 326.422743] ? SyS_ioctl+0x7f/0xb0 [ 326.426284] ? do_syscall_64+0x1d5/0x640 [ 326.430345] ? __kprobes_text_end+0xa7530/0xa7530 [ 326.435192] ? unlink1+0x4d0/0x4d0 [ 326.439438] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 326.444931] ? rcu_read_lock_sched_held+0x16c/0x1d0 00:55:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 326.450237] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 326.455264] usb_submit_urb+0x4de/0xff0 [ 326.459597] usb_start_wait_urb+0xf3/0x260 [ 326.463851] ? usb_api_blocking_completion+0xa0/0xa0 [ 326.469405] ? __kmalloc+0x3a4/0x400 [ 326.473758] ? usb_alloc_urb+0x1f/0x12e [ 326.478025] ? memset+0x20/0x40 [ 326.482356] usb_control_msg+0x302/0x450 [ 326.487399] ? usb_start_wait_urb+0x260/0x260 [ 326.492182] ? wait_for_completion_io+0x10/0x10 [ 326.496879] proc_control+0x274/0x670 00:55:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6941, 0x100) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x2}, 0x7) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0xfffd, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) [ 326.500686] ? lock_downgrade+0x740/0x740 [ 326.504925] ? processcompl+0x5c0/0x5c0 [ 326.508912] ? avc_has_extended_perms+0x6e4/0xbf0 [ 326.513768] usbdev_do_ioctl+0x1135/0x2b70 [ 326.520105] ? proc_bulk+0x6d0/0x6d0 [ 326.523919] ? __lock_acquire+0x5fc/0x3f20 [ 326.528206] ? get_pid_task+0xb8/0x130 [ 326.532312] ? proc_fail_nth_write+0x7b/0x180 [ 326.536819] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 326.541805] ? trace_hardirqs_on+0x10/0x10 [ 326.546142] ? fsnotify+0x8c5/0x1140 [ 326.549951] ? __vfs_write+0xec/0x630 [ 326.553765] ? usbdev_compat_ioctl+0x30/0x30 [ 326.558970] usbdev_ioctl+0x21/0x30 [ 326.562631] do_vfs_ioctl+0x75a/0xff0 [ 326.566643] ? selinux_inode_setxattr+0x730/0x730 [ 326.571503] ? ioctl_preallocate+0x1a0/0x1a0 [ 326.575922] ? lock_downgrade+0x740/0x740 [ 326.580094] ? __fget+0x225/0x360 [ 326.583561] ? security_file_ioctl+0x83/0xb0 [ 326.587980] SyS_ioctl+0x7f/0xb0 [ 326.591356] ? do_vfs_ioctl+0xff0/0xff0 [ 326.595960] do_syscall_64+0x1d5/0x640 00:55:10 executing program 3: r0 = shmget(0x0, 0x1000, 0x780012c9, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6000, 0x400, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="99c2bbbe3f346b2f00"], 0x14}}, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100029bd7000fcdbdf250d0000003000028014000100ac1e00010000000000000000000000000800050009000000080004000800000006000f000200000008000600030000001400028006000b000200000008000800001000001c00028008000f000000000005000d00000000000800030002000000"], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) r5 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x500, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000400)={0x0, 0x0, [0x3, 0x2, 0x1, 0x5, 0x1, 0x6, 0x7, 0x5]}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000200)={{0x0, 0xee00, r1, r2, 0xee01, 0x2, 0x4}, 0x100, 0x80000001, 0x4, 0xb96, 0xffffffffffffffff, 0x0, 0x100}) r6 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x2, 0x1, 0x19, 0x0, 0x0, 0x0, 0x0}) [ 326.599862] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 326.605058] RIP: 0033:0x45d5b9 [ 326.608250] RSP: 002b:00007fad492f9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.616749] RAX: ffffffffffffffda RBX: 000000000001ab00 RCX: 000000000045d5b9 [ 326.624028] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 326.632021] RBP: 00007fad492f9ca0 R08: 0000000000000000 R09: 0000000000000000 [ 326.639415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 00:55:10 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @pix_mp={0xfffff000, 0xfa, 0x41416770, 0x7, 0x2, [{0x100, 0x9}, {0x800, 0x4}, {0x7, 0x6d4}, {0x9cf, 0x9}, {0xff, 0x40}, {0xffffff80, 0x5}, {0x8, 0x9}, {0x5, 0xfffffff7}], 0x7, 0x7, 0x1, 0x0, 0x4}}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000180)={0x3, @vbi={0xf47, 0x79, 0x37, 0x3032344d, [0x2, 0xcb], [0x1f, 0x4], 0x108}}) 00:55:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 326.646810] R13: 00007ffcc8687c7f R14: 00007fad492fa9c0 R15: 000000000118cf4c 00:55:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) 00:55:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x2, 0x1}}, 0x71, 0x7fffffff, &(0x7f00000000c0)="4c9b75c16eab4b7ab124bcb28f51c12adc882d8723acada2e538044646b7e6f1645ef00c44cdbaa80057b327283735ae39a83af8423d081ce7d537dfc9c530a26bd0d88248be687f93c5b07c45e6671d2fcb52535418732b248e856819cc6490fd477d981e54d5de29537debd564d5d3c5"}) 00:55:10 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000003c0)={'sit0\x00', 0x9}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @pix={0x800, 0xffff7fff, 0x3723b6bc, 0x0, 0xa6, 0xa288, 0x2, 0x7, 0x1, 0x2, 0x1, 0x6}}) 00:55:10 executing program 5 (fault-call:1 fault-nth:4): r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}], r1, 0x1, 0x1, 0x48}}, 0x20) 00:55:10 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x31, 0x8, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2) 00:55:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 326.756105] xt_hashlimit: overflow, try lower: 0/0 00:55:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:55:10 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @vbi={0x80, 0x9, 0x6, 0x31303553, [0x3f, 0x5], [0x0, 0x8], 0x108}}) [ 326.798112] xt_hashlimit: overflow, try lower: 0/0 00:55:10 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x38881) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x541b, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000180)={0x0, 0x1, @raw_data=[0x7fff, 0x7fff, 0x1ff, 0x401, 0xffffffff, 0x1, 0xfffffffb, 0x40, 0x1, 0xec91, 0xfffffff8, 0x4fe, 0x9, 0x0, 0x400, 0x1]}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xfffe, 0x0, 0x0, 0x0}) 00:55:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}], r1, 0x1, 0x1, 0x48}}, 0x20) 00:55:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, {0x14, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x101]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:10 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x8100, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x20, 0x20, 0xfffffffb], 0x3, 0x800, 0x0, 0xffffffffffffffff}) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0)={0xfffffffffffffff7}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x6, 0x6, 0x5, 0x7, 0x2, "eebb86c179631ccbf54c6a82654c5d0fabfdc4"}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000180)={0x7, 0x8, 0x1ff}) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff, 0x10040, 0x0, 0x1, 0xe387, 0x80, 0x9, 0x3c, 0x7, 0xfffffffe]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:55:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xba9d, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff, 0x10040, 0x0, 0x1, 0xe387, 0x80, 0x9, 0x3c, 0x7]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:10 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mice\x00', 0x200) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8000}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c4}, 0x20000000) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e27, @remote}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) 00:55:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x456, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}, {0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00', 0x2}, r1, 0x26c}}, 0x48) 00:55:10 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, 0xfffffffffffffffe) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1040844, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x30}}], [{@obj_type={'obj_type'}}, {@obj_user={'obj_user', 0x3d, '-[0'}}, {@hash='hash'}, {@hash='hash'}, {@obj_type={'obj_type', 0x3d, '\x84,:'}}]}}) 00:55:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff, 0x10040, 0x0, 0x1, 0xe387, 0x80, 0x9, 0x3c]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:10 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x80002, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1544e5e19431bc3e, @sdr={0x34363248}}) 00:55:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0xd, 0x200, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000de10000104000000220000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', r2, 0x2f, 0x6, 0x6, 0x73c, 0x58, @mcast2, @mcast2, 0x700, 0xdbfb44d06fa8e806, 0x1b9a}}) syz_mount_image$minix(&(0x7f00000001c0)='minix\x00', &(0x7f0000000200)='./file0\x00', 0x1, 0xa, &(0x7f0000000740)=[{&(0x7f0000000240)="4bfa8de258563c2abd6679e4d70348", 0xf, 0xa5e}, {&(0x7f00000002c0), 0x0, 0x100}, {&(0x7f0000000300)="d00f1c43b76de894665939db4810fb050c5393ef19b4cf0a64dce0aebb08d53df1fd11343c7a162718a2bf8a80f1dff9c7616e6a95e2cc4e9f988ca748796e", 0x3f, 0x4a82cae}, {&(0x7f0000000340)="44bc73f2053414917dab861d84a0b02ddd5a2aa2929a1ee3d4a9cab1c609e55f85bf10eea1b45728622063301bc83fa745c9ae00f128df4a4c9e22b8e3e64b742c803d7333cdcac535bc998afd1257477400f2ec28a34d283f4593c89ddaeb", 0x5f, 0x8}, {&(0x7f00000003c0)="18d28659952739a86941cc06926b7e665c866ed607aed1a4dcae0760cbdf8646345b6dcf5614ef5d30d643b5d256c3fe0ca6473cec80863ee42480d5ee2c3a3b19ee2ddfcea67ce14e", 0x49, 0x80000}, {&(0x7f0000000440), 0x0, 0x2}, {&(0x7f0000000480)="7b0e53b00327b04abad048ae136b263730947ed4dfad8e19f11ec08b02e98a4286b9e10d594b9b6deeb96447fe8f3ad56461950027ff057809aee59068dec925b18fea55a58f70dc0c5eab02599221d80a993fbfc198ec6e1092ea21b52a253906d36a35c2b14b87ea51e1c8993f5092339eedd9eca6e02e82eb8b310b67d90ea49906a0820ae426e49a9160fb51ffacf91e7cb5e3dde1", 0x97, 0x101}, {&(0x7f0000000540)="b170aa0355ee1490f9326bd15b44169a88e994eae06b81abca5b55135094b7222eb1d054d73cbc3561c61a839a6266c76019bbbe7a6a561774df61510721d39b5d2261", 0x43, 0xf384}, {&(0x7f00000005c0)="d477dcc586b753151395ee200fac9c666bfaf4b30f39c1d5a1dceebecd270f0013bcd0038156e602f4539391760b263da04f4091c904b3c412457d68e5f64213a0a585ad8ff15854d87ec544f58e0465081eac68aa395fb9053d32f961b490b2552adbb00651e0e55f7ff8501518ebedf87a12e5e24fbac7a43f01ffab9ff0bf8e011ab58f720bffa348991f8e5bdec058f252be1edeb8e66e429ced806dfd5a06729a4ce2800e94c07eaf6338a1ba0a345ff0b5916fba17f172054dab800219dd1b210b9b4c96ef0df865a2fd1d98642a762047fa828c95c2aa0eeabe862e19d35f68f760d145001b068100e9d26780aedbf3e1572ef1", 0xf7, 0x1d9}, {&(0x7f00000006c0)="1b0f5d144defeeb650f987e8b295c4e38d1537cd526f9c2de51b47b637e544cfacc7fb467bb72731274bc4c67cf9b3dcc2c331cf60dc2d364fc162e78afa836d7793f66420c8b1d0b88cba55667c80f8c5265a9bbc2b946ec6aca5139b0be5b444500386618cb4883c749b94ded35d49d0392e600a79913019", 0x79, 0x100000000}], 0x800, 0x0) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff, 0x10040, 0x0, 0x1, 0xe387, 0x80, 0x9]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:10 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) 00:55:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r2, r1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x105000, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_to_batadv\x00', {0x1}, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400), 0x13f, 0x8}}, 0x20) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f00000003c0)={0x1, 0x80000001, 0x6, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0xc96, 0x3f, 0xf1d, 0x9, 0x2}, 0x14) 00:55:10 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'hsr0\x00'}}, 0x1e) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff, 0x10040, 0x0, 0x1, 0xe387, 0x80]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff, 0x10040, 0x0, 0x1, 0xe387]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 327.310111] xt_hashlimit: overflow, try lower: 0/0 00:55:10 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000480)={0x6, 0x5, 0x4, 0x2000, 0x8, {r2, r3/1000+60000}, {0x2, 0xd, 0x0, 0x0, 0xf9, 0x20, "488e4601"}, 0x400, 0x3, @offset=0x2, 0x4, 0x0, 0xffffffffffffffff}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-monitor\x00', 0xa8400, 0x0) write$binfmt_elf32(r5, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x40, 0x2, 0x91, 0x9f9, 0x3, 0x6, 0x9, 0x127, 0x38, 0x122, 0x9, 0x3, 0x20, 0x1, 0x2, 0x1000, 0x3}, [{0x5, 0x5, 0x101, 0x5, 0x400, 0x4, 0x9, 0xfff}, {0x4, 0x4, 0x401, 0x7fffffff, 0x9, 0x400000, 0x80000001, 0x1}], "d0e68c448009bf8d493e2c5147c6d9d6630ea321b5065c2489a6fccf18515a7048b9fdf92f9da6f08fe5697c1da3bf6006b0f5993f173f99ac2709cd146a736912bc83070ff58cbc441fdbf3e1d5cc5b8e910a25420f534bc6bc72537b6a4bc5522c0878c412cf738bbcb0049939ff5c5bbf8b353b3efd910f18109b1fbb2aba1b0626a9d1eea6c616ce73ca4b1f1076972dff8c3fc231f41bfc7e937378290b67057991b07462934ee5f805a6717d5f25bba5863d09208eb1127d2bdb5b70ae5e15138b58f69c85ceffaa9e76bcae7982615f458e2c888d711b8cd81524cbb661dc684119f2fe990c940a574993f55eb8217891a82b6208ea9ada", [[], [], []]}, 0x473) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f00000003c0)={0x0, 0x1ff, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x5, 0xa, 0x401, 0x3, 0xe0, 0x1e9a, &(0x7f0000000180)="0c4080162facccf6a4001e201fb65f2627a2e83f94be6d974175c767d09a7c40bd7fb4071f4a73f9bf972bc93a4366e5d2e5be88ef28e62c643947611ea89266e90815a242e3b659f7f62470d8cd84cfea6d523c6476a25dc4c5bc68eb565387d0d8ee05aec99a4e9cd124d532d74d89bf41541b6636df45b4d9f5f942830322ecde914e718dfe88488ea10f8c9e9524716fba0806af7a4cffd0ca9eeb0fc533766d24a82bf0fd47713fa2c9587a84a35ec2aba4c222542fb6f0b220e7d77f3e1a3f8406be2e733908e18dfe30133ac93cb8def2208f6aa3eecc5e2b300b37ba"}) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_mr_vif\x00') ioctl$TIOCCONS(r8, 0x541d) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r7}, 0x8) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4800000003060101000000001f4ddb67040000000700000005000100070000000500010007000000050001000700000009000200735db127c0c9e87a10000100070000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 00:55:10 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) clone(0x200000, &(0x7f0000000080)="1b93ba0affdf5d4a3eb998d062317d0fa51689974fc6efa4bd6c38bc0d1b624cba51360746a9a79f6d450f97fa7ee3225663", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="1e6af35a2b8117a5a8c23c8f4f4c8dc83392e135633457d8e54ad3d7e758e14d2b8ac996e8f89b200f8634") getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x2) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="6d255242441772c49a81a369d6c192a29201cdbf8631339dcb78e5caa5d2b661f57db478b655342626701ce33beca673cf805af80ce4b5558d1c19b9bf56ae6006053ffc6daa8a2e1ad478220fa5299beb8d5267e912f89bd4f2c48231bfb46decb3deee4cbfdaa87215adc4418bf529867aa9a386ed71557b6de6ee4078e7cb34023be03ff79976fa0effc47ea956e2cfcffb8631f6fa67238bfa723bf33c0dcb4eb5eb0d1c0b20753028ec8f578ce4e03d590692ea81c54186d0e4cdf41c7349e420e90e346afe275082099af8daf8973e241802a904c738b4ff01000000000000e1", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0xe, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b005) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d0000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcf, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10000004}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0xe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x2000009}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ifreq(r4, 0x27, &(0x7f0000000540)={'lo\x00', @ifru_map={0x2, 0x49, 0x3, 0x5, 0x9, 0x8}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000280)={0x3f, [[0xffffffff, 0x1f, 0x3, 0x6, 0x4, 0x7, 0x9, 0x9], [0x3ff, 0x6, 0x6c92, 0xa5c10000, 0x8b9, 0x6, 0x8, 0x3], [0x3, 0x3, 0x6, 0x7ff, 0x2751, 0x101, 0xf3de]], [], [{0x9, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x80000000, 0x0, 0x0, 0x1}, {0x1, 0x2d, 0x0, 0x1}, {0x4, 0xe3cf, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x5, 0x0, 0x1, 0x1, 0x1}, {0xe1, 0x1f, 0x1, 0x1, 0x1}, {0x902, 0x8001, 0x1, 0x1}, {0x2, 0x1}, {0x43}, {0x8, 0x1000, 0x1, 0x1, 0x0, 0x1}, {0xe, 0x5, 0x1, 0x1, 0x0, 0x1}], [], 0x2b9}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={r3, 0x2}, &(0x7f0000000240)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000500)={'bond0\x00', 0x8000}) 00:55:10 executing program 4: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0x38881) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x541b, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000180)={0x0, 0x1, @raw_data=[0x7fff, 0x7fff, 0x1ff, 0x401, 0xffffffff, 0x1, 0xfffffffb, 0x40, 0x1, 0xec91, 0xfffffff8, 0x4fe, 0x9, 0x0, 0x400, 0x1]}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xfffe, 0x0, 0x0, 0x0}) 00:55:10 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff, 0x10040, 0x0, 0x1]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 327.391563] xt_hashlimit: overflow, try lower: 0/0 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff, 0x10040]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 327.434504] xt_hashlimit: overflow, try lower: 0/0 [ 327.462321] xt_hashlimit: overflow, try lower: 0/0 00:55:11 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800, 0xff]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 327.528038] xt_hashlimit: overflow, try lower: 0/0 [ 327.528122] xt_hashlimit: overflow, try lower: 0/0 00:55:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x1, 0x200040) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x7b7b4d83a91272ef) shmdt(r1) shmdt(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0xf, 0x0, [0xfffffffc]}], r2, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x4, 0x1, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "9e7cf2b741ff9607"}, 0x10}, 0x1, 0x0, 0x0, 0x24040811}, 0x1) 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3, 0x800]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000240), 0x13f, 0x1}}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x301801, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0xfffffec5, 0xfa00, @id_tos={&(0x7f0000000100), r1}}, 0x20) 00:55:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000080)=""/100, &(0x7f0000000100)=0x64) 00:55:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x7, @sliced={0x6, [0x8, 0x4, 0x9e4, 0x1, 0x907, 0xffe, 0x8991, 0x1, 0x7ff, 0x2, 0x1, 0x3f, 0x54, 0x9, 0x5f, 0x6, 0x3, 0x5, 0x4cf0, 0x0, 0x8, 0x400, 0x0, 0x4, 0x7625, 0x2, 0x5c5, 0xe000, 0x80, 0x10e7, 0x102, 0x9, 0x2, 0x8, 0x27d, 0x6e, 0x3, 0x0, 0x4, 0x800, 0x64, 0x9, 0x9, 0xf0, 0x0, 0x3, 0x7, 0x8000], 0x1}}) socket$caif_stream(0x25, 0x1, 0x2) ioctl$TIOCEXCL(r0, 0x540c) 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001, 0x0, 0x3]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x20000000000000, 0x3070c1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r0, r0, &(0x7f0000000080)=0x40, 0x3f) 00:55:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00f5ff000000fedbdf2505000000140006002001000000000000002200000000000106000b000600000014000500fe8000000000000000000000000000000800080064010102"], 0x4c}}, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x24}}, 0xc8c1) 00:55:11 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @sliced={0x4, [0x1, 0x20, 0x11ce, 0xf001, 0x3f, 0x2, 0x7ff, 0xf30b, 0x7, 0x40, 0xffff, 0x0, 0x5a0, 0x180, 0x9, 0x20, 0x4, 0x81, 0x6b, 0x6, 0x4, 0x40, 0x1000, 0x3, 0xfe00, 0x2, 0x7, 0x1f, 0x3, 0x4, 0x0, 0x8000, 0x0, 0x9, 0x3, 0xfa21, 0x1, 0x0, 0x0, 0x7949, 0x8, 0x1, 0x7ff, 0x5, 0x7ff, 0x7, 0x4, 0x1], 0xbf}}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x86, 0x6, 0x6, 0x10001, 0x3, [0x6f3, 0x2, 0x3, 0x80]}) 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350, 0x80000001]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0xb, 0x8, 0x0, 0x0, 0x1, 0x0}) clone(0x1000, &(0x7f00000000c0)="7d19118d5b89ddb442ab4379982fe85ae18d7f5dfb93f1e04cc0c5bd9ca8a776e965a9448b2fb3b0a188ff71c6c62a6b7fa03a15dc7be6dd83bc7831e014f759912d898520bec29032a5d8c9e2a3d136f8be7da88e0b2a2ca0f60732b0a1fba23ddb80bd8e1da15289c65358dad428f43fe570bc68da6378d89c042926a599c7de360a75cae1a1d8a2bb1d8132a19012cd374e830f52dc22fa06cba4d1fcb85c", &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000001200)="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") ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x98c2, 0x2, [{0x1}, {0xf, 0x1}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) fcntl$getown(r1, 0x9) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000180)) 00:55:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffe00, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x2b, @rand_addr=0x64010100, 0x4e24, 0x2, 'sh\x00', 0x8, 0x8, 0x78}, {@local, 0x4e22, 0x2, 0x4, 0xb38, 0x1}}, 0x44) 00:55:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2, 0x5}}, 0x20) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000180)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x0, 0x0, [0x0, 0x400, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x42b8000, 0x0, 0x100, 0x5]}, {0x0, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x7e1d, 0x0, 0x31657a5]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0xe, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r4, 0x8}, &(0x7f0000000180)=0x8) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x350]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 327.987390] xt_hashlimit: overflow, try lower: 0/0 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 5: r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'veth0_macvtap\x00', {}, 0xdb}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x28a303) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0xfffffffffffffc5e, 0x0, 0x0}) 00:55:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=""/29, 0x1d, 0x10000, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e25, @multicast1}}, 0x37) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0xfffffe00]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 328.036248] xt_hashlimit: overflow, try lower: 0/0 00:55:11 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) 00:55:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xca283) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x804600, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000080)=0x4) 00:55:11 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0xb, 0x8, 0x0, 0x0, 0x1, 0x0}) clone(0x1000, &(0x7f00000000c0)="7d19118d5b89ddb442ab4379982fe85ae18d7f5dfb93f1e04cc0c5bd9ca8a776e965a9448b2fb3b0a188ff71c6c62a6b7fa03a15dc7be6dd83bc7831e014f759912d898520bec29032a5d8c9e2a3d136f8be7da88e0b2a2ca0f60732b0a1fba23ddb80bd8e1da15289c65358dad428f43fe570bc68da6378d89c042926a599c7de360a75cae1a1d8a2bb1d8132a19012cd374e830f52dc22fa06cba4d1fcb85c", &(0x7f0000000200), &(0x7f00000001c0), &(0x7f0000001200)="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") ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x98c2, 0x2, [{0x1}, {0xf, 0x1}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) fcntl$getown(r1, 0x9) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000180)) 00:55:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x1, 0x7f}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) 00:55:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='/dev/video#\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x4) 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x8001, 0x0, 0x7fff0, 0x0}) 00:55:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:11 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000000c0)={0x544, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xa0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3497ca22da50"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x81}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xc, 0x1, "5ca730188e38f89f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb06}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x17, 0x1, "07a10f6a39cdc21efc8483451f9ebe1e3de665"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x8, 0x1, "fafebbe8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf85}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xc92e}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @broadcast}]}, @NL80211_ATTR_IE={0x47c, 0x2a, "4d536f0c7d4b0eda1879d74dd3a9f05d491435d921cff0f8653a4eb9e7c2331a9d2d6aac8620d6391ff5a01db337eb559fcf32da5f5a65c0f801bc5a28e4367d97ccd2064aba4b48cea5aa941f6e18e31798d5b672d940c9d79b61bd787016b3908b6eecace276843083f73e1d7f96f6a65be2c57ce4fc651bd0dbafe586527e37a3c5228ae996a7635ffc02f7f930da78abc9dc676ec6e0b3094350c42dfe7d3f0ab9a6db050ae82b65b7f9dab71bda3bea672063c6b80f585f6553ed123e6dc7f538e7fc409ad813904d67a9e2a8b11ffb46c0dbedba6ce0bda0c9b61a52c3a9c4499e8925c0925b41d404a1e095917b6b17a8971a9f828e39ce26946b8e432ff531ccd366bddd505435696a18820de6747d7aa5703ff02b6cea14194f4452c3231416e4faf7feddc3eeeda29aa6e93f7148689d881f25878c12a7caf3e7706c1a364b148badefa18287504244b4f4075f4dea70238961daf5ae812f67e868eafc5ec3a5bfc86578911412043f50eb6407ffd31ca26f3cb3fb9457084fc08c990a9f7937afd17f82176983d393bd95738cdf868a01202bf0eef830ee3ff2b9493af744c17cb4fcfaaaacbfa0f9c5c99f1a5ae7f9af8413bfaa7d53475b7288977c50537c0af7d09d915804d02b9124a1daa15c3352915c4b1b88976425e949c189341383f9ea3fef26dc3f87d5573929e9b3254bf6141b8c5afcbcb5497530fe58ca07adc2f93545c24005676d6d09593b5c3dc927bda6d63e1bb7221ab4027450e281cf5b746d739c564988e7f59fcb3cf84ea75e4178900fe4ba2c870b468592d1e179f53a0ff06877ff62a4ddd436ef7083464de22fd81429d5b4c8760248766cca357efea1dbb142822a1fc5317d1fd6809395b82e9fc74afcd4385aed19cfb486f3f3db8e325318478ef4a4605ccbe4ffd39d70c9803e7191680910546245922a40d649efd19a82179f06230a521ef1691e02468b985b682430b6ac56540e0707c96f33b496b6e99ad3dd5119e47a42cd37787012a179403d8b23aac8c867fc2b46caf9f5bb471e7f91940062f48a669c8149da9d483377a16d86529743e28f8e2a55df40814353d673d124b11a66792dce65d25295ab152d17a6db34ff9122597d6400d03624a6c499caccd3febb11bd6f89c7552a13650d63dbab9e6415db827468f19db96414869bc11887b29d3b69fc1978c948be8f0c6af0e80dca68bc44e9032a33840d7d93ed36d55d76c5f1113b746f290ec5c65cd26e7188549235ba7a8a9495f18eb5ed967b21995f6137520e1218631b45fbe33b7664107a9317f98a808c114b078eb4d51cfe17b4af30024eca3724e5801bb17f876f0d07b1e29629e767be1dac6d6c6480a1115e54e124a938ace7af2a0ef2e9946aeb2383f37a7d08f7f22a0afc13d048b81e54a7ed862d66f5e9e3b4780dbf844e499ceccf27193646d548f4f2179a324ff1b19ec9893eaf699feafe979a32e659bc2d6ab9f538c53670e3edb0e659a8ca7c0fa0ee56ab0ec04becbfbc0ae983148d5c33cf94b759c9b77c0653ece2ba14d588173a267988837df7b620cacf11f117e07ca4e82cf54ebe8c88c4f679d7fa414827a5856ba7a901"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}]}, 0x544}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) 00:55:11 executing program 4 (fault-call:7 fault-nth:0): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) [ 328.278939] xt_hashlimit: overflow, try lower: 0/0 [ 328.290066] xt_hashlimit: overflow, try lower: 0/0 00:55:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) [ 328.331335] xt_hashlimit: overflow, try lower: 0/0 00:55:11 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x4, @sliced={0x1, [0x6, 0x9, 0xeb0, 0x8000, 0xfe01, 0x7, 0x2f3e, 0x9, 0x5, 0x4cbd, 0xfe01, 0xfffe, 0x0, 0x5, 0x0, 0x3, 0x8eb1, 0x8, 0xfffe, 0x5, 0x3, 0x9, 0x7, 0x5, 0x400, 0x7ff, 0x34fb, 0x1, 0x5, 0x8, 0x200, 0x9, 0xc, 0x101, 0x4, 0x20, 0xd8, 0xb8b, 0x0, 0x6, 0x8, 0x2, 0x8001, 0x3f, 0xbc4, 0x83f, 0x3f, 0x8001], 0x1000}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x9}, @sack_perm, @sack_perm, @window={0x3, 0x200, 0x7d}, @mss={0x2, 0x4}], 0x5) 00:55:11 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/99, 0x63) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000140)) 00:55:11 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={0x7, 0x2, &(0x7f00000000c0)=[0x7, 0x8], &(0x7f0000000100)=[0x8, 0x1f, 0x9, 0xfffd, 0x0], &(0x7f0000000140)=[0x8001, 0xb7, 0x7, 0x40]}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 328.368531] FAULT_INJECTION: forcing a failure. [ 328.368531] name failslab, interval 1, probability 0, space 0, times 0 [ 328.411319] CPU: 1 PID: 23550 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 328.419274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.429611] Call Trace: [ 328.432208] dump_stack+0x1b2/0x283 [ 328.435840] should_fail.cold+0x10a/0x154 [ 328.439990] ? __lock_acquire+0x5fc/0x3f20 [ 328.444228] ? mempool_free+0x1d0/0x1d0 [ 328.448229] should_failslab+0xd6/0x130 [ 328.452209] kmem_cache_alloc+0x40/0x3c0 [ 328.456293] ? mempool_free+0x1d0/0x1d0 [ 328.460267] mempool_alloc+0x10e/0x2d0 [ 328.464165] ? remove_element.isra.0+0x1b0/0x1b0 [ 328.468933] ? ima_match_policy+0x85a/0x10e0 [ 328.473362] bio_alloc_bioset+0x41b/0x830 [ 328.478042] ? bvec_alloc+0x2d0/0x2d0 [ 328.481871] ? iov_iter_npages+0x17b/0x7c0 [ 328.487854] ? iov_iter_alignment+0x14b/0x620 [ 328.492384] blkdev_direct_IO+0x272/0xdc0 [ 328.496748] ? current_time+0x89/0xb0 [ 328.500629] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 328.505763] ? unwind_next_frame+0xe54/0x17d0 00:55:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0xffffff01}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 328.510274] ? touch_atime+0xce/0x250 [ 328.514083] ? __atime_needs_update+0x930/0x930 [ 328.518763] ? trace_hardirqs_on+0x10/0x10 [ 328.523202] ? mapping_needs_writeback+0xd4/0x110 [ 328.528200] ? filemap_check_errors+0x75/0x90 [ 328.533005] generic_file_read_iter+0x234/0x21c0 [ 328.537917] ? __might_fault+0x104/0x1b0 [ 328.542969] blkdev_read_iter+0xfe/0x160 [ 328.547035] do_iter_readv_writev+0x41d/0x5f0 [ 328.551666] ? avc_policy_seqno+0x5/0x10 [ 328.555733] ? clone_verify_area+0x1e0/0x1e0 [ 328.561016] ? rw_verify_area+0xe1/0x2a0 [ 328.565328] do_iter_read+0x21d/0x5b0 [ 328.569143] vfs_readv+0xc8/0x120 [ 328.572595] ? compat_rw_copy_check_uvector+0x320/0x320 [ 328.577974] ? SyS_write+0x1b7/0x210 [ 328.581694] ? __fget+0x1fe/0x360 [ 328.585154] ? lock_acquire+0x170/0x3f0 [ 328.589124] ? lock_downgrade+0x740/0x740 [ 328.593276] ? __fget+0x225/0x360 [ 328.597804] SyS_preadv+0x15a/0x200 [ 328.601421] ? SyS_writev+0x30/0x30 [ 328.605046] ? SyS_clock_settime+0x1a0/0x1a0 00:55:12 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="92ba3aab8edb04f627b6c92249705cb3a86797828fb3ce785cfa195982fbe5069116a84e54914914608cd793dfff462a5287ca73ec1e8732b330cacfcc4c2b16cc1e9de8bce24ba4bd3ed9eef2338da809a187c4369db8d3b2617cd2851bd3f7cb3720efc7aad2119e5a92d43cb15c19fa63b5760c287646b081e4c2350a9f28ff1783ac2b720e9804d799a321e21cda4c2934f0f370d48cf8925121bb6044f752874c6950c6541706000d954c34eab8416cc27a9f5f", 0xb6, 0x5, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @private0}, 0x1c) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 328.609465] ? do_syscall_64+0x4c/0x640 [ 328.613437] ? SyS_writev+0x30/0x30 [ 328.617170] do_syscall_64+0x1d5/0x640 [ 328.621077] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 328.626269] RIP: 0033:0x45d5b9 [ 328.629475] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 328.637364] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 328.644639] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 328.651913] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 00:55:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) 00:55:12 executing program 3: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='veth1_macvtap\x00') 00:55:12 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) socket$rxrpc(0x21, 0x2, 0xa) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 328.659226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.666635] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="680e000030002500000000000000000000000000540e0100500e01000a0001007065646974000000240e0280200e02000000000000000000000000200000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0xe68}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x2}, &(0x7f0000a8a000)=0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0xe, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180), 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000000)) 00:55:12 executing program 4 (fault-call:7 fault-nth:1): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x141, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x20, 0x4, r1}, 0x14) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000040)={{0xfc, 0x4}, 'port0\x00', 0x28, 0x120020, 0xd4, 0xff, 0x3, 0x2, 0xa3e6, 0x0, 0x1, 0x47}) 00:55:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x3a1, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 00:55:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x29, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7f]}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x80000) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000080), 0x4) 00:55:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000200)={0x1290, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3259}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x798e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa25}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x1174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_ID={0xf5, 0x3, "01e76e16e5624bef92ec74884bcf124352f36094e5d77fd1e276e7b8e9881e86bf55f310c20520f62710b03b30fcc4d114ec3e9178b56f1d76440fe1fad880506acfbcfe100761d03e7656f9622650efd2049d67bc64dbe9ccf46c037773f17773d7f828edf0e041c0dff3fc23a0608c141e88572fc989b548c9e61438728f89adb9157a1b86e7f815dc3799e6ca9da63c624d36fffabad0fdcdab94da188763cbdb11d08b3ebf03d2a065aa3075127aa9f73d19cc127355c2ff43466b8b8decee16304d390b8c1dd74bcc63f9fed926260c1ae35475cb9a9cccc893d3260dbeea9b4167ca0a80ce1e1aea42976c6e829d"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "b638fc93426c00b9e0c45fc9be6a1fc30f6b0dc12b3a5e55f3290134b546"}}, @TIPC_NLA_NODE_ID={0x20, 0x3, "6596ba638aef18f4cdb906eea08a81f69de840c59a55191e038f06c3"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1290}, 0x1, 0x0, 0x0, 0x40}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000180)={0x8, &(0x7f0000000000)=[{0x5, 0x81, 0x0, 0x1}, {0x7, 0x7e, 0x2, 0x2}, {0x582, 0x7, 0x1, 0x3}, {0x2, 0x55, 0x5b, 0x7}, {0x1, 0x20, 0x5, 0x1}, {0x7, 0xc1, 0x5, 0x800}, {0x1, 0x8, 0x95, 0x8001}, {0x4, 0x8, 0x5, 0x49a}]}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000001540)={0xfffff001, 0x59, "a7094184b190c6bbb43d9b3dbf46e3b9285058a2f5b0f52c1013752aa0e318910f99c76a9ae829f498210a145442414f1fefda418765536b4e5b2f5a7002405da999d8f6f2b8d609705efac407e67431b43b6e3e507ae0885e"}) [ 328.843253] FAULT_INJECTION: forcing a failure. [ 328.843253] name failslab, interval 1, probability 0, space 0, times 0 [ 328.876882] CPU: 1 PID: 23602 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 328.884810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.894184] Call Trace: [ 328.896790] dump_stack+0x1b2/0x283 [ 328.900448] should_fail.cold+0x10a/0x154 [ 328.904601] ? mempool_free+0x1d0/0x1d0 [ 328.908578] should_failslab+0xd6/0x130 [ 328.912561] kmem_cache_alloc+0x40/0x3c0 [ 328.916976] ? mempool_free+0x1d0/0x1d0 [ 328.920959] mempool_alloc+0x10e/0x2d0 [ 328.924850] ? retint_kernel+0x2d/0x2d [ 328.928827] ? remove_element.isra.0+0x1b0/0x1b0 [ 328.933592] ? bio_alloc_bioset+0x1fc/0x830 [ 328.937920] bvec_alloc+0xcc/0x2d0 [ 328.941498] bio_alloc_bioset+0x585/0x830 [ 328.945653] ? bvec_alloc+0x2d0/0x2d0 [ 328.949456] ? iov_iter_alignment+0x14b/0x620 [ 328.953965] blkdev_direct_IO+0x272/0xdc0 [ 328.958125] ? current_time+0x89/0xb0 [ 328.961966] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 328.967088] ? touch_atime+0xce/0x250 [ 328.970918] ? __atime_needs_update+0x930/0x930 [ 328.975600] ? mapping_needs_writeback+0xd4/0x110 [ 328.980452] ? filemap_check_errors+0x75/0x90 [ 328.984968] generic_file_read_iter+0x234/0x21c0 [ 328.989833] ? retint_kernel+0x2d/0x2d 00:55:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x799103) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@bh='bh'}, {@bsdgroups='bsdgroups'}], [{@smackfsdef={'smackfsdef'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_user={'subj_user', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) write(r1, &(0x7f0000000140)="a8", 0xffffff2a) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x2, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 328.993738] blkdev_read_iter+0xfe/0x160 [ 328.997815] do_iter_readv_writev+0x41d/0x5f0 [ 329.002317] ? avc_policy_seqno+0x5/0x10 [ 329.006382] ? clone_verify_area+0x1e0/0x1e0 [ 329.010798] ? rw_verify_area+0xe1/0x2a0 [ 329.014888] do_iter_read+0x21d/0x5b0 [ 329.018698] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 329.024418] vfs_readv+0xc8/0x120 [ 329.027877] ? compat_rw_copy_check_uvector+0x320/0x320 [ 329.033253] ? retint_kernel+0x2d/0x2d [ 329.037146] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 329.042344] ? retint_kernel+0x2d/0x2d [ 329.044241] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 329.046327] SyS_preadv+0x15a/0x200 [ 329.046338] ? SyS_writev+0x30/0x30 [ 329.046351] ? do_syscall_64+0x7a/0x640 [ 329.046357] ? SyS_writev+0x30/0x30 [ 329.046369] do_syscall_64+0x1d5/0x640 [ 329.046382] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 329.046395] RIP: 0033:0x45d5b9 [ 329.080577] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 00:55:12 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x40) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000240)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xf4, &(0x7f00000000c0)=[@in6={0xa, 0x3ff, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in6={0xa, 0x4e23, 0x88e, @private2, 0x3}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x5, @loopback, 0x4}, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x7ff}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0x2887, @mcast1, 0x100}, @in6={0xa, 0x4e24, 0x2, @private1, 0x7fff}]}, &(0x7f0000000200)=0x10) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4000}) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x158, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "c4b30da6a5e303cf867e3d6ac7191db26d2d55db46addf2a88ca76"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x800}, 0x8000) [ 329.088297] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 329.096088] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 329.103793] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 329.112628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.120283] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:12 executing program 4 (fault-call:7 fault-nth:2): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000003c0)={0x0, r0, 0x2, 0x5, 0x100, 0x6ebc}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000040)={r5, 0x8}, 0x8) 00:55:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x86, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ion\x00', 0x1984327d472e40ce, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/igmp\x00') r6 = semget$private(0x0, 0x4, 0x203) semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f0000000680)=""/161) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000340)={0x14, 0x64, &(0x7f00000002c0)="3e3f9996705867f5e4f7d95d53f95af5c29c2ec517266d9103e7dad6f6b4c08d5661eb644b724419f5f46978d32b65f5d4e41676be5dbc66e7f9688e9ccfcfe7c549d77f20ff42d366327e81da184d236be8e5e39f1001ed80611f352c49afcb648ba30d"}) r7 = socket$alg(0x26, 0x5, 0x0) write$vhost_msg_v2(r5, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000440)=""/235, 0xeb, &(0x7f0000000540)=""/119, 0x2, 0x4}}, 0x48) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000725bd7000fbdbdf256b0000000c0099001d000000020000000a000600aaaaaaaaaabb00000a000600ffffffffffff00000df8f0cf8ea03c35f770bce94f8c1b675fe594ac7bb43f3607dfe9d57967bba7a0018c02d894517b11459e82bb0759b4d582fabc0aa96e3655eb120a3e9f4fc881fea3f2ab43bbdd7557ada0f44d74edf599f0edead1e4d89156e683cee6c4dc77458078fa065bc5975034ea354984f2e22af041b9d05e200d5f7e1f"], 0x38}, 0x1, 0x0, 0x0, 0x10008084}, 0x4000000) 00:55:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2]}, {0x0, 0x0, [0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 329.179338] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 00:55:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 329.237921] FAULT_INJECTION: forcing a failure. [ 329.237921] name failslab, interval 1, probability 0, space 0, times 0 00:55:12 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(0xffffffffffffffff, 0x0) 00:55:12 executing program 3: shmget(0x3, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x107042, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x100, 0x9, 0x6, 0x5}, {0x4c, 0x3}, {0x688, 0x2c, 0xe1, 0x3}, {0x27, 0x81, 0x3, 0x5}, {0x79, 0xff, 0x64, 0x80000000}, {0x8000, 0xc0, 0x3, 0x80000001}, {0x3, 0x8, 0x8, 0x1f}, {0x0, 0x2f, 0x0, 0x9}, {0xfff, 0x0, 0x5, 0x20}, {0x800, 0x2f, 0x5, 0x7fff}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x53, 0x6, 0x10001, 0x1f, 0x44d, 0x2, 0x4, 0x400, 0x6, 0x4, 0xa0, 0x400, 0x0, 0x783, 0xffffffffffffa096, 0x100], 0x0, 0x200800}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x105880, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0xabef0c05cd2b8d8e, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000003c0)={0x9f0000, 0xfffffffa, 0x5, r3, 0x0, &(0x7f0000000380)={0xa30001, 0x2c, [], @value64=0x2}}) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000340)=0x9) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000400)=@usbdevfs_disconnect={0x7fff}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x203, 0x1, 0x5000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) [ 329.289752] CPU: 0 PID: 23649 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 329.297682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.307217] Call Trace: [ 329.309816] dump_stack+0x1b2/0x283 [ 329.313452] should_fail.cold+0x10a/0x154 [ 329.317608] should_failslab+0xd6/0x130 [ 329.321594] kmem_cache_alloc_node+0x54/0x410 [ 329.326107] create_task_io_context+0x2a/0x3c0 [ 329.330697] generic_make_request_checks+0x1350/0x19f0 00:55:12 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:12 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x8, 0x18, [], 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 329.335982] ? blk_rq_prep_clone+0x6c0/0x6c0 [ 329.340393] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 329.345158] generic_make_request+0x67/0x850 [ 329.349571] ? retint_kernel+0x2d/0x2d [ 329.353468] ? blk_queue_exit+0x1d0/0x1d0 [ 329.357620] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 329.362383] submit_bio+0x234/0x390 [ 329.366042] ? generic_make_request+0x850/0x850 [ 329.370721] ? blkdev_direct_IO+0x4f9/0xdc0 [ 329.375053] blkdev_direct_IO+0x567/0xdc0 [ 329.379217] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 329.384337] ? mapping_needs_writeback+0xd4/0x110 00:55:12 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 00:55:12 executing program 5: ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)=0x5) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x1, 0x15, 0x0, 0xfffc, 0x0, 0x0, 0x0}) [ 329.389185] ? filemap_check_errors+0x75/0x90 [ 329.393682] generic_file_read_iter+0x234/0x21c0 [ 329.398440] ? retint_kernel+0x2d/0x2d [ 329.402334] blkdev_read_iter+0xfe/0x160 [ 329.406403] do_iter_readv_writev+0x41d/0x5f0 [ 329.410905] ? clone_verify_area+0x1e0/0x1e0 [ 329.415349] ? rw_verify_area+0xe1/0x2a0 [ 329.419415] do_iter_read+0x21d/0x5b0 [ 329.423232] ? retint_kernel+0x2d/0x2d [ 329.427122] vfs_readv+0xc8/0x120 [ 329.430575] ? compat_rw_copy_check_uvector+0x320/0x320 00:55:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010000}, 0x40) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000280)={0x800, 0x1, 0x3}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @sdr={0x0, 0x4}}) [ 329.435957] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 329.440980] ? check_preemption_disabled+0x35/0x240 [ 329.446012] ? __fdget+0x183/0x1f0 [ 329.449600] SyS_preadv+0x15a/0x200 [ 329.453237] ? SyS_writev+0x30/0x30 [ 329.456869] ? do_syscall_64+0xc8/0x640 [ 329.460867] ? SyS_writev+0x30/0x30 [ 329.464493] do_syscall_64+0x1d5/0x640 [ 329.468391] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 329.473598] RIP: 0033:0x45d5b9 [ 329.476783] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 329.484500] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 329.491771] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 329.499043] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 329.506316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.513588] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:13 executing program 4 (fault-call:7 fault-nth:3): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:13 executing program 5: getsockname$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0}) rt_sigreturn() getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x5e4}, &(0x7f0000000180)=0x8) 00:55:13 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x19) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x200000000000}, 0x0) move_pages(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000ffa000/0x3000)=nil], &(0x7f0000000200)=[0xfffff001, 0x7, 0x8, 0x6, 0x10001, 0xffffffff, 0x5, 0xffff0000, 0x4], &(0x7f0000000240)=[0x0], 0x6) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000000)={0x1}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5ad17f96, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:13 executing program 2: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="290600c000000000fc010000000022000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000bb"], 0x38) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x220000, 0x0) 00:55:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x80, 0x100000000}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r2}}, 0x18) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000280)=0x20, 0x4) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r3) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:13 executing program 5: open(&(0x7f0000000180)='./file0\x00', 0x48001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x5, 0x20, 0x3}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x100, 0x8280) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0x10000}) 00:55:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @none, 0xd4}, 0xa) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000000040)=""/134, &(0x7f0000000100)=0x86) [ 329.723994] FAULT_INJECTION: forcing a failure. [ 329.723994] name failslab, interval 1, probability 0, space 0, times 0 [ 329.758892] CPU: 1 PID: 23711 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 329.766809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.776163] Call Trace: [ 329.778756] dump_stack+0x1b2/0x283 [ 329.782473] should_fail.cold+0x10a/0x154 [ 329.786628] ? mempool_free+0x1d0/0x1d0 [ 329.790605] should_failslab+0xd6/0x130 [ 329.794575] kmem_cache_alloc+0x40/0x3c0 [ 329.798631] ? mempool_free+0x1d0/0x1d0 [ 329.802603] mempool_alloc+0x10e/0x2d0 [ 329.806498] ? remove_element.isra.0+0x1b0/0x1b0 [ 329.811256] ? kasan_kmalloc+0x139/0x160 [ 329.815356] ? kasan_kmalloc+0xeb/0x160 [ 329.819337] bio_alloc_bioset+0x41b/0x830 [ 329.823490] ? __lock_acquire+0x5fc/0x3f20 [ 329.827733] ? bvec_alloc+0x2d0/0x2d0 [ 329.831544] bio_clone_fast+0x20/0x130 [ 329.835615] bio_split+0x69/0x250 [ 329.839113] blk_queue_split+0x52d/0x19f0 [ 329.843283] ? blk_recount_segments+0x540/0x540 [ 329.847970] blk_mq_make_request+0x131/0x1ad0 [ 329.852476] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 329.857445] ? generic_make_request_checks+0xab4/0x19f0 [ 329.862998] ? blk_exit_rl+0x70/0x70 [ 329.866719] ? kmem_cache_alloc+0x35f/0x3c0 [ 329.871048] ? blk_rq_prep_clone+0x6c0/0x6c0 [ 329.875468] generic_make_request+0x1f6/0x850 [ 329.879970] ? iov_iter_advance+0x1c9/0xc00 [ 329.884327] ? blk_queue_exit+0x1d0/0x1d0 [ 329.888507] submit_bio+0x234/0x390 [ 329.892142] ? generic_make_request+0x850/0x850 [ 329.896813] ? zero_fill_bio+0x390/0x390 [ 329.900875] ? iov_iter_npages+0x17b/0x7c0 [ 329.905141] ? bio_set_pages_dirty+0x8c/0x170 [ 329.909647] blkdev_direct_IO+0x567/0xdc0 [ 329.913806] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 329.918908] ? unwind_next_frame+0xe54/0x17d0 [ 329.923410] ? trace_hardirqs_on+0x10/0x10 [ 329.927643] ? mapping_needs_writeback+0xd4/0x110 [ 329.932487] ? filemap_check_errors+0x75/0x90 [ 329.936997] generic_file_read_iter+0x234/0x21c0 [ 329.942016] ? __might_fault+0x104/0x1b0 [ 329.946088] blkdev_read_iter+0xfe/0x160 [ 329.950184] do_iter_readv_writev+0x41d/0x5f0 [ 329.954705] ? avc_policy_seqno+0x5/0x10 [ 329.959380] ? clone_verify_area+0x1e0/0x1e0 [ 329.963796] ? rw_verify_area+0xe1/0x2a0 [ 329.967858] do_iter_read+0x21d/0x5b0 [ 329.971698] vfs_readv+0xc8/0x120 00:55:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) 00:55:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000040)=0x14) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 329.975155] ? compat_rw_copy_check_uvector+0x320/0x320 [ 329.980523] ? SyS_write+0x1b7/0x210 [ 329.984271] ? __fget+0x1fe/0x360 [ 329.987726] ? lock_acquire+0x170/0x3f0 [ 329.991701] ? lock_downgrade+0x740/0x740 [ 329.995856] ? __fget+0x225/0x360 [ 329.999315] SyS_preadv+0x15a/0x200 [ 330.002946] ? SyS_writev+0x30/0x30 [ 330.006577] ? SyS_clock_settime+0x1a0/0x1a0 [ 330.010991] ? do_syscall_64+0x4c/0x640 [ 330.014965] ? SyS_writev+0x30/0x30 [ 330.018606] do_syscall_64+0x1d5/0x640 00:55:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000000c0)) r2 = getpgid(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x0, 0x11, 0x6, 0x10000, 0x2, 0x8, 0x39565039, 0x1, 0x1}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 330.022526] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 330.027717] RIP: 0033:0x45d5b9 [ 330.030905] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 330.038621] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 330.045895] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 330.053289] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 330.060570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 330.067847] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:13 executing program 4 (fault-call:7 fault-nth:4): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x4, 0xd, 0x28, 0x0, 0x0, 0x4, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x7, 0x4, 0x9b, {r2, r3/1000+10000}, {0x0, 0xea60}, {0x2, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0x10, 0x2, 0x0, 0x0, "8d68aa0e5ad39fe46bac0bddc9931ae00fbc1c3376cfa8f87504615dbbbe927bfab54942a08139d657156f8f78b2618e445a775837ebd4e7384ffe88131d5d6a"}}, 0x80}, 0x1, 0x0, 0x0, 0x8041}, 0x48004) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000240)={0x1, "2b867e2c3ff35be87a6536598ecf6848ef7472af7806ea6c58a5f8964c97e927", 0x3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x84, 0x0, 0x5, "e319e9e860c7a7a05228e809cc79ac67", "7b4e1fecbbf348916edf5bee389eca87d63e17ec2f64c6b6991da813463dac01a9e23192006713bea6b148ac361769f64dd32254f5dafbaf2b81a9966e6c79605204b832909ceedc3e3c85a32670169716d025765373d8804d0c484e642187db1d4b61a8a6ef2f24eb4ccc7e26077f"}, 0x84, 0x3) 00:55:13 executing program 0: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$revoke(0x3, r2) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x7, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000180)={0x80000000, 0x8, 0xa164, 0x7fffffff}) 00:55:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x5ef143) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x200, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000080)) 00:55:13 executing program 1: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=""/80, 0x50}}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x101, 0x59, 0x0, 0xfffffffffffffff8, 0x3f, 0xb641}) 00:55:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) sendto$llc(r3, &(0x7f0000000040)="294f15e1cc69448b858270501a9d137f8def8957b7e5a2a9334291fea7b3bf7c6387075568d166384dfadfae0ccc08af7e46f76bf2e8dbf72da18345769657817ff2c00d3824e96163bda2853489dccd5549950aafafd865e4c77fbf9b7666618880e0d9ad9b112eeb243936e40071757fc908c127", 0x75, 0x4040000, &(0x7f00000000c0)={0x1a, 0xffff, 0xff, 0x4, 0x7, 0x7f, @broadcast}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 330.278007] FAULT_INJECTION: forcing a failure. [ 330.278007] name failslab, interval 1, probability 0, space 0, times 0 [ 330.318180] CPU: 0 PID: 23768 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 330.318218] xt_hashlimit: overflow, try lower: 0/0 [ 330.326190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.326196] Call Trace: [ 330.326219] dump_stack+0x1b2/0x283 [ 330.326237] should_fail.cold+0x10a/0x154 [ 330.326251] ? mempool_free+0x1d0/0x1d0 [ 330.326263] should_failslab+0xd6/0x130 [ 330.326275] kmem_cache_alloc+0x40/0x3c0 [ 330.326290] ? mempool_free+0x1d0/0x1d0 [ 330.366877] mempool_alloc+0x10e/0x2d0 [ 330.370771] ? remove_element.isra.0+0x1b0/0x1b0 [ 330.375561] ? bt_for_each+0xa6/0x3d0 [ 330.379368] ? blk_queue_exit+0xb3/0x1d0 [ 330.383433] ? retint_kernel+0x2d/0x2d [ 330.387324] bio_alloc_bioset+0x41b/0x830 [ 330.391478] ? bvec_alloc+0x2d0/0x2d0 [ 330.395278] bio_clone_fast+0x20/0x130 [ 330.399161] bio_split+0x69/0x250 [ 330.402653] blk_queue_split+0x52d/0x19f0 [ 330.406800] ? __lock_acquire+0x5fc/0x3f20 [ 330.411041] ? blk_recount_segments+0x540/0x540 [ 330.415734] blk_mq_make_request+0x131/0x1ad0 [ 330.420234] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 330.425164] ? blk_queue_exit+0xb3/0x1d0 [ 330.429228] ? blk_exit_rl+0x70/0x70 [ 330.432940] ? lock_downgrade+0x740/0x740 [ 330.437092] generic_make_request+0x1f6/0x850 [ 330.441589] ? blk_queue_exit+0x1d0/0x1d0 [ 330.445740] ? retint_kernel+0x2d/0x2d [ 330.449634] submit_bio+0x234/0x390 [ 330.453261] ? generic_make_request+0x850/0x850 [ 330.457927] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 330.462681] ? iov_iter_npages+0x17b/0x7c0 [ 330.466915] ? bio_set_pages_dirty+0x8c/0x170 [ 330.471431] blkdev_direct_IO+0x567/0xdc0 [ 330.475668] ? check_preemption_disabled+0x35/0x240 [ 330.480693] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 330.485814] ? blkdev_direct_IO+0x2/0xdc0 [ 330.489990] generic_file_read_iter+0x234/0x21c0 [ 330.494756] ? retint_kernel+0x2d/0x2d [ 330.498676] blkdev_read_iter+0xfe/0x160 [ 330.502741] do_iter_readv_writev+0x41d/0x5f0 [ 330.507235] ? avc_policy_seqno+0x5/0x10 [ 330.511297] ? clone_verify_area+0x1e0/0x1e0 [ 330.515712] ? rw_verify_area+0xe1/0x2a0 [ 330.520393] do_iter_read+0x21d/0x5b0 [ 330.524210] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 330.528969] vfs_readv+0xc8/0x120 [ 330.532525] ? compat_rw_copy_check_uvector+0x320/0x320 [ 330.537941] ? __fget+0x1fe/0x360 [ 330.541395] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 330.546251] ? lock_downgrade+0x740/0x740 [ 330.550443] ? __fget+0x225/0x360 [ 330.553930] SyS_preadv+0x15a/0x200 [ 330.557721] ? SyS_writev+0x30/0x30 [ 330.561379] ? do_syscall_64+0x4c/0x640 [ 330.565361] ? SyS_writev+0x30/0x30 [ 330.568990] do_syscall_64+0x1d5/0x640 [ 330.572885] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 330.578073] RIP: 0033:0x45d5b9 [ 330.581260] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 330.589007] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 330.596300] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 330.603583] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 330.610875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:55:13 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r2, 0x4, 0x7, 0x7fff}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r4, r5) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f0000000540)=0xe8) syz_mount_image$fuse(&(0x7f00000003c0)='fuse\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x2002, &(0x7f0000000580)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x6a}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x35, 0x62, 0x39, 0x34, 0x69, 0x62, 0x61], 0x2d, [0x61, 0x38, 0x62, 0x30], 0x2d, [0x30, 0x37, 0x65, 0x32], 0x2d, [0x31, 0x32, 0x65, 0x39], 0x2d, [0x38, 0x65, 0x36, 0x39, 0x63, 0x30, 0x39, 0x61]}}}, {@uid_eq={'uid', 0x3d, r6}}, {@uid_eq={'uid'}}]}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180), 0x1) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 00:55:13 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x2, 0x7}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000180)) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000001c0)=0x1, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x5, 0x2) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x1, 0x5, 0x7}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:14 executing program 2: mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='9p\x00', 0x1000000, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303011cfc9bd95afceb2a6f2df9030346532302c64656275671d307830ef63ed98b5bc9f844a04fe303030f12888b0ca4d624d6cd5b6b414381cfdac425fca19db4aa6c6c9a33bf8c467f27629386070abec0ba684ea9a7a331d7a063e8366fbf368e68b0b05c9c8e387eb4f8982523edb03", @ANYRESHEX=0xee00, @ANYBLOB="2c6d6d61702c667363616368652c6d73693c653d3078303030303030303030303030666666662c64656275673d3078303030303030303030303030306666662c63616368653d6c6f6f73652c7065726d6974e4646972656374696f2c7375626a5f747970653d2f6465760100000000000000616e642f72646d615f636d002c00"]) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000080)=0x5, 0x4) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x800, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r4, r5) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)={{0x3, r2, 0x0, 0xee00, r5, 0x190, 0x8001}, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc]}, {0xa, 0x0, [0x0, 0x5, 0x0, 0x0, 0x1, 0xfffffffc]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 330.618175] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c [ 330.655696] xt_hashlimit: overflow, try lower: 0/0 00:55:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 330.695069] xt_hashlimit: overflow, try lower: 0/0 00:55:14 executing program 4 (fault-call:7 fault-nth:5): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42080}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000001090102000000000000000005000002080005400000000d0900010073797a3000000000080005400000001c08000640000000010900010073797a30100000001c0002000c00028005000100880000000c000280050001000100000078652e1e41995dc92da67ce07c5432db95f933048eede11ef43c7e940af9a61919a9b0f634a85772eb374479fdf05806c112a26f6d7075688923e784c045935663856a7a01785d2d266d3b84e4c0"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x850) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x80, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x10c, 0x0, 0x110, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x7f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x20}, {0xc, 0x90, 0x101}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc1}, 0x40810) 00:55:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'}) 00:55:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5, 0x4]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x1]}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7ff) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8, 0x80}}, 0x30) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) connect$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x111, 0x3}}, 0x20) 00:55:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x800]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:14 executing program 3: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x7], 0x2, 0x0, 0x7fff, 0xff, 0x800, 0xf91, 0x8001, {0xffffffff, 0x4, 0x4101, 0x401, 0x1, 0x7ff, 0x101, 0x18e, 0x0, 0x2, 0x6, 0x4, 0x10001, 0x9, "de9b0762d37b25ac927355580b1ca3121f6d00a1fc6bb48e3a0b3109bfd81efc"}}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 331.051562] FAULT_INJECTION: forcing a failure. [ 331.051562] name failslab, interval 1, probability 0, space 0, times 0 [ 331.096592] CPU: 1 PID: 23819 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 331.104525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.113888] Call Trace: [ 331.116520] dump_stack+0x1b2/0x283 [ 331.121225] should_fail.cold+0x10a/0x154 [ 331.125396] ? mempool_free+0x1d0/0x1d0 [ 331.129465] should_failslab+0xd6/0x130 [ 331.133457] kmem_cache_alloc+0x40/0x3c0 [ 331.137706] ? mempool_free+0x1d0/0x1d0 [ 331.141687] mempool_alloc+0x10e/0x2d0 [ 331.145583] ? remove_element.isra.0+0x1b0/0x1b0 [ 331.150375] ? retint_kernel+0x2d/0x2d [ 331.154362] bio_alloc_bioset+0x41b/0x830 [ 331.158523] ? bvec_alloc+0x2d0/0x2d0 [ 331.162341] bio_clone_fast+0x20/0x130 [ 331.166230] bio_split+0x69/0x250 [ 331.169684] blk_queue_split+0x52d/0x19f0 [ 331.173828] ? __lock_acquire+0x5fc/0x3f20 [ 331.178110] ? blk_recount_segments+0x540/0x540 [ 331.182795] blk_mq_make_request+0x131/0x1ad0 [ 331.187297] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 331.192243] ? blk_queue_exit+0xb3/0x1d0 [ 331.196310] ? blk_exit_rl+0x70/0x70 [ 331.200037] ? lock_downgrade+0x740/0x740 [ 331.204193] generic_make_request+0x1f6/0x850 [ 331.208703] ? blk_queue_exit+0x1d0/0x1d0 [ 331.212866] ? retint_kernel+0x2d/0x2d [ 331.216768] submit_bio+0x234/0x390 [ 331.220401] ? generic_make_request+0x850/0x850 [ 331.225095] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 331.229941] ? iov_iter_npages+0x17b/0x7c0 [ 331.234202] ? bio_set_pages_dirty+0x8c/0x170 [ 331.238704] blkdev_direct_IO+0x567/0xdc0 [ 331.242869] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 331.247991] ? filemap_check_errors+0x75/0x90 [ 331.252491] generic_file_read_iter+0x234/0x21c0 [ 331.257260] ? check_preemption_disabled+0x35/0x240 [ 331.262291] blkdev_read_iter+0xfe/0x160 [ 331.266451] do_iter_readv_writev+0x41d/0x5f0 [ 331.270977] ? avc_policy_seqno+0x5/0x10 [ 331.275042] ? clone_verify_area+0x1e0/0x1e0 [ 331.279461] ? rw_verify_area+0xe1/0x2a0 [ 331.283540] do_iter_read+0x21d/0x5b0 [ 331.287409] ? check_preemption_disabled+0x35/0x240 [ 331.292440] vfs_readv+0xc8/0x120 [ 331.295904] ? compat_rw_copy_check_uvector+0x320/0x320 [ 331.301276] ? __fget+0x1fe/0x360 [ 331.304739] ? lock_downgrade+0x740/0x740 [ 331.308895] ? __fget+0x225/0x360 [ 331.312358] SyS_preadv+0x15a/0x200 [ 331.315987] ? SyS_writev+0x30/0x30 [ 331.319623] ? do_syscall_64+0x4c/0x640 [ 331.323598] ? SyS_writev+0x30/0x30 [ 331.327248] do_syscall_64+0x1d5/0x640 [ 331.331166] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 331.336358] RIP: 0033:0x45d5b9 [ 331.339576] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 00:55:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000000)=""/21) 00:55:14 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x203, 0x0, 0x0, 0x4, 0x0}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) 00:55:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000040)=""/63) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x9aec]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000000c0)) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0xd2, 0x1, 0x7, 0x85, 0x0, 0x9, 0x310, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x3f}, 0x400, 0x2, 0x0, 0x0, 0x9, 0x10001, 0xff00}) [ 331.347287] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 331.354589] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 331.361862] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 331.369141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 331.376448] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x20c084, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) r4 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x8000, 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000011c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000000900)={0x10, 0x3, {0x7, @usage=0x4, 0x0, 0x7, 0x100000000, 0x800, 0x0, 0x4, 0x26, @struct={0xfffffffe, 0x80000001}, 0x2, 0x5a2, [0x8, 0x1000000000000, 0x3, 0x85, 0xea, 0x57f7]}, {0x0, @usage=0x8, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x410, @usage=0x34, 0x401, 0x0, [0x4, 0x10000, 0xad, 0x3, 0x8]}, {0x7, @struct={0x1, 0x3}, r10, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xffff, 0x44, @struct={0x5}, 0xff, 0x1ff, [0xaf, 0x21f, 0x0, 0x0, 0xf564, 0xffff]}, {0xbb3a, 0x8001}}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f00000000c0)={{}, {@val={r10}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000140)={{r2}, r5, 0x14, @inherit={0x78, &(0x7f00000000c0)={0x1, 0x6, 0x80, 0x5, {0x1c, 0x2776, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0xfffffffffffffffe, 0x0, 0x20]}}, @devid=r10}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)={{r1}, {@val={r10}, @max='max'}}) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x581000, 0x0) ioctl$SNDCTL_DSP_POST(r11, 0x5008, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:15 executing program 3: ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0x7, 0x29cb, 0x6, 0x8}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x88800, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xb4}}, 0x20040040) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000180)='gre0\x00') sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0xe, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x8) 00:55:15 executing program 4 (fault-call:7 fault-nth:6): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:15 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x608081) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x6c41f829d629853e, r2) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0xe, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000380)={r7, 0x6, 0xd5}, 0x8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048084) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x800000) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000000)=""/43) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001780)={'tunl0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x1f, 0x10000, {{0xa, 0x4, 0x0, 0x2, 0x28, 0x66, 0x0, 0xd7, 0x29, 0x0, @private=0xa010101, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xf8, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@empty, 0x9}]}]}}}}}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002b80)={&(0x7f00000017c0)={0x13b0, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x1060, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x54, 0x5, "9f55b4798a9a65f84cbb7aad007383dcd98cdff3aead145d7ad91d0732dce859d86a87b3b96d6f4bd492f6bee6710f7ebb795d70ea9dddc38475a709870f934ff6d468cc75c42989045deea1f54e86d9"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x298, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xae, 0x4, "cca7db7d11bfdb6a84aae47f918ba4520aa758d14218186ec631d2d3cbf6b6c1275fd835eef6670847981dd45df80295c8f76c0329e5aacb377ae06a3b77afed5408c9624e0d1f159e05cef765e5d607aa2cbb623e32f1649c419d6d8a8550eee427f424d693f5a32b6a6af18dbff32c9a9caf48fa5aabc06419d5f0c006b2694471fe98553c26931335b7b14f479b79f0caa08baf3f54066ee0af1ed4f629b3f2727a8d0e25df98b602"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x1b8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^#\x00'}]}, {0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',$#\xe8\xff@\'\'#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#%\xe4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}]}, {0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc1b}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4e0f}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']--\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '/dev/infiniband/rdma_cm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+]&##(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xfd\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x13b0}, 0x1, 0x0, 0x0, 0x8810}, 0x4004010) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x0, 0x0, [0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x9d8000, 0x0}) 00:55:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000009000100af0d"], 0x20}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) 00:55:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x12, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x16, 0x0, 0x2, 0x32, 0xfffffffd, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000180)) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x9, 0x3, &(0x7f00000000c0)="53a70a77c93f16115cb0197d8fd9bb92338ee96eb3cd97519a26f03a630fc9a863f5eb13ed668a18b015e1deb08ab661e271b2e38f218f3a0997ae384e05dd35f49d935fbb242dd9134e868beaed6031ccf086e49b23f273e0ace6e543ecd1c546c0efcb5ac44bd70745972eea27830ec4b282fa2459b46718da2323b379984d15eff4c770e4bef3ec6dae7eaeb2dc93e6698508eea5f2bff032b538d49d8a69c8185e5a852f7e07"}) 00:55:15 executing program 3: recvfrom$ax25(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x42, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000010c0)={0x0, @reserved}) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000001180)) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x149800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0}) 00:55:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f00000000c0)=0x9) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 331.748244] FAULT_INJECTION: forcing a failure. [ 331.748244] name failslab, interval 1, probability 0, space 0, times 0 00:55:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x407551fb, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L-', 0x4}, 0x16, 0x2) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x10002, 0x0) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0', [{0x20, '-$'}, {0x20, 'trusted.overlay.nlink\x00'}, {0x20, '/dev/video#\x00'}, {0x20, 'trusted.overlay.nlink\x00'}, {}, {0x20, '/!!$'}, {}, {0x20, 'L-'}, {0x20, 'trusted.overlay.nlink\x00'}], 0xa, "088d00a7e2c1bb2f7f3b851c2a3b1b1f0ff63b258305db2a35fce1a638448733e75c414fad86e501f6f57d607ae1d8ad29fec4c2f5ad9688ff95ee8a679f0daf8980c6a56c69ac6f98d77b686dbeb4159402c384d49cd3b4dc36027658490abfaf2a0b67c825ea1aebfe5914ff2bf5f5ebc4d0d0"}, 0xde) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f00000001c0)="a4ab608c92bf24bb6cbe05b674de62ded0af68e875ec23df265d6464e0a0f031501cdd7c568aea655bcec0692b81b4f6a17d7b6754ed7ecac089dea956cd7bd0ceb3e35db6245985f3f10ec1f7723b25d3ba2d74097895562f3986961f2b9c74effc3643bbb6ee706de78153c2bb07711786cec745273ac017c55c2a79", &(0x7f0000000240)=@buf="215af2a38d432bd58dcc73696dd0cac9f0d761d67f5a5d0d50f8ec6b65860266c6506d32ea0b7cc20b88403764477bef48f7b71523b7fe3b80d027ac0020ef30629b4c4603cd49604cd939f7ebd72b9a42fc471be866e3411a74c3fe38f1e82b5934d21d45b0a97673bee975198ebc9c0fd7e43c79596146fe7310031b0de9ecb240bc63c60483c0103fa3", 0x1}, 0x20) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @sdr={0x3031334d}}) [ 331.792822] CPU: 0 PID: 23886 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 331.800737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.810188] Call Trace: [ 331.812787] dump_stack+0x1b2/0x283 [ 331.817053] should_fail.cold+0x10a/0x154 [ 331.821206] ? mempool_free+0x1d0/0x1d0 [ 331.825187] should_failslab+0xd6/0x130 [ 331.829191] kmem_cache_alloc+0x40/0x3c0 [ 331.833258] ? mempool_free+0x1d0/0x1d0 [ 331.837231] mempool_alloc+0x10e/0x2d0 00:55:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) semop(0x0, &(0x7f0000000000)=[{0x6, 0x1f, 0x800}, {0x2, 0x46, 0x800}, {0x4, 0x0, 0x1000}], 0x3) 00:55:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x2, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)) [ 331.841119] ? remove_element.isra.0+0x1b0/0x1b0 [ 331.845876] ? bt_for_each+0xa6/0x3d0 [ 331.849708] ? blk_queue_exit+0xb3/0x1d0 [ 331.853768] ? retint_kernel+0x2d/0x2d [ 331.857662] bio_alloc_bioset+0x41b/0x830 [ 331.861815] ? bvec_alloc+0x2d0/0x2d0 [ 331.865620] bio_clone_fast+0x20/0x130 [ 331.869511] bio_split+0x69/0x250 [ 331.872970] blk_queue_split+0x52d/0x19f0 [ 331.877121] ? retint_kernel+0x2d/0x2d [ 331.881020] ? blk_recount_segments+0x540/0x540 [ 331.885716] blk_mq_make_request+0x131/0x1ad0 [ 331.890225] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 331.895196] ? blk_queue_exit+0xb3/0x1d0 [ 331.899269] ? blk_exit_rl+0x70/0x70 [ 331.902988] ? lock_downgrade+0x740/0x740 [ 331.907151] generic_make_request+0x1f6/0x850 [ 331.911651] ? blk_queue_exit+0x1d0/0x1d0 [ 331.915804] ? submit_bio+0x22c/0x390 [ 331.919610] submit_bio+0x234/0x390 [ 331.923277] ? generic_make_request+0x850/0x850 [ 331.927951] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 331.932800] ? iov_iter_npages+0x17b/0x7c0 [ 331.937063] ? bio_set_pages_dirty+0x8c/0x170 [ 331.941568] blkdev_direct_IO+0x567/0xdc0 [ 331.945735] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 331.950852] ? filemap_check_errors+0x75/0x90 [ 331.955364] generic_file_read_iter+0x234/0x21c0 [ 331.960135] ? retint_kernel+0x2d/0x2d [ 331.964035] blkdev_read_iter+0xfe/0x160 [ 331.968126] do_iter_readv_writev+0x41d/0x5f0 [ 331.972631] ? clone_verify_area+0x1e0/0x1e0 [ 331.977056] ? do_iter_read+0x1b7/0x5b0 [ 331.981038] do_iter_read+0x21d/0x5b0 [ 331.984850] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 331.989891] vfs_readv+0xc8/0x120 [ 331.994431] ? compat_rw_copy_check_uvector+0x320/0x320 [ 331.999801] ? retint_kernel+0x2d/0x2d [ 332.003728] ? __fget+0x1fe/0x360 [ 332.007167] ? lock_downgrade+0x740/0x740 [ 332.011338] ? __fget+0x225/0x360 [ 332.014800] SyS_preadv+0x15a/0x200 [ 332.018435] ? SyS_writev+0x30/0x30 [ 332.022060] ? SyS_clock_settime+0x1a0/0x1a0 [ 332.026450] ? do_syscall_64+0x4c/0x640 [ 332.030410] ? SyS_writev+0x30/0x30 [ 332.034024] do_syscall_64+0x1d5/0x640 [ 332.037902] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 332.043073] RIP: 0033:0x45d5b9 [ 332.046251] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 332.054149] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 332.061418] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 332.068696] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 332.075958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 332.083218] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:15 executing program 4 (fault-call:7 fault-nth:7): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x20, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x7ff]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x6, 0x2) 00:55:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000074, 0xcad01) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0xfffffffffffff198, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x4, 0x9, 0x8001}, &(0x7f0000000280)=0xe8b4fda, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x4}}, 0x10) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="27c89f01", @ANYRES16=r6, @ANYBLOB="3d41000000000000000010000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r6, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44844}, 0x8048) prctl$PR_SET_DUMPABLE(0x4, 0x1) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000500)={{0x3, @netrom}, [@netrom, @remote, @default, @remote, @bcast, @null, @null]}, &(0x7f0000000580)=0x48) shmctl$SHM_LOCK(0x0, 0xb) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f00000006c0)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={r2}, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) 00:55:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000080)={{0x1f, @rand_addr=0x64010101, 0x4e24, 0x0, 'none\x00', 0x3f, 0x2, 0x6d}, {@empty, 0x4e24, 0x4, 0x446, 0x0, 0x4}}, 0x44) 00:55:15 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x288001, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3231564e}}) 00:55:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000740)='net_prio.ifpriomap\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], r1, 0x1, 0x1, 0x90}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x2, 0x4) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f0000000080)=0xc60, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x360, 0x26, 0x100, 0x70bd29, 0x25dfdbfb, {0x1b}, [@nested={0x34c, 0x79, 0x0, 0x1, [@generic="6b24e92f54bce4d618b6f0460b177c0473dcb61d95d88556784d8f5461ba579db316041e55efcd3633235eb0b6025a35bca9e92334e0636e20fbe09c09f74a833801ec919a713a7656f0fefa63830e79888eb6e4ce1c4b4629e8e3bd04cce9cffda48c20ad2d9a8fdbb8cdd9360f6b684063f45e2b8aff401122e2", @typed={0x4, 0xb}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x68, 0x0, 0x0, @fd=r2}, @generic="791f73102c691a1a19f194428bc65074f3cd32924701dbb73e704ef95667c705e3ee4409a971ac2c9cc0335edad769b6971f2f6bbfd80fccc56718f32207d04131edd714fa8dd14455743a16869a45f0546e0ae37693ac6f26cb3f2896319549d29afadb0c71abd48b7a9e4e6d12f4", @generic="6b166ed2e715d623204d57a4718f6e03d09f5362591e6dcb797f59f23fa221204e2fbd4558c2a814915c669bb2a06fe21ea3833301722bc5a9377ca655611f2575764d7f62f9949f9fe6cb47018df6e9c35be1627cfaa39a4547dfefc5107fcefaae98afcce33bc2a84d4930792eda4793ecb56226e509771d397255f28489843fb53670383098abc61165ce6d35ae8287a5941c9b04987272e51018855ced970e2b51baa38276b2ec84935d629df58e043876fb83d515b414f7ccb4be326d35502731ef7206f8f3147c6050b88a2bf829e2da9be7b0ca12813cdbb6a9e45b", @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@private0}, @generic="4d9bfafe4d02ac46b22cd7db34b28a53731cd667fb46ac3712823226dad48d5348c3e75a3c56ee4527d8ec617dd367626a986d690339f755faaffd", @generic="2a30dcea0378bbbe047ba971023f53676f3895cf76cdbeab14363856d88f06a104775cbc5eafcd5ce6032ec27a1e3992b935d5290460e5a338e7b4e630945c68423630e0092bb104750e1517896ce71a92ef06b6dfa949a2e979bf503ecec7ac8f51ce8d9aa5e8d86805e9917a74540af24cdf82c5ec6d8d8f91a4ecf1e2971104640ef19870d27004daf3e8d26da1e860f48a2623b73dc7f3e30a9cbe5566446d0b", @generic="1c0a10371bb29181aabb9c9517a96a713445945a252203cf755e4f6d5d1ec3b3f191ab9bce9c0619544dd27eaa7abde9f454b5c9b129a171e184a55eb6ef34503441d2af63ce32b19de5b3e35919b0dbdb7d4427307614b0005b0aa4abb8dfd383ef9e7ee8aa68b9e070b24e9a57a7292c0fec534e4e446cdd4c"]}]}, 0x360}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) 00:55:15 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008801}, 0x80) 00:55:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0xb, 0x1, 0x0, 0x0, 0x40000, 0x0}) [ 332.274603] FAULT_INJECTION: forcing a failure. [ 332.274603] name failslab, interval 1, probability 0, space 0, times 0 00:55:15 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r0, 0x1, 0x1, 0x90}}, 0x20) [ 332.328062] CPU: 0 PID: 23939 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 332.335984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.345345] Call Trace: [ 332.347934] dump_stack+0x1b2/0x283 [ 332.351565] should_fail.cold+0x10a/0x154 [ 332.355720] ? mempool_free+0x1d0/0x1d0 [ 332.359696] should_failslab+0xd6/0x130 [ 332.363674] kmem_cache_alloc+0x40/0x3c0 [ 332.366981] xt_hashlimit: overflow, try lower: 0/0 [ 332.367743] ? mempool_free+0x1d0/0x1d0 00:55:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], r1, 0x1, 0x1, 0x90}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x7, 0x3], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r4, r3}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r4, 0xb5}}, 0x18) [ 332.367751] mempool_alloc+0x10e/0x2d0 [ 332.367765] ? remove_element.isra.0+0x1b0/0x1b0 [ 332.385283] ? retint_kernel+0x2d/0x2d [ 332.389183] bio_alloc_bioset+0x41b/0x830 [ 332.393373] ? bvec_alloc+0x2d0/0x2d0 [ 332.397177] bio_clone_fast+0x20/0x130 [ 332.401068] bio_split+0x69/0x250 [ 332.404528] blk_queue_split+0x52d/0x19f0 [ 332.408681] ? __lock_acquire+0x5fc/0x3f20 [ 332.412931] ? blk_recount_segments+0x540/0x540 [ 332.417631] blk_mq_make_request+0x131/0x1ad0 [ 332.422134] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 332.427066] ? check_preemption_disabled+0x35/0x240 [ 332.432088] ? blk_exit_rl+0x70/0x70 [ 332.435841] ? generic_make_request+0x26e/0x850 [ 332.440514] generic_make_request+0x1f6/0x850 [ 332.445035] ? blk_queue_exit+0x1d0/0x1d0 [ 332.449189] ? retint_kernel+0x2d/0x2d [ 332.453092] submit_bio+0x234/0x390 [ 332.456725] ? generic_make_request+0x850/0x850 [ 332.461400] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 332.466306] ? iov_iter_npages+0x17b/0x7c0 [ 332.470559] ? bio_set_pages_dirty+0x8c/0x170 [ 332.475596] blkdev_direct_IO+0x567/0xdc0 [ 332.479955] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 332.485077] ? mapping_needs_writeback+0xd4/0x110 [ 332.489929] ? filemap_check_errors+0x75/0x90 [ 332.494438] generic_file_read_iter+0x234/0x21c0 [ 332.499213] ? retint_kernel+0x2d/0x2d [ 332.503242] blkdev_read_iter+0xfe/0x160 [ 332.507319] do_iter_readv_writev+0x41d/0x5f0 [ 332.512206] ? avc_policy_seqno+0x5/0x10 [ 332.516285] ? clone_verify_area+0x1e0/0x1e0 [ 332.520713] ? rw_verify_area+0xe1/0x2a0 [ 332.524824] do_iter_read+0x21d/0x5b0 [ 332.529004] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 332.533780] vfs_readv+0xc8/0x120 [ 332.537273] ? compat_rw_copy_check_uvector+0x320/0x320 [ 332.542819] ? SyS_write+0x1b7/0x210 [ 332.546557] ? __fget+0x1fe/0x360 [ 332.550017] ? lock_acquire+0x170/0x3f0 [ 332.554102] ? lock_downgrade+0x740/0x740 [ 332.558285] ? __fget+0x225/0x360 [ 332.561846] SyS_preadv+0x15a/0x200 [ 332.565478] ? SyS_writev+0x30/0x30 [ 332.569140] ? SyS_clock_settime+0x1a0/0x1a0 [ 332.573551] ? do_syscall_64+0x4c/0x640 [ 332.577527] ? SyS_writev+0x30/0x30 [ 332.581163] do_syscall_64+0x1d5/0x640 [ 332.585060] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 332.590254] RIP: 0033:0x45d5b9 [ 332.593484] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 332.601177] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 332.608447] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 332.615703] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 332.622956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 332.630229] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:16 executing program 4 (fault-call:7 fault-nth:8): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:16 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x8, 0x71e}, @timestamp, @sack_perm, @window={0x3, 0x8, 0x3ff}], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300), r1}}, 0x20) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x20040, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x8, &(0x7f00000000c0)) 00:55:16 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @broadcast}], 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000000)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$describe(0x6, r5, &(0x7f0000000400)=""/240, 0xf0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700)='/dev/bsg\x00', 0x0, 0x0) ioctl$FICLONE(r2, 0x40049409, r6) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @sdr}) 00:55:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000080)={{0x9, 0x6, 0xb88, 0xfffff001, '\x00', 0x9}, 0x1, [0x80000001, 0x4e9, 0x9, 0x9, 0x7, 0x703, 0x10001, 0x7, 0x62a4, 0x7, 0x74, 0x20, 0x6076, 0x9, 0x0, 0x80, 0x3, 0x2, 0x8, 0x2c8, 0x3, 0x7f, 0x8, 0x4, 0xfffffffffffffff7, 0x6, 0x1, 0x3, 0xfffffffffffff4df, 0x7ff, 0x9, 0xe60, 0x3443, 0x7, 0x7, 0x10001, 0x0, 0x0, 0x6, 0x7ff, 0x2, 0x40, 0xc, 0x4, 0x7, 0x5000000000000000, 0xffffffff80000001, 0x80, 0x7, 0x3, 0x91, 0x1, 0x8001, 0x3f, 0x100000001, 0xa77, 0xffffffff, 0x8, 0xc37c, 0x100, 0x1ff, 0x3, 0x9, 0x8, 0x8001, 0xf17, 0x1, 0x4, 0x1, 0x8, 0x5fc, 0x8, 0x8, 0x7ff, 0x1, 0xec6, 0xffff, 0xbe2, 0x1, 0x1, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x3, 0x401, 0x2, 0x3, 0xa84, 0xea8b, 0x5, 0x10001, 0x81, 0x8, 0x20, 0xfffffffffffffffc, 0x6, 0x6, 0x663, 0x3, 0x6, 0x0, 0x3, 0x2, 0x1, 0xffff, 0x9, 0x8f0, 0x8, 0x40, 0x5, 0x0, 0x3, 0x81, 0x1, 0x4, 0xc9, 0x5, 0x2, 0x1, 0x9, 0x8, 0x40, 0x9, 0x3ff, 0x80, 0xa9]}) 00:55:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x10001, 0x4, {0x0}, {0xee00}, 0xe7, 0xda}) tgkill(r1, 0x0, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x1f, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0}) 00:55:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3e38}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 332.834808] xt_hashlimit: overflow, try lower: 0/0 [ 332.849521] xt_hashlimit: overflow, try lower: 0/0 [ 332.857207] FAULT_INJECTION: forcing a failure. [ 332.857207] name failslab, interval 1, probability 0, space 0, times 0 [ 332.869816] xt_hashlimit: overflow, try lower: 0/0 [ 332.875180] CPU: 1 PID: 23998 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 332.883071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.891009] xt_hashlimit: overflow, try lower: 0/0 [ 332.892441] Call Trace: [ 332.892460] dump_stack+0x1b2/0x283 [ 332.892476] should_fail.cold+0x10a/0x154 [ 332.892494] ? mempool_free+0x1d0/0x1d0 [ 332.911756] should_failslab+0xd6/0x130 [ 332.915739] kmem_cache_alloc+0x40/0x3c0 [ 332.919807] ? mempool_free+0x1d0/0x1d0 [ 332.923779] mempool_alloc+0x10e/0x2d0 [ 332.927697] ? remove_element.isra.0+0x1b0/0x1b0 [ 332.932550] ? _find_next_bit+0xdb/0x100 [ 332.936987] ? __lock_acquire+0x5fc/0x3f20 [ 332.941249] bio_alloc_bioset+0x41b/0x830 [ 332.945425] ? __lock_acquire+0x5fc/0x3f20 [ 332.949673] ? bvec_alloc+0x2d0/0x2d0 [ 332.953480] ? trace_hardirqs_on+0x10/0x10 [ 332.957722] bio_clone_fast+0x20/0x130 [ 332.961612] bio_split+0x69/0x250 [ 332.966201] blk_queue_split+0x52d/0x19f0 [ 332.970391] ? __lock_acquire+0x5fc/0x3f20 [ 332.974653] ? blk_recount_segments+0x540/0x540 [ 332.979350] blk_mq_make_request+0x131/0x1ad0 [ 332.983872] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 332.988809] ? blk_queue_exit+0xb3/0x1d0 [ 332.992899] ? blk_exit_rl+0x70/0x70 [ 332.996620] ? lock_downgrade+0x740/0x740 [ 333.000785] generic_make_request+0x1f6/0x850 [ 333.005303] ? blk_queue_exit+0x1d0/0x1d0 [ 333.009468] submit_bio+0x234/0x390 [ 333.013106] ? generic_make_request+0x850/0x850 [ 333.017782] ? zero_fill_bio+0x390/0x390 [ 333.021849] ? iov_iter_npages+0x17b/0x7c0 [ 333.026092] ? bio_set_pages_dirty+0x8c/0x170 [ 333.030602] blkdev_direct_IO+0x567/0xdc0 00:55:16 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x800, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={&(0x7f00000000c0)="d9d2cedb3f2a332cd65f722093edd642c9196394703a5a419137c82fadabf486d715d6f69cfd223096795abfa132873c44549e854d42069fecfa512cf67efd096e8eba65e29e25e9c7ec78d5ff83334e363aacfa9d", &(0x7f0000000280)=""/106, &(0x7f00000003c0)="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", &(0x7f00000013c0)="330e246a56af53ce01445701b82b5da43c9d49b515dbbf099dad837f5058ae12ebb9b00deed0264dac2c44a40193cf687d3bbcf48fbae222e8ec0fe8a05fd7bb544780501d7f7c62167ea83c8a3100ceebc66210363bc68d58318caabc0e0da0f0c7142db7e9b9af34946f716892da156ccdb3", 0x9, r1, 0x4}, 0x38) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x40b7, 0x3ff}, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 00:55:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x0, 0xd, 0x4, 0x0, 0xffbb, 0x0, 0x0}) 00:55:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000180)={0x34}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil}) 00:55:16 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0x5, 0x7f}, 'port1\x00', 0x40, 0x161004, 0x2, 0x1000, 0x4, 0x10001, 0x1, 0x0, 0x6, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) sync() [ 333.034767] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 333.040834] ? unwind_next_frame+0xe54/0x17d0 [ 333.045372] ? trace_hardirqs_on+0x10/0x10 00:55:16 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:16 executing program 4 (fault-call:7 fault-nth:9): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000480)={0x3, 0x1, 0x20, 0x2, 0x48, &(0x7f0000000080)}) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='9p\x00', 0x2000080, &(0x7f0000000600)=ANY=[@ANYBLOB="3d00000000ccd30000000000000010", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX=r1, @ANYBLOB=',hash,euid=', @ANYRESDEC=r3, @ANYBLOB=',dont_appraise,fsuuid=d328ddc1-6074-fae2-(d7d-7a809280,obj_user=/dev/bus/usb/00#/00#\x00,permit_directio,appraise_type=imasig,obj_user=,hash,\x00']) 00:55:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x39, 0x0, [0x5, 0xfffffbe1, 0x101, 0x6, 0x6, 0x2, 0x3, 0x0, 0x3, 0x8, 0x0, 0x0, 0x400, 0x8, 0x2, 0x1]}, {0xb, 0x0, [0x2, 0x7fffffff, 0x34, 0x40, 0x401, 0xfffffffa, 0x6, 0xcb5f, 0x9, 0x0, 0x3, 0x4, 0x2, 0x100, 0x1000]}, {0x6, 0x0, [0x2, 0x7fffffff, 0x2, 0x7fffffff, 0x7fffffff, 0xff, 0x8, 0x1, 0x86, 0x4, 0x3, 0x7, 0x3, 0x2, 0x9, 0x6]}, {0x2, 0x0, [0x8, 0x7ff, 0x3, 0xd0, 0x10001, 0x2000, 0x3, 0x1f, 0x84f, 0x40, 0x5, 0x9, 0x401, 0x568a26a2, 0x80000000, 0x2]}, {0x0, 0x0, [0x0, 0x10000, 0x4000, 0xe7c9, 0x1f, 0x79de24ac, 0xb451, 0x20, 0x9d8, 0x2, 0x607, 0x426, 0x8, 0x7f, 0x9, 0x342712f2]}, {0x1, 0x0, [0x1a8, 0x80000001, 0x8000, 0x1ff, 0xffff, 0x8, 0x11dc, 0xabad, 0x401, 0x1, 0x1, 0x9710, 0x80, 0x6, 0x3, 0x6]}, {0x10, 0x0, [0x7, 0x2, 0x19, 0x8, 0xfffffffc, 0x0, 0x3f, 0x100, 0xffffffff, 0x80000000, 0x5, 0x0, 0x5, 0x7f, 0x5d, 0xc79]}, {0x12, 0x0, [0x1, 0x2, 0x8, 0x1, 0xff0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x9, 0xfffffff9, 0x1, 0xbf, 0x3, 0x8c84]}], r1}}, 0x20) 00:55:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x800) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000000)=0x6) [ 333.049624] ? mapping_needs_writeback+0xd4/0x110 00:55:16 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 333.049634] ? filemap_check_errors+0x75/0x90 00:55:16 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60) fsync(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) getsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x3, 0x4) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect={0x2}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:16 executing program 4 (fault-call:7 fault-nth:10): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) [ 333.049648] generic_file_read_iter+0x234/0x21c0 00:55:16 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 333.049661] ? __might_fault+0x104/0x1b0 [ 333.049683] blkdev_read_iter+0xfe/0x160 [ 333.049695] do_iter_readv_writev+0x41d/0x5f0 [ 333.049708] ? avc_policy_seqno+0x5/0x10 [ 333.049717] ? clone_verify_area+0x1e0/0x1e0 [ 333.049731] ? rw_verify_area+0xe1/0x2a0 [ 333.049742] do_iter_read+0x21d/0x5b0 [ 333.049761] vfs_readv+0xc8/0x120 [ 333.049771] ? compat_rw_copy_check_uvector+0x320/0x320 [ 333.049780] ? SyS_write+0x1b7/0x210 [ 333.049791] ? __fget+0x1fe/0x360 [ 333.049804] ? lock_acquire+0x170/0x3f0 [ 333.049814] ? lock_downgrade+0x740/0x740 [ 333.049828] ? __fget+0x225/0x360 [ 333.049843] SyS_preadv+0x15a/0x200 [ 333.049853] ? SyS_writev+0x30/0x30 [ 333.049864] ? SyS_clock_settime+0x1a0/0x1a0 [ 333.049875] ? do_syscall_64+0x4c/0x640 [ 333.049883] ? SyS_writev+0x30/0x30 [ 333.049894] do_syscall_64+0x1d5/0x640 [ 333.049910] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 333.049917] RIP: 0033:0x45d5b9 [ 333.049922] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 333.049933] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 333.049939] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 333.049944] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 333.049950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 333.049956] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c [ 333.199419] FAULT_INJECTION: forcing a failure. [ 333.199419] name failslab, interval 1, probability 0, space 0, times 0 [ 333.199434] CPU: 1 PID: 24040 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 333.199441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.199446] Call Trace: [ 333.199465] dump_stack+0x1b2/0x283 [ 333.199483] should_fail.cold+0x10a/0x154 [ 333.199505] ? mempool_free+0x1d0/0x1d0 [ 333.199521] should_failslab+0xd6/0x130 [ 333.199535] kmem_cache_alloc+0x40/0x3c0 [ 333.199547] ? mempool_free+0x1d0/0x1d0 [ 333.199556] mempool_alloc+0x10e/0x2d0 [ 333.199571] ? remove_element.isra.0+0x1b0/0x1b0 [ 333.199583] ? finish_task_switch+0x178/0x610 [ 333.199600] ? trace_hardirqs_on+0x10/0x10 [ 333.199613] bio_alloc_bioset+0x41b/0x830 [ 333.199623] ? __lock_acquire+0x5fc/0x3f20 [ 333.199635] ? bvec_alloc+0x2d0/0x2d0 [ 333.199644] ? switch_mm_irqs_off+0x601/0xeb0 [ 333.199657] bio_clone_fast+0x20/0x130 [ 333.199666] bio_split+0x69/0x250 [ 333.199677] blk_queue_split+0x52d/0x19f0 [ 333.199686] ? __lock_acquire+0x5fc/0x3f20 [ 333.199705] ? blk_recount_segments+0x540/0x540 [ 333.199729] blk_mq_make_request+0x131/0x1ad0 [ 333.199746] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 333.199756] ? blk_queue_exit+0xb3/0x1d0 [ 333.199769] ? blk_exit_rl+0x70/0x70 [ 333.199781] ? lock_downgrade+0x740/0x740 [ 333.199798] generic_make_request+0x1f6/0x850 [ 333.199810] ? blk_queue_exit+0x1d0/0x1d0 [ 333.199832] submit_bio+0x234/0x390 [ 333.199847] ? generic_make_request+0x850/0x850 [ 333.199860] ? zero_fill_bio+0x390/0x390 [ 333.199872] ? iov_iter_npages+0x17b/0x7c0 [ 333.199884] ? bio_set_pages_dirty+0x8c/0x170 [ 333.199898] blkdev_direct_IO+0x567/0xdc0 [ 333.199918] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 333.199929] ? unwind_next_frame+0xe54/0x17d0 [ 333.199948] ? trace_hardirqs_on+0x10/0x10 [ 333.199962] ? mapping_needs_writeback+0xd4/0x110 [ 333.199971] ? filemap_check_errors+0x75/0x90 [ 333.199985] generic_file_read_iter+0x234/0x21c0 [ 333.199999] ? __might_fault+0x104/0x1b0 [ 333.200027] blkdev_read_iter+0xfe/0x160 [ 333.200038] do_iter_readv_writev+0x41d/0x5f0 [ 333.200051] ? avc_policy_seqno+0x5/0x10 [ 333.200062] ? clone_verify_area+0x1e0/0x1e0 [ 333.200077] ? rw_verify_area+0xe1/0x2a0 [ 333.200090] do_iter_read+0x21d/0x5b0 [ 333.200109] vfs_readv+0xc8/0x120 [ 333.200119] ? compat_rw_copy_check_uvector+0x320/0x320 [ 333.200134] ? SyS_write+0x1b7/0x210 [ 333.200146] ? __fget+0x1fe/0x360 [ 333.200161] ? lock_acquire+0x170/0x3f0 [ 333.200172] ? lock_downgrade+0x740/0x740 [ 333.200188] ? __fget+0x225/0x360 [ 333.200204] SyS_preadv+0x15a/0x200 [ 333.200213] ? SyS_writev+0x30/0x30 [ 333.200223] ? SyS_clock_settime+0x1a0/0x1a0 [ 333.200233] ? do_syscall_64+0x4c/0x640 [ 333.200241] ? SyS_writev+0x30/0x30 [ 333.200252] do_syscall_64+0x1d5/0x640 [ 333.200267] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 333.200275] RIP: 0033:0x45d5b9 [ 333.200281] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 333.200293] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 333.200300] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 333.200312] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 333.200318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 333.200333] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c [ 333.325029] FAULT_INJECTION: forcing a failure. [ 333.325029] name failslab, interval 1, probability 0, space 0, times 0 [ 333.325043] CPU: 1 PID: 24060 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 333.325050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.325054] Call Trace: [ 333.325074] dump_stack+0x1b2/0x283 [ 333.325092] should_fail.cold+0x10a/0x154 [ 333.325105] ? mempool_free+0x1d0/0x1d0 [ 333.325123] should_failslab+0xd6/0x130 [ 333.325135] kmem_cache_alloc+0x40/0x3c0 [ 333.325147] ? mempool_free+0x1d0/0x1d0 [ 333.325154] mempool_alloc+0x10e/0x2d0 [ 333.325169] ? remove_element.isra.0+0x1b0/0x1b0 [ 333.325181] ? _find_next_bit+0xdb/0x100 [ 333.325198] ? __lock_acquire+0x5fc/0x3f20 [ 333.325218] bio_alloc_bioset+0x41b/0x830 [ 333.325229] ? __lock_acquire+0x5fc/0x3f20 [ 333.325244] ? bvec_alloc+0x2d0/0x2d0 [ 333.325257] ? trace_hardirqs_on+0x10/0x10 [ 333.325271] bio_clone_fast+0x20/0x130 [ 333.325283] bio_split+0x69/0x250 [ 333.325306] blk_queue_split+0x52d/0x19f0 [ 333.325318] ? __lock_acquire+0x5fc/0x3f20 [ 333.325349] ? blk_recount_segments+0x540/0x540 [ 333.325373] blk_mq_make_request+0x131/0x1ad0 [ 333.325389] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 333.325401] ? blk_queue_exit+0xb3/0x1d0 [ 333.325412] ? blk_exit_rl+0x70/0x70 [ 333.325423] ? lock_downgrade+0x740/0x740 [ 333.325440] generic_make_request+0x1f6/0x850 [ 333.325456] ? blk_queue_exit+0x1d0/0x1d0 [ 333.325477] submit_bio+0x234/0x390 [ 333.325490] ? generic_make_request+0x850/0x850 [ 333.325503] ? zero_fill_bio+0x390/0x390 [ 333.325514] ? iov_iter_npages+0x17b/0x7c0 [ 333.325524] ? bio_set_pages_dirty+0x8c/0x170 [ 333.325539] blkdev_direct_IO+0x567/0xdc0 [ 333.325562] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 333.325571] ? unwind_next_frame+0xe54/0x17d0 [ 333.325587] ? trace_hardirqs_on+0x10/0x10 [ 333.325604] ? mapping_needs_writeback+0xd4/0x110 [ 333.325617] ? filemap_check_errors+0x75/0x90 [ 333.325633] generic_file_read_iter+0x234/0x21c0 [ 333.325649] ? __might_fault+0x104/0x1b0 [ 333.325672] blkdev_read_iter+0xfe/0x160 [ 333.325687] do_iter_readv_writev+0x41d/0x5f0 [ 333.325702] ? avc_policy_seqno+0x5/0x10 [ 333.325713] ? clone_verify_area+0x1e0/0x1e0 [ 333.325730] ? rw_verify_area+0xe1/0x2a0 [ 333.325743] do_iter_read+0x21d/0x5b0 [ 333.325767] vfs_readv+0xc8/0x120 [ 333.325781] ? compat_rw_copy_check_uvector+0x320/0x320 [ 333.325792] ? SyS_write+0x1b7/0x210 [ 333.325806] ? __fget+0x1fe/0x360 [ 333.325820] ? lock_acquire+0x170/0x3f0 [ 333.325830] ? lock_downgrade+0x740/0x740 [ 333.325847] ? __fget+0x225/0x360 [ 333.325865] SyS_preadv+0x15a/0x200 [ 333.325875] ? SyS_writev+0x30/0x30 [ 333.325885] ? SyS_clock_settime+0x1a0/0x1a0 [ 333.325895] ? do_syscall_64+0x4c/0x640 [ 333.325903] ? SyS_writev+0x30/0x30 [ 333.325915] do_syscall_64+0x1d5/0x640 [ 333.325931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 333.325946] RIP: 0033:0x45d5b9 [ 333.325952] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 333.325964] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 333.325970] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 00:55:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0xf, 0x0, 0x0, 0x0, 0x9, 0x0}) 00:55:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={[], 0x100, 0x1, 0x3, 0x4, 0x3ff}) 00:55:17 executing program 4 (fault-call:7 fault-nth:11): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000040)=""/93) 00:55:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1db201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x16, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:17 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7fff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 333.325977] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 333.325983] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 333.325990] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:17 executing program 0: ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x7) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x2710, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:17 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$CHAR_RAW_DISCARD(r4, 0x1277, &(0x7f0000000200)=0x40) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000001c0)={0xc, 0x1}) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x2) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000080)={0x3, "0d9bf961cad5ed7c481b0a4f2a9f661526eca90381e919d1e412a10908ac94dc"}) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f0000000180)={&(0x7f00000000c0)="0ec44a4105109e4899f45c11be3e4b90eb5b5a5a6d0013343478a07e9b752acdb2ec999f2473ff086a699b095b2eb85bd9ce55753d5d3cbeb091aefebbad9a3443d427c681d7cf1f97914ef5e7ccdfca47ca573ef2a8f811ed3d5509dc8e0aba85aeeb7cbdf5366bf407bad6b38170f8bdbe09da82410849bb18f1e78934393324de254eeaef62bbaa91f5c698add1f484c5669e790e498c8e99f5c58bd712958036fd27e32fe338d4f6e40c94", 0xad}) 00:55:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) [ 334.378697] FAULT_INJECTION: forcing a failure. [ 334.378697] name failslab, interval 1, probability 0, space 0, times 0 [ 334.410513] CPU: 0 PID: 24088 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 334.418564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.427964] Call Trace: [ 334.430563] dump_stack+0x1b2/0x283 [ 334.434208] should_fail.cold+0x10a/0x154 [ 334.441627] ? mempool_free+0x1d0/0x1d0 [ 334.447732] should_failslab+0xd6/0x130 [ 334.452007] kmem_cache_alloc+0x40/0x3c0 [ 334.456082] ? mempool_free+0x1d0/0x1d0 [ 334.460784] mempool_alloc+0x10e/0x2d0 [ 334.464697] ? remove_element.isra.0+0x1b0/0x1b0 [ 334.469470] ? retint_kernel+0x2d/0x2d [ 334.473439] bio_alloc_bioset+0x41b/0x830 [ 334.479148] ? bvec_alloc+0x2d0/0x2d0 [ 334.483656] bio_clone_fast+0x20/0x130 [ 334.487536] bio_split+0x69/0x250 [ 334.491252] blk_queue_split+0x52d/0x19f0 [ 334.495492] ? __lock_acquire+0x5fc/0x3f20 [ 334.499872] ? blk_recount_segments+0x540/0x540 [ 334.504558] blk_mq_make_request+0x131/0x1ad0 [ 334.509769] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 334.515184] ? blk_queue_exit+0xb3/0x1d0 [ 334.520113] ? blk_exit_rl+0x70/0x70 [ 334.524372] ? lock_downgrade+0x740/0x740 [ 334.528724] generic_make_request+0x1f6/0x850 [ 334.533213] ? blk_queue_exit+0x1d0/0x1d0 [ 334.538394] submit_bio+0x234/0x390 [ 334.543163] ? generic_make_request+0x850/0x850 [ 334.548214] ? iov_iter_npages+0x17b/0x7c0 [ 334.552552] blkdev_direct_IO+0x567/0xdc0 [ 334.556719] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 334.561837] ? retint_kernel+0x2d/0x2d [ 334.565731] ? generic_file_read_iter+0x1a3/0x21c0 [ 334.570858] generic_file_read_iter+0x234/0x21c0 [ 334.575607] ? retint_kernel+0x2d/0x2d [ 334.579666] blkdev_read_iter+0xfe/0x160 [ 334.583778] do_iter_readv_writev+0x41d/0x5f0 [ 334.588287] ? avc_policy_seqno+0x5/0x10 [ 334.592341] ? clone_verify_area+0x1e0/0x1e0 [ 334.596758] ? rw_verify_area+0xe1/0x2a0 [ 334.600806] do_iter_read+0x21d/0x5b0 [ 334.605474] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 334.610494] vfs_readv+0xc8/0x120 [ 334.614068] ? compat_rw_copy_check_uvector+0x320/0x320 [ 334.619426] ? retint_kernel+0x2d/0x2d [ 334.623352] ? __fget+0x1fe/0x360 [ 334.626804] ? lock_acquire+0x170/0x3f0 [ 334.630781] ? lock_downgrade+0x740/0x740 [ 334.634955] ? __fget+0x225/0x360 [ 334.638438] SyS_preadv+0x15a/0x200 [ 334.642078] ? SyS_writev+0x30/0x30 [ 334.645723] ? do_syscall_64+0x7a/0x640 [ 334.649783] ? SyS_writev+0x30/0x30 [ 334.653556] do_syscall_64+0x1d5/0x640 [ 334.657561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 334.662759] RIP: 0033:0x45d5b9 [ 334.665961] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 00:55:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x7, 0x10000, 0x80000, 0x800, 0xffffffffffffffff}) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) inotify_init() socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)=0x6, 0x4) 00:55:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendto$inet6(r0, &(0x7f0000000040)="d92dcb94936eea1c68cc2be59b1355ce4accab932d1d07b22156fcd47619db2459dfc2258daca2fabeabfd9965170c39c852deebe0db81e53dcac030d688ac60507a3bc4ad067074002799ac6b71ad058df3b67ccf4ba0b240b9f4c63769acddea55ded9d0ad5d5ee9f81a6472d8f1f85bda87ee3f58fd1a8df1ee835c7c70d42aefb4b7f0c7fcc6690f3ebb81ab58bf494d5005d73632b810bbe3e1acaa0d0df1aef62794820bb7174cc63665e783c4229c0e875cf7c6c33f4612e08e22ca16c0ad18c94bbbc71e19d9c1150d16c78ccdc9b43535833c978dd0", 0xda, 0x4040400, &(0x7f0000000140)={0xa, 0x4e23, 0x8, @ipv4={[], [], @empty}, 0xb9}, 0x1c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) [ 334.673686] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 334.680947] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 334.688228] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 334.695589] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 334.702909] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xa8802, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x31, 0x3, 0x1, 0x2, 0x0, 0x7, 0x9, 0x4, 0x9, 0x1, 0x7, 0x8, 0xbc2, 0x800, 0x12, 0x0, {0xffffff00}, 0x1, 0x81}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000180)={0x6cc, 0x13, [[], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], []]}) 00:55:18 executing program 4 (fault-call:7 fault-nth:12): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @win={{0x2, 0x38c, 0x800, 0x7fffffff}, 0x4, 0x5, &(0x7f0000000000)={{0xffff, 0x6, 0x9e20, 0x5af}}, 0x6, &(0x7f0000000180)="b279598237170b2fe962ef91739d4bd8f123adac62ed124a97eba311aaf9752cf3ebe2c57af9403d4de7ce7017b125e2148afe2a6b228850f592dd76c26e8ad6c4c4b56c69b480b0baaa816c44aa1601f813dbac0545ec8561f37d79c0617ce3fc1bcdafcdc040638b3b2282a9467fa937d4b4954bdc585ccbc78a75299662652b", 0x1}}) [ 334.793989] xt_hashlimit: overflow, try lower: 0/0 00:55:18 executing program 3: lsetxattr$security_selinux(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)='security.selinux\x00', &(0x7f0000002180)='system_u:object_r:devicekit_disk_exec_t:s0\x00', 0x2b, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000020c0)={0x10, 0x0, r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 334.882463] FAULT_INJECTION: forcing a failure. [ 334.882463] name failslab, interval 1, probability 0, space 0, times 0 00:55:18 executing program 1: r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'wg0\x00', {0x2, 0x4e20, @multicast2}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r2, 0xb03, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xe4, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff8001}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff90}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x780a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x74d1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x528}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x49}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x200040c4}, 0x20004000) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 334.924239] CPU: 1 PID: 24134 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 334.932348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.942084] Call Trace: [ 334.945699] dump_stack+0x1b2/0x283 [ 334.949776] should_fail.cold+0x10a/0x154 [ 334.953935] ? mempool_free+0x1d0/0x1d0 [ 334.957928] should_failslab+0xd6/0x130 [ 334.961906] kmem_cache_alloc+0x40/0x3c0 [ 334.966943] ? mempool_free+0x1d0/0x1d0 00:55:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x8001, 0x1000, 0x4, 0x4, 0x770c, 0x4, 0x100, 0x5}, 0x20) [ 334.970927] mempool_alloc+0x10e/0x2d0 [ 334.974838] ? remove_element.isra.0+0x1b0/0x1b0 [ 334.979601] ? _find_next_bit+0xdb/0x100 [ 334.983669] ? __lock_acquire+0x5fc/0x3f20 [ 334.987913] bio_alloc_bioset+0x41b/0x830 [ 334.992068] ? __lock_acquire+0x5fc/0x3f20 [ 334.996321] ? bvec_alloc+0x2d0/0x2d0 [ 335.000231] ? trace_hardirqs_on+0x10/0x10 [ 335.004475] bio_clone_fast+0x20/0x130 [ 335.008507] bio_split+0x69/0x250 [ 335.011980] blk_queue_split+0x52d/0x19f0 [ 335.016587] ? __lock_acquire+0x5fc/0x3f20 00:55:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x5, 0xe6cb, 0x800, 0x9d, 0x1f, 0x1, 0x93, 0xfff, 0x2, 0x4, 0x7, 0xfffffffffffff801, 0x3, 0x0, 0x2d, 0x10001], 0x2000, 0x40}) [ 335.020851] ? blk_recount_segments+0x540/0x540 [ 335.025543] blk_mq_make_request+0x131/0x1ad0 [ 335.030141] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 335.035117] ? blk_queue_exit+0xb3/0x1d0 [ 335.039198] ? blk_exit_rl+0x70/0x70 [ 335.043266] ? lock_downgrade+0x740/0x740 [ 335.047425] generic_make_request+0x1f6/0x850 [ 335.053164] ? blk_queue_exit+0x1d0/0x1d0 [ 335.057412] submit_bio+0x234/0x390 [ 335.061053] ? generic_make_request+0x850/0x850 [ 335.066009] ? zero_fill_bio+0x390/0x390 [ 335.070094] ? iov_iter_npages+0x17b/0x7c0 00:55:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x8cfa, 0x1, 0x4, 0x20, 0xff, {r1, r2/1000+10000}, {0x4, 0x8, 0x81, 0x80, 0x1f, 0x1, "0d3b1aa3"}, 0x4, 0x1, @fd, 0x80000000}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) [ 335.074334] ? bio_set_pages_dirty+0x8c/0x170 [ 335.078885] blkdev_direct_IO+0x567/0xdc0 [ 335.083073] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 335.088195] ? unwind_next_frame+0xe54/0x17d0 [ 335.092700] ? trace_hardirqs_on+0x10/0x10 [ 335.096941] ? mapping_needs_writeback+0xd4/0x110 [ 335.101802] ? filemap_check_errors+0x75/0x90 [ 335.106869] generic_file_read_iter+0x234/0x21c0 [ 335.112268] ? __might_fault+0x104/0x1b0 [ 335.116519] blkdev_read_iter+0xfe/0x160 00:55:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sliced={0x6, [0x7, 0x6, 0x8, 0x80, 0x3f, 0x200, 0x0, 0x9, 0xd8, 0x1000, 0x4, 0xfff9, 0x1, 0x3, 0x100, 0x0, 0x1, 0x1, 0x4, 0x0, 0x8, 0xf07, 0xc000, 0x1, 0xfff9, 0x2, 0x4, 0x7, 0x1, 0x3, 0x1, 0xffff, 0xf2d3, 0x100, 0x2, 0x52d, 0x1, 0xf98, 0x6, 0x1, 0x7, 0x2, 0x9d56, 0x0, 0x81, 0xe5, 0x7fff, 0x4], 0x4}}) [ 335.120764] do_iter_readv_writev+0x41d/0x5f0 [ 335.126091] ? avc_policy_seqno+0x5/0x10 [ 335.130277] ? clone_verify_area+0x1e0/0x1e0 [ 335.135274] ? rw_verify_area+0xe1/0x2a0 [ 335.139531] do_iter_read+0x21d/0x5b0 [ 335.145215] vfs_readv+0xc8/0x120 [ 335.148676] ? compat_rw_copy_check_uvector+0x320/0x320 [ 335.154044] ? SyS_write+0x1b7/0x210 [ 335.157760] ? __fget+0x1fe/0x360 [ 335.161216] ? lock_acquire+0x170/0x3f0 [ 335.165722] ? lock_downgrade+0x740/0x740 [ 335.169885] ? __fget+0x225/0x360 [ 335.173593] SyS_preadv+0x15a/0x200 [ 335.177230] ? SyS_writev+0x30/0x30 [ 335.180863] ? SyS_clock_settime+0x1a0/0x1a0 [ 335.185280] ? do_syscall_64+0x4c/0x640 [ 335.189271] ? SyS_writev+0x30/0x30 [ 335.192912] do_syscall_64+0x1d5/0x640 [ 335.196838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 335.202035] RIP: 0033:0x45d5b9 [ 335.205225] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 335.213663] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 00:55:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setregid(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2]}, {0x0, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800004]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:18 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) 00:55:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 00:55:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x32315559}}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fchmodat(r3, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x0, 0x8, 0x7, @mcast1, @private1={0xfc, 0x1, [], 0x1}, 0x8000, 0x1, 0x4, 0x101}}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000340)={@broadcast, @local, r6}, 0xc) [ 335.221040] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 335.228684] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 335.236143] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 335.244097] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:18 executing program 4 (fault-call:7 fault-nth:13): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:18 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x31, 0x8, 0x8001, 0x0, 0x2, 0x0}) 00:55:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) 00:55:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000000001, 0x5af01) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @raw_data="40f5d7a1d2582cf71d1aa07e38f8ca081955d422bacd404bb8207477b886a89f1a8ea62b9c682ad0d50b5a39bf8430951cb1912afd15a878f7fecca04f3486cff1f549e2fe3a46b04baf3b2a224c1d27c17bb1c79b3f51db39a1d8f92889d7da8287175fbe5e72b9c6b9aeeea4c14eb4ab162986c3432afed5540cae1f7402b0f1f54f5167ec55b827dda610dc4a7a6f20f5db0c3cbc25f49adbaa9e0acb6cae519d253052f7783915aeafeb5d75889715f4b8fd980b0f1c23c1c2875c742e265a092d44b114fd9e"}) 00:55:18 executing program 3: r0 = mq_open(&(0x7f0000000080)='\x00', 0x80, 0x91, &(0x7f00000000c0)={0x25c, 0x1f, 0x1, 0x9}) ioctl(r0, 0x5, &(0x7f0000000100)="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") r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x24800, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="e5fe000000000000000002000000"], 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fcdbdf2502000000050003003200000006000a004e23000014000900fe800000000001000000000000000018224406000a004e22000006000a004e220000"], 0x48}}, 0x40) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x3) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1c, r7, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00002a60b0ba8edbdf25060000000a000900ffffffffffff0000060028000100000005002900000000000800390021e400000800310001000000050021000000000005002a0000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x341200, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz1\x00', {0xffff, 0x221, 0x8, 0x3}, 0x50, [0x9, 0x2, 0x0, 0x20, 0x0, 0x4, 0xd2, 0x3, 0xfffff84a, 0xe9fd, 0x26f, 0x0, 0x20, 0x1000, 0xfffffffe, 0x869, 0x3, 0x101, 0x7fffffff, 0xbe7c, 0x0, 0x200, 0x355, 0x0, 0xffffffff, 0x1000, 0xfad6, 0x6, 0x7fffffff, 0xffff, 0xfff, 0x1, 0x4000000, 0x6, 0x401, 0x8, 0x12, 0x1c, 0xffffffff, 0xbcb, 0x9, 0xfa1, 0x80, 0x0, 0x8, 0x61fa, 0x4, 0x4, 0x6, 0x298, 0x6, 0x3, 0x401, 0xffffff7f, 0x2, 0x8, 0x41f, 0x80000001, 0xfffffffc, 0xa, 0x3, 0x7, 0x1, 0x9], [0x80000000, 0x80, 0x9, 0x3, 0x401, 0xdd, 0x9, 0x0, 0x100, 0x101, 0x3, 0x7, 0x1, 0x9, 0x6, 0x3, 0x7fffffff, 0x5a6, 0x625, 0x1, 0x80000000, 0x440, 0x8, 0xffbe, 0x8, 0x200, 0x6, 0x4e1b3945, 0x8001, 0x2, 0x5, 0x7fffffff, 0x9, 0x2, 0x896b, 0x8, 0xffff, 0x5, 0x1, 0xc, 0x1, 0x9, 0x40, 0xa424, 0x8, 0x3, 0x3, 0x4, 0x5, 0x7f, 0x40, 0x6, 0x40000, 0x1, 0x0, 0x3, 0x7f, 0x15cb8c0b, 0x4, 0x100, 0xf9ac, 0x6deb, 0x2c, 0x7ff], [0x3ff, 0x0, 0xa5fd, 0x7, 0x54a1, 0x6, 0x100, 0x1, 0x5, 0x1, 0x3, 0x5, 0x8, 0x101, 0x5, 0xb9f, 0x401, 0x3949, 0x5c, 0x2, 0xff, 0x80, 0xfffffff7, 0x1, 0x7, 0x8000, 0x389f, 0x9, 0x8, 0x0, 0x4, 0x9, 0x8, 0xfffeffff, 0x20000000, 0x8, 0x9, 0x0, 0x1, 0x5, 0x5, 0x6, 0x9, 0xd, 0x8, 0x2, 0xffffffff, 0x40000, 0x7, 0x960, 0x4632, 0x2, 0x9267, 0x25, 0x1, 0x9, 0xffffffff, 0x10000, 0x400, 0x9, 0x65cb, 0x10000, 0x7ff, 0xfffffff9], [0x9, 0x9, 0x8, 0x3ff, 0x3, 0x1, 0x49, 0x794, 0x65e35888, 0xc60, 0x400, 0x3, 0x5, 0xde, 0x1, 0x43d, 0xffffffff, 0x80, 0x101, 0x0, 0xadf, 0x7, 0x1, 0x3, 0x1412, 0xd, 0xa223, 0xa6, 0x1, 0x800, 0x4b, 0xffff, 0x200, 0x100, 0x889, 0xffff, 0x7fff, 0x9, 0x3, 0x7cf5, 0x80000000, 0x4, 0x1, 0x20, 0x6, 0x3, 0x401, 0x6, 0xfffffffb, 0x6, 0xf3, 0x20, 0xffff, 0x3, 0x6c30, 0x9d, 0x9, 0x5, 0x5, 0x8001, 0x6, 0x9, 0xfff, 0x1]}, 0x45c) 00:55:19 executing program 0: socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x7ff, 0x9}, &(0x7f0000000000)=0x90) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @pix={0x6, 0x9, 0x34343459, 0x7, 0xfff, 0x10001, 0xa, 0x3, 0x1, 0x4, 0x1, 0x1}}) [ 335.434878] FAULT_INJECTION: forcing a failure. [ 335.434878] name failslab, interval 1, probability 0, space 0, times 0 [ 335.497424] CPU: 1 PID: 24182 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 335.505379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.515451] Call Trace: [ 335.518054] dump_stack+0x1b2/0x283 [ 335.521700] should_fail.cold+0x10a/0x154 [ 335.525882] ? mempool_free+0x1d0/0x1d0 [ 335.530597] should_failslab+0xd6/0x130 [ 335.534593] kmem_cache_alloc+0x40/0x3c0 [ 335.538700] ? mempool_free+0x1d0/0x1d0 [ 335.542677] mempool_alloc+0x10e/0x2d0 00:55:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x1, 0x4}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x9c}, 0x8) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 335.546854] ? remove_element.isra.0+0x1b0/0x1b0 [ 335.553639] ? _find_next_bit+0xdb/0x100 [ 335.557743] ? __lock_acquire+0x5fc/0x3f20 [ 335.561994] bio_alloc_bioset+0x41b/0x830 [ 335.566202] ? __lock_acquire+0x5fc/0x3f20 [ 335.570448] ? bvec_alloc+0x2d0/0x2d0 [ 335.574370] ? trace_hardirqs_on+0x10/0x10 [ 335.578615] bio_clone_fast+0x20/0x130 [ 335.583576] bio_split+0x69/0x250 [ 335.588091] blk_queue_split+0x52d/0x19f0 [ 335.592262] ? __lock_acquire+0x5fc/0x3f20 [ 335.596523] ? blk_recount_segments+0x540/0x540 [ 335.601218] blk_mq_make_request+0x131/0x1ad0 [ 335.605729] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 335.611450] ? blk_queue_exit+0xb3/0x1d0 [ 335.615805] ? blk_exit_rl+0x70/0x70 [ 335.619704] ? lock_downgrade+0x740/0x740 [ 335.620631] xt_hashlimit: overflow, try lower: 0/0 [ 335.624844] generic_make_request+0x1f6/0x850 [ 335.624858] ? blk_queue_exit+0x1d0/0x1d0 [ 335.624872] submit_bio+0x234/0x390 [ 335.624882] ? generic_make_request+0x850/0x850 [ 335.624893] ? zero_fill_bio+0x390/0x390 [ 335.624909] ? iov_iter_npages+0x17b/0x7c0 [ 335.624918] ? bio_set_pages_dirty+0x8c/0x170 [ 335.624931] blkdev_direct_IO+0x567/0xdc0 [ 335.624948] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 335.673484] ? unwind_next_frame+0xe54/0x17d0 [ 335.673612] xt_hashlimit: overflow, try lower: 0/0 [ 335.677989] ? trace_hardirqs_on+0x10/0x10 [ 335.678001] ? mapping_needs_writeback+0xd4/0x110 [ 335.678010] ? filemap_check_errors+0x75/0x90 00:55:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 335.678021] generic_file_read_iter+0x234/0x21c0 [ 335.701360] ? __might_fault+0x104/0x1b0 [ 335.705440] blkdev_read_iter+0xfe/0x160 [ 335.709515] do_iter_readv_writev+0x41d/0x5f0 [ 335.714045] ? avc_policy_seqno+0x5/0x10 [ 335.718114] ? clone_verify_area+0x1e0/0x1e0 [ 335.722621] ? rw_verify_area+0xe1/0x2a0 [ 335.726779] do_iter_read+0x21d/0x5b0 [ 335.730595] vfs_readv+0xc8/0x120 [ 335.734167] ? compat_rw_copy_check_uvector+0x320/0x320 [ 335.739538] ? SyS_write+0x1b7/0x210 [ 335.744224] ? __fget+0x1fe/0x360 00:55:19 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xf0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x34, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r8 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) getpeername$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x40, 0x80000000}) ioctl$USBDEVFS_DISCARDURB(r8, 0x550b, &(0x7f0000000080)=0xcf) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, 0x6, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) [ 335.747685] ? lock_acquire+0x170/0x3f0 [ 335.751716] ? lock_downgrade+0x740/0x740 [ 335.755877] ? __fget+0x225/0x360 [ 335.759367] SyS_preadv+0x15a/0x200 [ 335.763716] ? SyS_writev+0x30/0x30 [ 335.767357] ? SyS_clock_settime+0x1a0/0x1a0 [ 335.772055] ? do_syscall_64+0x4c/0x640 [ 335.776133] ? SyS_writev+0x30/0x30 [ 335.779878] do_syscall_64+0x1d5/0x640 [ 335.783781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 335.788992] RIP: 0033:0x45d5b9 00:55:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 335.792178] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 335.799892] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 335.807256] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 335.814532] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 335.821811] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 335.829089] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:19 executing program 4 (fault-call:7 fault-nth:14): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:19 executing program 0: add_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) sendto$rose(0xffffffffffffffff, &(0x7f0000000180)="f795a1daad0621a90e3046c787dba8481d8418d0b0feafb21eff2aaf0d830c38b7d2b8ac39385bf08d2e08855bae2c0253ce7b3348be3f4e08335155e8dcfe59561c7fe74dc9e9f0001c18b609cddad37ee5abba23d59eb02f92dea484a5bc2e591bfba36c2e12e438cabe1217993b1589ac91566b", 0x75, 0x0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}, 0x40) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:19 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) stat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002440)={0x0, 0x0, 0x0}, &(0x7f0000002480)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002540)=0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r5, r6) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r10, r11) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000080)="f859f772f4666539f6a08fa4ffd19c98327d1ee5c12267cfaa8990438a063b772a4fb448e44bc94ef99a07591b7cc2712feb03c7382a7a36f6294a61c3a614eb0739171c386f73b5c5a409432eec8939604cc6736c5822e8ad76cc4343dfbde7ef5489be1e2c4b1b4b7887d8b55657b1f782b8c0e55790117aa0563272e923ed88901fe671354cc2c8026bb01d0867ad269aca5ed357337e3711ce8b1a40c5f5ebda247f596efda5178f7c768cf0d12932f9752add8f446ed88639447d16b0c362ca3fc2b2e4eb64ea7818049ddd1b5a6d7b82e828a31e716eeaf0bdf87e7086a42f8cae4a010e946e984db2dea46c98b382b4feeed1d11dc2a83cbbd9fec11aef840d762cb1066551103d25e55e2a27e32532e2dd8ae873beeb1c4aa4cd62cf1224e5cb6c6883d71a7b1fc11f00a9141b871cf954e9d32c53d6cccfe22aec6440eac38adae6943bd11557bba7e2b5bff1c4fbcf3f02b087a8dd6992732310500ba866f89d1181981eeef92f3ec79838a1f13ab2dcbd1ceb6a91481f8b36f5503ee734e642fffb74a2befa8dc0eb83d1db76054e7bc7f4dfd0d6a76ed89779f62994e7bc310b857980414cc9e8bcd78ece6ab192d90f7bb27914102b6e9347e946b9484ff2bd72aa4015d8944fbe8ce4596bd8202340d35870cacfad6a06b4294feb24ffe11199a891787699564164fb91ff6c0f8d0143798c455e17dfcd40aca405500587e993d50cc170301500104eb875009b35496989eee2c362260f09b42e5c541eb2385b2d89506ebcc872104dc1be722a9ecec6622b442dbe8f36dcaa305f94c6fa0928a8120e48bee550e5d523dc72c261325a03657d9788e103eead19e836f035a53ca6283881696410bb43ce2a8d281a05e02b21af3184357a3fc28755391ffda50c158571eb639b4ea8243b41ae6c11bd36f29eec20be34d5d68b0af2923dbdee7cba84d91ad65a61d1da42ef07541553f332f04c848fa8a5a4c6e25728cfbe252ac72b01ecc681c5453e6bfe792ea783cfed4b97484b7d72ab147479524a556f039b5adb7bedb6d2b4dac4194af857158fd0ba5f0491da1c374fd6b57ec57d8ba75a0809bbea08b1f772a6192f2d95cc576c5b4605ee46c5c37318f738b27f21ad540207e6614041697630b1447cc2d0aaca17790e663a38f9b47d4d6dbd2bac6335fa78f70b63fbce902de55d8397cc26ea504fc921bda66bd45930529e736897ac13a3a27ce70c2ad1d34bcb147a1e18fa9144822536c6dfcd67b3f6fa909ddcfaa741715085de8e5a49a34f8e08d1d15fec5141cd8e88b2e90ffecc8853a5f90707f6a8c8a0e995c85006c1d2406e752598ee6c8ef96bb2dd82a9e7a56596ec1220ea7bc35740dd46b81c0a048ddb109459742078fc77168425a0e4bc2ea3f771ac452409360044868b7ac8cd114a4fd372014953842fc8dd6eabd67b04dc8e0f120629ec4eb1aa06b9874858d5f93e206e19342a7e4f9a3d2cee6922eb0876978133da54acd2a91ddef1185bf353791e1fd1b45167f46bb86254b0268d5c793b428e1365a89f348ab3ea5dfbbf6f26f07a5990d7d9a3a873957deae56c2ba133acc17fde21cdf4244a5acb88e8ddf1868ed606c88bf0c0592e286a7d4dd64ba14b00014a984613a18cdadd94c95700083fd40000866189beb9de6a4a983179e46d3410261e745dd5c582c02ebbada85f859e7f89cb8e97aeb187f7f7777c149e5d1957d09eb5ae800710d202aa45c10ec2526eb13d9703649cf23c08a999f0950644d8bcc6a59b51c6d30df6796595965dcc0458de0d8c4f791db886bb8e05d4ad8dd7a4b556090bcd76ffebcff70f7e5c9795d192f2788d5de257067dffc16a215bdfb6f0c48e053ca51d11a5baf5c22fca7f57c757e71e97303b6dcbf7eed3f99abf6a231ccf2fd2ac4c073c1d2d339b471fed81dfee0a4032afdb8666c92ef935449888d0164e8dc5ab80b2c497fd7ab2afc5a4e5400d1c820d4ba99631f48d7538460af567f00a73a52c4ef7a0631b5a673b8391fb90effa9709412c8cfa8037df63fc55f1b7a417620116be1cca333656cdcd8a48b706182134965359bc02271b6696f6606bf97c9b72168f77a6e3df3f8d967e831634fd0b63a08640694f33a2f490ccf14d08eb8144d97bf8dde747126644788eab50935c609c726d9c8c0694a44274d6dc553beff9f431b39dc2191bd11067338cb5b51b6582bc0a3069d85aed116f3830a967e6e4e28e941ade42d3dc2e0648b3a621624bb49d2ba10853d3b6580bde72985ffd4db81bca61d443ed439aecf93edba92851e3ca2c3f39c4346d9e2ce6a892888b85d5c48638482e60c3e7230e423df6e89688285c193154075c984d021fff34de019e22b451c642c79f3b76aec944bb993389c733e3f12ebf0fdab71baf7a4cf55678671d0654100eb907a4c887348efdcf2db7f2c88bb215779ac2af9212d2a0091188d9e89208f0a75756508e9364fae9486131c2a6e42ad8d4aa1f10f01192d4bba08f803d4f332855198aab2b72351975535f6612f76e30dba24e542d10c1180d45d1f23b0b906033da2287634d32667609d010b719eab986bfe83a9c87b7c6ab44cacc82d789988415d4d522e66f907dd3249a5eb6fe9a81c9570e87b317dbb04933896e0cacb2c3e55a588f51e6b9dbbdef78eeace7a299a4f8c7b4db94f848f24989d6cf95c66017b9438aea8f0884962ea89427e5508775294ae85a088e507deb8be3b0acceb47f6c9a4f3aa2a9f88df6adeb85adeabc0ba6807691c2d550b6facf2b101b41efc9c25ce12a287bbc4296163c98a9978a1df3554de00faf93c4b46c7b3b77b95ddbcfcb15201e4a9f437d675eca4ffa9dbe465b01399048e1e8c44c1c0d1fad69cf3b0e0a881bd301479b0fb71cb32f7d47d02ec38e744cd8921d929d68c53bbb2359556c4e45586b6701d3195772265693451c03ffbf49f6edafb3f0f7a681370ad51c38a7eb584debad1aff24cb1a647662ddc0a32a490c76b00ce2711d43131075a8a1e413b34e1ee6c09003b0ef269ac1b0937f4adbeb8f5ab191097df80acc30ad7cd04017b45323b26131bca736994763ab71ce719718b00dea68031356cf29cf6b4aa5bd2b7c1ff3dfb76605da93f205f94d875ac4c3efcaf0d9c947d7b549812a9fe2a6a07cf634935f7eba6dd57255e46cb0fd40437ade449c5b90ba9860304c357697d8efdde5c182980f0760facf00f321bd6d539443a9256a8a704b888b169b6c1a1014ccb67bdc1dfa65857eb65b00de933a1e4eef20c6d6bad446ce05bdc05ea103ca5aa944b3e05ffd6ab66c280d5856e1445093db0affc97da722d980fde807aa28b056971bcf7a2b561bc62eca7ca6f8dc6bea6a334d2133ef218d50f6bda09c6bddc20351a2f8e56264a2b963fc21f8201021cc2063e4c9492125fdc6e6c0e4bba012ca7cc304b7f307cd353497ec5b7f1fa58aebc940bc0b6e6a491b024c44bbb30fc4e90285dcaedeb182832656065f068dff8b6a2aea34eb8256e0076317b33bde76d87c62eccf7dfe5dbe972b99ea06cd032926ded12619fd3f737534946feb0e0629ece306e4e3498a54c4c715c37ac1966e514c8f74fa4909a39d1a4b63017fc85610269517ccfe1dd871bcd10be3f7c7971d0cc428e160e1847c9bd6d1358b87c95d60d8c79b1ce5cc6ff166b837d5e4bc6d3d3acd36cc8c4657f79a5eabae5e2a049c88c40223121146c9f06f75cc64b7c9384a6765264e4a9d7eed93eb23071d63cb68041de51cc5429532b9fe7b2bc98c5d1c3fb8d0f1febb6789f9f32a783e47ba770f662425bc0fddad936e900971fdfa0e8c0f4075208de4d809991fca56052db61ee92f0e74640ec3f5c79680e12c169652567f9596367574ec209690b07b91c4ace57f01a1bbf3f27265cde7f3d0862f1c7cf9cf9dd64c7ebc9c67febfd15c77198ac46e0ee50c4d457cd5760a3d43b330b34f943011ef4335b65979fc732bdf8179f49791fd62dd3a2ef159919ee7dcdf98f69e007e1239c73f775645528be1367dc6cd9182bcde50af7927e35a18f939f8e8525c6448e1439ef9587dcb759e349c37bfad03c54a2ea155d4c9b575e8105018bf7f2b56debc26f1a981b22ebec91ec1262dded89d3c820ce9ddd83712370adba57a6646608d63422e0b298ac8d3abe0de49559cacd98dcf347707c4619ae9e6220dc4ba055de905acd8eb28512a533e0af2c685c043f303521878391cd8ac3925cb140179a1b7cbe723da1178fbf40fe391b72f95850eecb7f49445dbe5d1e345e7619fae92842f49abf8877937eab12e668932cc9e622752c7008e68e683d3e0705b29c8005440be799019f291e136d2bb87184f4ac2b5e5e3275d60ca04d0d49ff515161918a5cad5f48ab659ddf5b5352c17fc3f9442a17d2423b2fa33bd3a43c6162cca5fb5a314c660fcdc82823c16237a0b5c053467a9c95be9987ea6da5dc74e294cae6aace4f04b8cb50f6df0303bfc61c2b3ed88c78d7657a02aff45a2c9b4a9d2c70ad5473eb1ffad54efa8156cccfe986348ff9b496358ff9f37273540effb5888ecfa38148f8863bdfcf869d7b42a7b2a4dbd75113690b750a288a870b419ac67fb21b6e4e03d3abdc9fe686147bb771ce3947380f75030cce60e9ef9402889af872afeae0c55410af79f55c50f331d238ea046a50614897760d2bb4a613b65bd2c7d58f5b6ad51159147457e1f1e8f97d522eb8f266c481177cc0930fc0570e053656174eb0a454a05719092e7887be700999b5b24a73353ac938c82abd499a6920272d99c3d3cbfa2cb1f50135ba99fd6bfe0587991b02c17b34e0667afc1b67e30dad4a9dc638c1638d8bfa589573d07fc4acccd2a25acad6e6f4275c4a13a0a33da526fadd466f791c85fa804594cefee2f5f37eaf796a64c0d5d4e109d91bbc5cb10e898f4365fe52afb8b1d9dad5cb6b0aefca0d87b7c7b23c0b670506cd3cf6fa4d0ffae7876cf66800ef19cb850d9faedf6184816624465aec1d51eba4befbdfe49cbfc10aa2f633ba51ab658e3ff32c210a63e272d05640fca6d1d23cf668c6ff73068c8815298410ba52f691045f591128f5a8b3a5d5c46f8c0d65a7ef9fdfc07226058f4098338c581145c9748faa64fd1dc288fedd32f407a0daa30ab9123d55b91e582121dbe4e4936c0f95a02014282c00f9f1327491814b0e95e4f4ffa4a0b72e6fed23b6755b171779c6157383573e13461b52dedd5bea1fc08dcf1d48227081b61e39a873fb458e3db8758fe046ae191a03b57de8c72640ff004b4905c136d7ad2bc6f8768aa15d1f8658e26fa80179b11bcac7924d7cc085941a7fc3bb1af466cadb7202179243df49b5ce5fb7029aebe19991b2ae0b8a68e9717abeca46c37bf78b032ad593866bae6392156486a3337e0705236fda2a3531c13c24b74643a1f97dd183a45986be04578c200ae810a5129c34d5ab80c2a8bc629d6cf4c4c2389a3bea40170ddbaeff279f44d38ee46669302c4614e309b8796f706fc90dcd3c8e5b2e2635e9e9b4b775198375fd3f2b73e5d7ff9b407633d5150b9ae93985257e4924668a8ab860c49de7666931ceab30802376dc592c5dcfdd643427bbee6a5f147157650a5a296a338167bb67bb4aeee66465bd85bebe64e61f43b412a845dc08b6b3935123acfd15d2e220d3f842e21c2d7362a609402d33a37035d0d2dd3e97c51027c15d304a30d7426615d5db5dcf02ce4c2b32f71cfedcc93d0d721408679411f842ca895bef74e95e33a1384ccd5ff434aebf42b85f721ba4b7fca1962dbfc70d3abff5903ca106324efe1b6435793898ab16c3a4fe948c2af27f8dab7aad13ef7715d0385b420ef1763af68ef5180791f2b28a9adf0c3bf4a499976c9cea8de17a7139aba5907ad3ab809d82cf57d5080816d02d7e748c99f275445507f6924281e17a833e36248081ed3b0b32b8a073f03297f0946e698c7eb10f33640c7b981222a0dd7a426141ea34ed47921888f83fbd64d27c60e710d9bfdc7ccacb48f91985446e94fa377fc50c9978409a47fea1f71891fcba73994f33e5669891888a7a1fcf5590b6fabe4926fe301d75110a4791db0f678909c2f7cbf4050632fe03da68eb6c9cdf2377461785d986505b384931dac494e5462035e0dcff3533ea9591be359b9abf2a1d2e69087c5dc00d43cdb044000ff06c2126b5c8e6d64780daec8a6079735e4b8eb5ee61173d2d5b2f79efff41b30a1c45c4f22271822ffdab285e50fe2ce470b2a7e8179e61c05a681bbfa30ae7da47b1175d8a1b5452fc2e8eb62b27a9ae8f64aaa787e089dda213153a9ded20ab2af952ca8766e582cfae4f9f21cf9fe941e870e52a3f6fba216ea1ca9c004dda0b7f1f26c33865c84e62d1f464e9ebffe6d4400523b254ba66996f5d6a696a2fd37104ea8ae29ca724c2b702bba6895323a557fa64659a1f6de1b6d7efacc9d4eea69cb37602a164da2b5470fc1e90cf34617e42bada696bf073b288cdc18bd083361f9bf38e8039f3bc5be62ee09787061a1888c2f92ca89690aed1eb693f1af50af00b97a0317df7ce910e0a84e752667207020397f99483bc0dd3975f464c9b58f0d9e6d8bb4f259df9f33bdec69c684fe6fd3eefd18654ac5a7b06a070388928bf597e455e38dd9518114fefabee0c96bf22b1cf849ceba745526b29cc25c971d42843029dadcd1928f572e93f2f9ca12459498c8efd14b260da29f0dbcbede6720841c729edababdfeb764190c8ada6ffbca982804ac05689b211d35e6889e949945a2bb8f70ce87ae9d0a8af8eb0656e3ff5cd9b3d1b14f55ef35014f2efa266672dd87215a7800457a559ff2b26c8eb79fb182b3a6d19d8c943688f77e01e214acf75a5b2551a0906e762cbc3504842b9043428d83895a364882b9b1b10554e0dff5b8aa53310b07e277c2039c93e21ee3ba51542884f607c1d720de1156e3dfb0709cae7985e24f940242e79b3d17086a36d2916777ecfc4c7c0c40cbcae30b3fc7413cc1be66a9006a16f9a55b781b7c5dc056b7cab556c114fe0180f334c881988070567c821a5cbde7817b47f50354f703fe8dd46f9284725f34b65619356cadbac7c984d10b1d856e54c8e95ce99a6b3878445b75b82e66e1be889b50489c80de58c695f0ca4e9cb71dddd3480d184e4095b0a122318d6f143da78133ff596eb406aeb6aa4271e834956db608790a68d929374494aa057f333fa9a35ffaeb260d079ad4f0e3da33f68665c3013550d14200c5bc46763704182af345532cd9b90eb4daaef985f1b118ecec0784fb263896af886e9e8a02ae1510ed065e1a7f0ed19ff6decb05c9abe31425283a0e8d57075cb6b5ae6f2cacc04b1afc37d640533a71cc2d354fea56f57da16d526f3bd292caa5ccab845f945bc54a545b329580759fd3a0db96fe10892568a06355010031c8ac165abb8f5121b0360b559470e0abf6586c73a24f70db25b9b5c6ed236ac51f118e2b82752488f7e653dff3cdf04fc65295dd89b62824c187f38e7b6494c9ac123bea177deb5f13b5fa16cc3d42291d664331796020620e07bac6c797215d8552d4c34de27ea5f374d5d78d957d06b3e3f4424c0e1f8cbd1a189e2993142ab90c027012000f1a7f25fa5d46d80c60b2cf4d6be480c1fd04304a285388b36de0662a04e9bbf30046e7136df7d9ae59f12789b419dfa1a1c77d7cbdfecb02c17770946a603c51a26216083de606e8b32dad56461de55868f6509e27c71a83e0bdfa26647ed1a408a683f64d3164f37ce5fcb0d48efc2198f8582c733eece7d59d24c9a89c6d1fef9a7b4c8014c69eafab4e8e66eebdd238bcee4d13bfcb4371136d4468c01f5cb0a7f09cc105b465a687de77372cec8b1e2e525e6f5b518d46069007eb9f9eb52aa5b4bcbc0f13e4051f29945647d4646cda5baafe6ac44141b6f1d6d5b5ebbf54186421ef337552e9260a23e0e0d350d26eddd1be71f9cef54b0f58ad70b2efdd14596a613aa9716cf14ffdcdbeaeb82df7536d07759418a11154f17ef85495fea485634a82c13cb91c96116c76d2ef896efdef8c7860b2d79036bc33b99913e04a6bdc76a924d8095b4b6177449332d80725183d8eb848e878eaf4cd7d22fe825c3ba4cb01812837ba6cf4ac552fe991f4ae07f17469fba305549a3bd63d113286feb746f24cbe86cb7befce7147513415c3b65b0e6bcdfa6560fcfe929a7d1d52b92524541205b43e41a294531714d95114420bfcd747304c5489fc97c148516882ad9005dbc62d19a76b9deaaf27db92461711bd0f44adb2368350e698f615a3e6b03f6e4a7037992265782525c7e50ecd2a0f129d3b72fab435a555055b47b9c1bcc58c61489447e0ece16499d7b06507e7e5c5cf721d7f2c39144aa90dcce2f2693a45b8bd360855856bde19b6a3065f4c2be1a31ec20bf15a5f4ff577e3fd43d47d22f56666ba85790941d825d0fb63090509bd4f92155ebb737854aeb2fd01825e159a19fab8c555d84e3f1f02b3a764f754b5ef089ee471dd68482f3078081bffcb22c3ecca8f09b41a77ded8af02bcb612f40d35f75fe64f0ac3eab34a1d009d61f61efaa8bca719e3ea03736df1e1ed3ed7f3c3af65a52165f71fba5c4862736fef542d2cfd2818f8b85941aa95f5eb7decb06351e24f070b099ec257dfc72bd75cbfeffb409c710db8d0b304f1fa700ab1bc84a4de8b269782d66ed5aa8e30c37744c35072eb6192e12489991731171619a84e244fcc8b7f19c37d6421c4f7f8aad49247148380e9af16e7278df0d3ff86f97427de2b3a579e6ece08274e7fa1348c44cd2fd13b329fc8e5c0ce024577f0ebb2751332eabb30b6392a66c444af7b2940e1132c7a213082a6056a09f8f32e3c2b4ea9444e2ce33ec48817f1e6b8916e0b9faf51e7af57d19e2d6894945f7dfa532387c2c24d2d5828438b7865daeafd698158d72be33d9bf2d9625a8e55a9df97e49c8a243be16d60af12bde26e670fae30a311fb504f881468643ad6dd6b935a82c638ff5509ebdf4062dce8373b737cdf41b0c14f5c3eb3860d3bd697a4562550f83e2e0c8bd6236d2a154e830f66fac54772de3dac5b288317b58a080ba89117da6e8323db328c0c47a836f3dc47c1f690ecb73ba7f456c37c3281073d5786c8ca646919e0c5b9ced8cc5f1e6fbd93978d5751601e837c9c3236611ddca687f902d527418ee781a77c938fa7bf85339362f5968493e11b41124b89132299a96d1b2877242efc64986ea54eb0b1644480d4152268e2864423d442d38ad7547afdfa0ea0dc273acfe201e5b68ac6e3b5d99c90049b72fe548b4d918222297c13c73dcc4f8091ef98f35cc170296ea4975d3a74d8645be42007140911975d70ad92a1817a43807f001d846305f9a0585de98b7a537634e29ae1fd18eedd45706adcc590bb853a1088d186aa9dcdb69ffee2f712221910ff44144e17532577d315606a68d8d65d66b870e58b257a5c38d48f40f2673b7c1ddd2202322523a43f99a34698f7c1d96a4b368ba80adec62d53c7653c7121e993c9aac849d611daf4627122b3eed3368d58262b63fad962a0f7fae464680965188198d993aaa84f0eaa825fed74b04810463c050a4434e8b4e0bdf09c11263a1624f28842a4d5aa268c23ab0e6cc0d6b18f6c7154e407171b21aacf36403fa40dfa9ee5475ca7767859c80c874c3451ab29ba509240fd4c6a5e27f3b7ed7f0237f503fd54b59e6599f341a188a1bba31f6c37f8fbc2a306690f5ce48831d1151fad68b219c383f3f47be5ac4dc881cf5d26255a62f2d9dbaff2c3b3f174f9202ce9eb2c150047ac4d849b6c1c4e038770ae56d23186ba352503b87265b9275e72cf1caabc68900db7ba9bc83f4870265c5d3ffeeb6a6096201fda5407e754ff8df05972613faf34ec7d4c069449fdf70c00f4c016cde677d5b9a9e401f19a2e5f1070dcb66b0581f4b7d1696787443cf224c8400f8786f010043a6f17281ca59fd4c26f8711828b6f7dab2159b5f2ecf4e4fdbee86014933dbd197afd6f8b44534ec2a3d371c1ae9f14247ff777ce2725b5773274ee1c2ca90bbbbda20bdf166ded3c05daa56297f5d7794f6adc1c7c67d063a84b056702a91ac756c4f08442e843417acb8699f781660a6b8465580ce401ae4e69a38967a9ce1875b0e93a8023e973b6dd851c55ef762f8f037106e9b82045ac9c3e6eeb44abbe104481a9e7a777c35fe3c9e32be2b8a439eca93aa75f8f5480b0b509e86ba145161bb67d52c13d5a57edc8b0d101fde56b108c2164875f77040f2ef64e33ce755e28ae59fc3b214e0b143c44b98d352412bcd74f01e6cff6fb0131c83e5583f7c4d0a30461191427fa66332bc68ab44ad267d80287f1d55f6b7a65d8afdf36e3e8937b9f85b59fad4795f93a08f5afe0cc69d0a6189c797a259eacd461a599f988e700dde6a8be8e0adc1d3e2bd62c6ba9325353f05ca9f2464a0e8e1777b3c81661911732a15959a54c20b08d8eccc6d6c285c735d154b5955fd39db4182b3540abc40a660783e6f6ab101902c071da9fc2e53be6a9dd3905f6dbd286b4166ae77d83733edebb1d9a623aa308de854c46b1ff24c854df70be2286cf4c3a3f9c2d6abdbf5954c8426e4333a9fe64514d93de9d85da78e698bd4ac6a35fc4c5b1d6e009ad4e4e738b8c0456db44d2cf3a91ac2c35c9ab91f37f91cf7169bd46a78acce336c1d1037ab264923f7ff8f04c370d40ca60be58131265c7ca4ce5640952b9bbd790784a47c1ab299ac42d2b3d77319072ac86aa5fc3147b7110c19f93e1be04ff05290d563190a32dc819770261102c3dcf0b70ff9e92620d4e30109c82d24ff8f2c41f197a57cc99fd9523d421cb537d0b179f17410661b4ee4aa847c3454dc91a8493f8880720813cc93cab2cb87aeb2f1c7eb55ae5c83dc30e7c2e7daba1fba8d3e5e313ab5972c85e2e66d5c49900da0e426468a0c93d4d23a5dc103735420c0b955a3c44bb7e51b345aa2093c3caa45a0316ab11cd9a52cc7cc6fd7c181da9c3ec9c7543661c92d6f454b447e6f3656e942027cb73411fef91df7e135514dd416ef1d74875fa532161809334068b965126842b676e7aab203d0667ed8b938b9e19b000da1599cb4acad01adfdb205fefef4e57f0a178ce92a28966258a8daeced5b673005835ff45e6b24fb90d06e6d51f09576258e1834c113cd305148d57e3336b66d1bd2897037be3035ad5d6eac8248a93e02f7b7934780b689d6bd933abc4e7ac3b4169a99d2a75b093ec666693feb89634dc8227d6c3c5922d956193eeaa89917723f314ef792661d0fe915852c62c2d213971ea7b2644c867dbcba13367e8b1895156cc19e97b9e95fe6b1361c02ab90fe270967ce98555e59d2ad12741f9c2bb2bcf5bc3a61c88e2b8ffc787fcf1935115edd0a940dbd137bb24d1218b2f82616e7b20a53bd7917e371e68bcb12c145e18c23493bd8feb51f360df5f9395c75e116cdffc6ed0e40573650c7236d6fac77d755d90fba1b0248c296ed27a7c53adcbe54a9d", 0x2000, &(0x7f0000002a00)={&(0x7f0000002080)={0x50, 0x0, 0x6, {0x7, 0x1f, 0xa69b, 0x800408, 0x4, 0x1, 0x0, 0x1}}, &(0x7f0000002100)={0x18, 0x0, 0x4, {0x5}}, &(0x7f0000002140)={0x18, 0x0, 0x0, {0x31}}, &(0x7f0000002180)={0x18, 0x0, 0x2, {0x800}}, &(0x7f00000021c0)={0x18, 0xfffffffffffffff5, 0x7, {0x6}}, &(0x7f0000002200)={0x28, 0x0, 0x1, {{0x1, 0x401, 0x0, r0}}}, &(0x7f0000002240)={0x60, 0x0, 0x4, {{0x5, 0x4, 0x5, 0x3ff, 0x200, 0x0, 0x311c7555, 0x8}}}, &(0x7f00000022c0)={0x18, 0x0, 0x4, {0x9}}, &(0x7f0000002300)={0x25, 0x0, 0x1, {'/dev/bus/usb/00#/00#\x00'}}, &(0x7f0000002340)={0x20, 0xffffffffffffffda, 0xd70, {0x0, 0xd}}, &(0x7f00000024c0)={0x78, 0xffffffffffffffda, 0x0, {0x81f, 0x2, 0x0, {0x4, 0xffffffffffffffff, 0x2, 0x75865d0c, 0xff, 0x8, 0x7, 0x2, 0xa350, 0x6000, 0x8001, r1, r2, 0x2, 0xffff}}}, &(0x7f0000002580)={0x90, 0x24, 0x74, {0x3, 0x2, 0x40, 0xfffffffffffffff7, 0x5, 0x2, {0x1, 0x81, 0x3, 0x7, 0x80000001, 0x4, 0xfff, 0xe06, 0x10001, 0xb000, 0x1, r3, r6, 0x400}}}, &(0x7f0000002640)={0x120, 0xfffffffffffffffe, 0x3f, [{0x3, 0x7, 0x15, 0x81, '/dev/bus/usb/00#/00#\x00'}, {0x0, 0x4, 0x15, 0x6, '/dev/bus/usb/00#/00#\x00'}, {0x3, 0x9, 0x2, 0x7, '$\\'}, {0x2, 0x4, 0x15, 0x7fff, '/dev/bus/usb/00#/00#\x00'}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x9, 0x15, 0x1f, '/dev/bus/usb/00#/00#\x00'}, {0x3, 0x2, 0x0, 0x100}]}, &(0x7f0000002780)={0x160, 0x0, 0x100, [{{0x1, 0x1, 0x5dd3, 0x1, 0x163, 0x5a15, {0x2, 0x35740c08, 0x3, 0x1, 0x2, 0x7f, 0x3ff, 0x0, 0x6, 0xa000, 0x4, r8, r11, 0xfffffbff}}, {0x6, 0x5, 0x2, 0x45, '$['}}, {{0x2, 0x2, 0x20, 0xffffffffffffffb0, 0x1, 0x6, {0x5, 0x9, 0x4, 0xd75, 0x3, 0x5, 0x7f, 0x20, 0x5, 0x2000, 0x3, 0xee00, 0xee01, 0x8, 0x7fff}}, {0x2, 0x80, 0x15, 0x4081, '/dev/bus/usb/00#/00#\x00'}}]}, &(0x7f0000002900)={0xa0, 0xfffffffffffffff5, 0x3, {{0x0, 0x2, 0x9, 0x8, 0x9, 0xffff, {0x4, 0x7fff, 0x0, 0x80000000, 0x7, 0x2, 0x3ff, 0x5, 0x990, 0x1000, 0x2, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0x2}}}, &(0x7f00000029c0)={0x20, 0x0, 0x0, {0x4, 0x0, 0x8, 0x40}}}) r12 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x14, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x5a, "b870d36ecca6d132fe9942af06607242a71a16d40e9b0bc21ec4c527dffb514a7e52e54a3fc5ad895d96b6d11c2cc5f6711d5793d8d2a4d9eada43b06fe29e8c487cc4b484fad98b950141004c754819460fc4e8f937d58f5869"}, &(0x7f0000000140)=0x62) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000080)={0x6, 0x0, 0x1009, 0x9, 0x3, {0xa86e}, 0x1}) [ 335.866633] xt_hashlimit: overflow, try lower: 0/0 [ 335.876797] xt_hashlimit: overflow, try lower: 0/0 00:55:19 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x40, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x2, 0x5, 0x8000}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:19 executing program 0: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20) 00:55:19 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfff, 0x5a1000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000001140)={0x985, 0xb09, &(0x7f00000000c0)="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", &(0x7f00000010c0)="1c291eee5383004ca83f41a05e835eb1ee8dd160c299059e82db74c604423b3dca382b8b7571ef569d8cafa19a96566d4ea4b48cbde351a33641cab42b5fba7930a7", 0x1000, 0x42}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000240)={0x563, "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"}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000200)=0x7) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x6, 0x10, 0xfffffffffffffc00, 0x4bf7}, &(0x7f0000000140)=0x18) socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r4, 0x7243}, &(0x7f00000001c0)=0x8) [ 335.991492] FAULT_INJECTION: forcing a failure. [ 335.991492] name failslab, interval 1, probability 0, space 0, times 0 [ 336.046251] CPU: 0 PID: 24233 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 336.054595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.065167] Call Trace: [ 336.067785] dump_stack+0x1b2/0x283 [ 336.071669] should_fail.cold+0x10a/0x154 [ 336.075989] ? check_preemption_disabled+0x35/0x240 [ 336.081968] ? mempool_free+0x1d0/0x1d0 [ 336.086993] should_failslab+0xd6/0x130 [ 336.091148] kmem_cache_alloc+0x40/0x3c0 [ 336.095496] ? mempool_free+0x1d0/0x1d0 [ 336.099661] mempool_alloc+0x10e/0x2d0 [ 336.103751] ? remove_element.isra.0+0x1b0/0x1b0 [ 336.109172] ? _find_next_bit+0xdb/0x100 [ 336.113847] ? retint_kernel+0x2d/0x2d [ 336.119133] bio_alloc_bioset+0x41b/0x830 [ 336.125298] ? bvec_alloc+0x2d0/0x2d0 [ 336.129108] bio_clone_fast+0x20/0x130 [ 336.132998] bio_split+0x69/0x250 [ 336.136459] blk_queue_split+0x52d/0x19f0 [ 336.140624] ? blk_recount_segments+0x540/0x540 [ 336.145309] blk_mq_make_request+0x131/0x1ad0 [ 336.149811] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 336.154743] ? check_preemption_disabled+0x35/0x240 [ 336.159763] ? blk_exit_rl+0x70/0x70 [ 336.163480] ? generic_make_request+0x369/0x850 [ 336.168151] generic_make_request+0x1f6/0x850 [ 336.172647] ? blk_queue_exit+0x1d0/0x1d0 [ 336.176798] ? submit_bio+0x22c/0x390 [ 336.180605] submit_bio+0x234/0x390 [ 336.184239] ? generic_make_request+0x850/0x850 [ 336.188924] blkdev_direct_IO+0x567/0xdc0 [ 336.193092] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 336.198198] ? retint_kernel+0x2d/0x2d [ 336.202095] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 336.207114] ? mapping_needs_writeback+0xd4/0x110 [ 336.211962] ? filemap_check_errors+0x75/0x90 [ 336.216489] generic_file_read_iter+0x234/0x21c0 [ 336.221263] blkdev_read_iter+0xfe/0x160 [ 336.225380] do_iter_readv_writev+0x41d/0x5f0 [ 336.229893] ? avc_policy_seqno+0x5/0x10 [ 336.234136] ? clone_verify_area+0x1e0/0x1e0 [ 336.238572] ? rw_verify_area+0xe1/0x2a0 [ 336.242633] do_iter_read+0x21d/0x5b0 00:55:19 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) 00:55:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000280)={0x8, 0x7, 0x8d51, 0xffffffff, 0x2, 0x8}) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8815}, 0x48098) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x2c812ccd) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) 00:55:19 executing program 5: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x450400, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 336.246455] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 336.251248] vfs_readv+0xc8/0x120 [ 336.254704] ? compat_rw_copy_check_uvector+0x320/0x320 [ 336.260067] ? SyS_write+0x1b7/0x210 [ 336.263797] ? __fget+0x1fe/0x360 [ 336.267691] ? lock_acquire+0x170/0x3f0 [ 336.271670] ? lock_downgrade+0x740/0x740 [ 336.275824] ? __fget+0x225/0x360 [ 336.279288] SyS_preadv+0x15a/0x200 [ 336.282917] ? SyS_writev+0x30/0x30 [ 336.286572] ? SyS_clock_settime+0x1a0/0x1a0 [ 336.290987] ? do_syscall_64+0x4c/0x640 [ 336.295644] ? SyS_writev+0x30/0x30 [ 336.299271] do_syscall_64+0x1d5/0x640 [ 336.303170] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 336.309057] RIP: 0033:0x45d5b9 [ 336.312246] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 336.319957] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 336.327242] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 336.334607] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 336.341911] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 336.349292] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:20 executing program 4 (fault-call:7 fault-nth:15): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:20 executing program 5: ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000080)={0x63b3, 0x1}) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:mount_tmp_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:semanage_read_lock_t:s0\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040940}, 0x8000) 00:55:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106}}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000001c0)={0xfffffff7, 0x1, 0x400, 0x1, 0x4}, 0x14) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000180), &(0x7f0000000280)=0x4) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="2400000003000000000000000600000000292e25ff000000004f5aad3ebb30fae8cd963f932e3a73fb71e249afc53eb6c8bd058106000000e064d32206b0cb6d90ab1e1fdbde79b4cb29e4445c24b400d3c4718c2b719529105d42aac0f2de7f52ad0b17e75a2e8b968d17a105e7068be9fb12ce36896ccd711afe676ee22d16699dae0425bbc0279f05abf7cbc1d4f1fe"], 0x24) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r2, r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r2, 0x3ff, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x100000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}}, 0x118) r4 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="cff193dd2cb82d53ed09e1448b511cc61334328d8ec1af6b7027c0bcc8aa39c4cb3db6adb1caa18cf1fceb5c7026677d70b23fcec5d7ab9cc442fe206866e4e566073e8cf50493448683fa8147b5c1c45284ed089ce2e00694632001f4c650787ed6b60b66dc220efbca83bc5ad131aa0c", 0x71, 0xfffffffffffffffa) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/cpuinfo\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001140)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x3410488e, 0x1, 0x6, 0x3, 0x2}, &(0x7f0000001200)=0x98) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000680)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000005c0)="812644da8e514527332e6b141ca4d8df0672772e46ff88959b22f50ab393cdb2aba35845ab6aa8cfccc49b52c0abd91e20070c41522aff1cd61e173c23a187a605b003bb15ab8ec60617d9cc68d59e306e54720ddb9ba31faba0819243b4696ca6a200f85193717e13083b487652bfd249de9aceac1529fe6833837c1e353aa7d8e78e5b3dde6b661c43d2", 0x8b, r5}, 0x68) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001240)={r6, @in={{0x2, 0x4e21, @local}}, 0x9, 0x1, 0x3, 0x8, 0x80, 0xfff, 0x81}, &(0x7f0000001300)=0x9c) keyctl$assume_authority(0x10, r4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x32, 0x0, [0x0, 0x2, 0x0, 0x1000006, 0xfffffffd, 0xffffffff]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) 00:55:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', 'fou\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x4ea041) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4009) 00:55:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7fff}}, 0x18) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @vbi={0x3, 0x9, 0x30, 0x38415261, [0x4, 0x8], [0x7, 0x7], 0x13a}}) 00:55:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x400002) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r2, 0x100000000000012) sendmmsg$inet(r2, &(0x7f0000004c40)=[{{&(0x7f0000000b80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000bc0)="89", 0x1}], 0x1}}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x6, 0x324, {{0x24, 0x4, 0x2, 0x9, 0x90, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @local, {[@cipso={0x86, 0x6, 0x1}, @ssrr={0x89, 0x3, 0xf4}, @lsrr={0x83, 0x1f, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x26, 0x3, [{0x0, 0x3, '-'}, {0x7, 0xa, "18e86a022c85a5c1"}, {0x0, 0x6, "2174b24a"}, {0x7, 0xb, "0f8cc18c95e41e2658"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0xb7, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x79, 0x0}, 0x975}, {@multicast2}, {@broadcast, 0x5}, {@loopback, 0x9}, {@multicast2, 0x80000001}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x40, 0x11, 0x1, 0x1, {{0x24, 0x4, 0x2, 0x3, 0x90, 0x66, 0x0, 0x5, 0x29, 0x0, @remote, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x2c, 0x1, 0x9, [{@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x87, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x9}, {@rand_addr=0x64010101, 0xc}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast2, 0x8}, {@rand_addr=0x64010102, 0x7f}]}, @ssrr={0x89, 0x13, 0xec, [@remote, @rand_addr=0x64010100, @local, @private=0xa010100]}, @lsrr={0x83, 0x13, 0x98, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x9, 0x6, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast2}, 0x80, 0x7800, 0x8, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x3f, 0x81, 0x8, @mcast1, @mcast2, 0x8, 0x7, 0x8001, 0x1f}}) [ 336.534339] FAULT_INJECTION: forcing a failure. [ 336.534339] name failslab, interval 1, probability 0, space 0, times 0 [ 336.547764] CPU: 0 PID: 24298 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 336.555695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.565162] Call Trace: [ 336.567766] dump_stack+0x1b2/0x283 [ 336.571436] should_fail.cold+0x10a/0x154 [ 336.576032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 336.580800] ? mempool_free+0x1d0/0x1d0 00:55:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x800) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x7, 0x6, 0x104, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9ea416cb}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000000)=0x8) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @pix_mp={0x1a518bc4, 0x20, 0x41414770, 0x0, 0x1, [{0x6}, {0xffff0c79, 0x1}, {0xffffffff, 0x3}, {0x6, 0x1}, {0x4, 0x11}, {0x2a2, 0xfffffffc}, {0xffffffb9, 0x5}, {0x5, 0xfffffffa}], 0x3f, 0x1, 0x3, 0x1, 0x5}}) [ 336.584791] should_failslab+0xd6/0x130 [ 336.588796] kmem_cache_alloc+0x40/0x3c0 [ 336.592894] ? mempool_free+0x1d0/0x1d0 [ 336.597135] mempool_alloc+0x10e/0x2d0 [ 336.601036] ? remove_element.isra.0+0x1b0/0x1b0 [ 336.605827] ? _find_next_bit+0xdb/0x100 [ 336.609901] ? retint_kernel+0x2d/0x2d [ 336.613906] bio_alloc_bioset+0x41b/0x830 [ 336.618073] ? bvec_alloc+0x2d0/0x2d0 [ 336.621892] bio_clone_fast+0x20/0x130 [ 336.626317] bio_split+0x69/0x250 [ 336.630314] blk_queue_split+0x52d/0x19f0 [ 336.634523] ? blk_recount_segments+0x540/0x540 [ 336.639348] blk_mq_make_request+0x131/0x1ad0 [ 336.643873] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 336.648821] ? lock_release+0x41e/0x870 [ 336.652952] ? blk_exit_rl+0x70/0x70 [ 336.656680] ? lock_downgrade+0x740/0x740 [ 336.660850] generic_make_request+0x1f6/0x850 [ 336.665362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 336.670177] ? blk_queue_exit+0x1d0/0x1d0 [ 336.674339] ? check_preemption_disabled+0x35/0x240 [ 336.679373] submit_bio+0x234/0x390 00:55:20 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) [ 336.683132] ? iov_iter_npages+0x4b/0x7c0 [ 336.687307] ? generic_make_request+0x850/0x850 [ 336.692430] ? iov_iter_npages+0x17b/0x7c0 [ 336.696787] blkdev_direct_IO+0x567/0xdc0 [ 336.700988] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 336.706097] ? retint_kernel+0x2d/0x2d [ 336.709998] ? mapping_needs_writeback+0xd4/0x110 [ 336.715026] ? filemap_check_errors+0x75/0x90 [ 336.719540] generic_file_read_iter+0x234/0x21c0 [ 336.724306] ? retint_kernel+0x2d/0x2d [ 336.728230] blkdev_read_iter+0xfe/0x160 00:55:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6]}], r1, 0x1, 0x1, 0x90}}, 0x20) ftruncate(r0, 0xcb) [ 336.732335] do_iter_readv_writev+0x41d/0x5f0 [ 336.736987] ? clone_verify_area+0x1e0/0x1e0 [ 336.741419] ? rw_verify_area+0xe1/0x2a0 [ 336.745534] do_iter_read+0x21d/0x5b0 [ 336.749362] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 336.754481] vfs_readv+0xc8/0x120 [ 336.757976] ? compat_rw_copy_check_uvector+0x320/0x320 [ 336.763418] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 336.768446] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 336.773345] ? check_preemption_disabled+0x35/0x240 [ 336.778400] ? retint_kernel+0x2d/0x2d 00:55:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0xffffffffffffffe9) [ 336.782301] ? audit_add_tree_rule.cold+0x2f/0x2f [ 336.787164] SyS_preadv+0x15a/0x200 [ 336.790807] ? SyS_writev+0x30/0x30 [ 336.794554] ? do_syscall_64+0x4c/0x640 [ 336.798564] ? SyS_writev+0x30/0x30 [ 336.802206] do_syscall_64+0x1d5/0x640 [ 336.806106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 336.811325] RIP: 0033:0x45d5b9 [ 336.814520] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 336.822237] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 336.829661] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 336.836938] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 336.844221] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 336.852034] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:20 executing program 4 (fault-call:7 fault-nth:16): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:20 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80040, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@subj_type={'subj_type', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@uid_gt={'uid>', r1}}]}}) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$packet_int(r0, 0x107, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 00:55:20 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r0, 0x1, 0x1, 0x90}}, 0x20) 00:55:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x18, 0x0, [0x40]}, {0x0, 0x0, [0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd]}], r1, 0x1, 0x1, 0xbe}}, 0x20) 00:55:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) read$fb(r7, &(0x7f0000000180)=""/147, 0x93) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc10c5541, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={r5}) fcntl$setpipe(r0, 0x407, 0x1) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x145000) 00:55:20 executing program 0: ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0xfffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f00000001c0)={0x14, r1, 0x709}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "098577ac0c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "3953b83a0511b38300"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "64cced7de74573ce3cd5826ce2"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c60fb64ec0"}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000080)={0x1, @raw_data="73f19e4ce8d547d9807713530b054f78ca9b3c735fff41f851eef4f11ba70a69d0aaf8f1f1e3f4dbee91ab7906e9deb43ad85cfa14e514460ff75d3f2584e7d1986d4b82ebaec56c92b0bad36e523bd292455fef23aee12f12bd591bf522f41d031f2f100a3166e069319831e62dd6061ba6073d477c699f99045d6bde87c17adf043a5ee4125198f650af8b680b798d65f61bb93649b1b7dafb94903aa401634727dbbf49ee7f1ec2b558bd46b5b6f19e48f79b8e947d7f448c7ebc2f1790375c1a0f8d8ee93bc0"}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000180)={{0x4, 0x7}, {0x8, 0x9}, 0x5, 0x7, 0x6}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)={0x80, 0x3, 0x4, 0x10000, 0x2, {0x77359400}, {0x1, 0xc, 0x6, 0x9, 0x54, 0xfa, "ccfb9dcd"}, 0x6, 0x1, @planes=&(0x7f0000000200)={0xffffffe1, 0x7ff, @userptr=0x5, 0x2}, 0x7f}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x10000) 00:55:20 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xb73, @private1, 0x9}, {0xa, 0x4e24, 0x8, @ipv4={[], [], @multicast2}, 0x1}, r2, 0x7}}, 0x48) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x8, 0x4) prctl$PR_SET_PDEATHSIG(0x1, 0x28) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@int=0xfff, 0x4) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) recvfrom$rose(0xffffffffffffffff, &(0x7f00000000c0)=""/116, 0x74, 0x2, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 00:55:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/mdstat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x146b1975af16d1ab, 0x0, &(0x7f00000000c0)=""/240, &(0x7f00000001c0)=""/235, &(0x7f00000002c0)=""/127, 0x4000}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340)=0xada) [ 337.130090] FAULT_INJECTION: forcing a failure. [ 337.130090] name failslab, interval 1, probability 0, space 0, times 0 [ 337.165433] CPU: 0 PID: 24354 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 337.174066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.183558] Call Trace: [ 337.186176] dump_stack+0x1b2/0x283 [ 337.189850] should_fail.cold+0x10a/0x154 [ 337.194010] ? mempool_free+0x1d0/0x1d0 [ 337.197989] should_failslab+0xd6/0x130 [ 337.201992] kmem_cache_alloc+0x40/0x3c0 [ 337.206059] ? mempool_free+0x1d0/0x1d0 [ 337.210033] mempool_alloc+0x10e/0x2d0 [ 337.213943] ? remove_element.isra.0+0x1b0/0x1b0 [ 337.218705] ? _find_next_bit+0xdb/0x100 [ 337.222776] ? retint_kernel+0x2d/0x2d [ 337.226702] bio_alloc_bioset+0x41b/0x830 [ 337.230872] ? bvec_alloc+0x2d0/0x2d0 [ 337.234676] bio_clone_fast+0x20/0x130 [ 337.238609] bio_split+0x69/0x250 [ 337.242093] blk_queue_split+0x52d/0x19f0 [ 337.246256] ? blk_recount_segments+0x540/0x540 [ 337.250945] blk_mq_make_request+0x131/0x1ad0 [ 337.255449] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 337.260378] ? lock_release+0x41e/0x870 [ 337.264356] ? blk_exit_rl+0x70/0x70 [ 337.268075] ? lock_downgrade+0x740/0x740 [ 337.272611] generic_make_request+0x1f6/0x850 [ 337.277149] ? blk_queue_exit+0x1d0/0x1d0 [ 337.281313] ? retint_kernel+0x2d/0x2d [ 337.285299] submit_bio+0x234/0x390 [ 337.288936] ? generic_make_request+0x850/0x850 [ 337.293632] ? __sanitizer_cov_trace_pc+0x41/0x50 [ 337.298485] ? iov_iter_npages+0x17b/0x7c0 [ 337.302726] ? bio_set_pages_dirty+0x8c/0x170 [ 337.307225] blkdev_direct_IO+0x567/0xdc0 [ 337.311395] ? check_preemption_disabled+0x35/0x240 [ 337.316470] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 337.321590] ? blkdev_direct_IO+0x2/0xdc0 [ 337.325786] generic_file_read_iter+0x234/0x21c0 00:55:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0xfffffffe, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0xf4, 0x8, 0x0, 0x0, 0x0, 0x6]}, {0x0, 0x0, [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x101000, 0x0, 0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=0x117) [ 337.330555] ? retint_kernel+0x2d/0x2d [ 337.334458] blkdev_read_iter+0xfe/0x160 [ 337.338709] do_iter_readv_writev+0x41d/0x5f0 [ 337.343212] ? retint_kernel+0x2d/0x2d [ 337.347221] ? clone_verify_area+0x1e0/0x1e0 [ 337.359116] ? rw_verify_area+0xe1/0x2a0 [ 337.363207] do_iter_read+0x21d/0x5b0 [ 337.367027] ? do_iter_read+0x2/0x5b0 [ 337.370833] vfs_readv+0xc8/0x120 [ 337.374370] ? compat_rw_copy_check_uvector+0x320/0x320 00:55:20 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x0, 0xa71}}) 00:55:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getpgid(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) kcmp(r1, 0x0, 0x4, r2, r0) [ 337.379737] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 337.384858] ? __fget+0x1fe/0x360 [ 337.388324] ? lock_downgrade+0x740/0x740 [ 337.392505] ? __fget+0x225/0x360 [ 337.395975] SyS_preadv+0x15a/0x200 [ 337.399608] ? SyS_writev+0x30/0x30 [ 337.403284] ? do_syscall_64+0x4c/0x640 [ 337.407261] ? SyS_writev+0x30/0x30 [ 337.410897] do_syscall_64+0x1d5/0x640 [ 337.414792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 337.420008] RIP: 0033:0x45d5b9 [ 337.420176] xt_hashlimit: overflow, try lower: 0/0 [ 337.423199] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 337.423210] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 337.423215] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 337.423220] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 337.423226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 337.423231] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:21 executing program 4 (fault-call:7 fault-nth:17): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:21 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x4000, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000001c0)={0x2, 0x8, &(0x7f0000000180)="4823f13d7a09f8d2647e2f06a8fd5a0790f103943b243ed419ab6a57a60f167d469bfb8205e6719a5f367e8c02", {0x3342, 0x2, 0x49323159, 0x0, 0x9, 0x3, 0xb, 0x3}}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='veth1_macvtap\x00') 00:55:21 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0xd8200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={&(0x7f0000000080)="c32d5f33fb8515e2d53645a7c8af6a911ae4468810c33a0faf8b882c7e6f066a673b66b1e175844c009b344f9e695e68834cb9710c7d9cc749764c4f3e46469f4f52747791d542db4aea8c6006b06bc399c806bda8298aafd37081142ca9fdc952d2c2f03605ac70920d7d1fe409fcbda91c653e0dbb6635f7c65ad3440c4485d81fd6d9b71ff84e1917154e3e8009e5230da8631f96ac2648c65f7b79170f946544ff7e43bda84277fbe3efd951c2a62d4edfc026bd1c7d70278cb6a14c341f26569e2633e392bf583bc8f0d69d579014b4a87a1f4e7735035008e3ae4d467629da02c57432f77078", &(0x7f0000000180)=""/239, &(0x7f0000000280)="cdaaa6a85dc5e10e3074c802ba6d168a6afa2d077ebda5f2c899c89d57a6d0d2a5936a489ed108e48a85072997e444af8daa4e1c01f254eaf0fbd23a03d8b04eecd5478606b4f74dd8a37a96e558787c5f6b182d36257e7e46dc87cf70b9e148de3a4d796337333136a4009e694e8bafc3c1f8fce2abe8a1c01f3a18c0f3e3bd87dc0f1a917fd91ca21568c33897860e4e2ed52aca5db832d9530e2b9932", &(0x7f0000000340)="ff71d627ceae66404ecb1259fc22c31a002d82816f1443e056e8acbe50786cf4b7aca9d23f0cb0963a4f1a70ec83828cc01596e0ee0ea3c3697c40346a93de59778f75e122475c6ae485cf5cc06318096c37868a80503c6d9c91c0f84c87f94cc55e42ba965c65e349fc023159eeadea05307608609e2214167f4d145a5993597c5bf4593cd4c1b2a91f0613858e0e49edc2e8edffac90cf66d19a2d1a926c081f4d66530f7edf2987a494b2c1e3cbf466fb3fcc80ebeea2136dda91d31fd851c208f7a0fcb2f3fd5449d4125656cb0b0b998175e84c15076ceaa86619b91d", 0x7, 0x1}, 0x38) 00:55:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:21 executing program 1: ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r0, 0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000340)={0xb4, 0x7, 0x9, 0x2, 0x3}) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)="2ec3c682be88cff085e5056bf6c77c59b17781d7c844517d45e88b11762da36bc17aaca38b7534061b7fe5972c44a651cff782a12c2b7af3744e49422440d61a2e7bd72e0c82067040f4ae87068c17abd50492adc176e5b047bbfc5b2859ee8bb9c8f6ddd438bb8fce66afbbdd26f158719de0d3a21a31d411b735f88cf1bf6e834f05aa3820b48a77e585515d4fa136f4df5bbf6a9869c67216d91a470fe7e47a393d51e21ab89538f0079babd1", {0x3, 0x81, 0x20343059, 0x9, 0x5ef3, 0x5, 0xa, 0x3eec4591}}) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) [ 337.564849] xt_hashlimit: overflow, try lower: 0/0 [ 337.586684] xt_hashlimit: overflow, try lower: 0/0 00:55:21 executing program 5: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000080)=""/82, 0x52) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc0281) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x3, 0x31, 0x0, 0x8, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000100)="415d2f8bdb36d24626dfadd2ff71bdcdca7508029901c8c2874412d274110c8864417e082942abcb70cdb47795ea8f2d14e3e2706c6c2de8ee03986cb8e7e13f8a146058d808fc62ea610f9fd0942121afd6f14ec4560b5f6bf34205634a3bc17de5eebcaa6ed14017118edbd9df0ead4f4a3a9299867fdfd77e556040af3db59455ab465517e93ed35f5d1a8ead54c97b0e7b46a8bcbd546e", 0x99}) 00:55:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) [ 337.615592] xt_hashlimit: overflow, try lower: 0/0 [ 337.616720] FAULT_INJECTION: forcing a failure. [ 337.616720] name failslab, interval 1, probability 0, space 0, times 0 [ 337.643229] CPU: 1 PID: 24404 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 337.651137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.660497] Call Trace: [ 337.663097] dump_stack+0x1b2/0x283 [ 337.666729] should_fail.cold+0x10a/0x154 [ 337.670894] ? mempool_free+0x1d0/0x1d0 [ 337.674873] should_failslab+0xd6/0x130 [ 337.678875] kmem_cache_alloc+0x40/0x3c0 [ 337.682943] ? mempool_free+0x1d0/0x1d0 [ 337.687523] mempool_alloc+0x10e/0x2d0 [ 337.691416] ? remove_element.isra.0+0x1b0/0x1b0 [ 337.696189] ? _find_next_bit+0xdb/0x100 [ 337.700357] ? __lock_acquire+0x5fc/0x3f20 [ 337.704800] bio_alloc_bioset+0x41b/0x830 [ 337.708949] ? __lock_acquire+0x5fc/0x3f20 [ 337.713189] ? bvec_alloc+0x2d0/0x2d0 [ 337.716988] ? trace_hardirqs_on+0x10/0x10 [ 337.721226] bio_clone_fast+0x20/0x130 [ 337.725115] bio_split+0x69/0x250 [ 337.728569] blk_queue_split+0x52d/0x19f0 [ 337.732719] ? __lock_acquire+0x5fc/0x3f20 [ 337.736963] ? blk_recount_segments+0x540/0x540 [ 337.741642] blk_mq_make_request+0x131/0x1ad0 [ 337.746151] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 337.751780] ? blk_queue_exit+0xb3/0x1d0 [ 337.755842] ? blk_exit_rl+0x70/0x70 [ 337.759568] ? lock_downgrade+0x740/0x740 [ 337.763762] generic_make_request+0x1f6/0x850 [ 337.768780] ? blk_queue_exit+0x1d0/0x1d0 [ 337.772947] submit_bio+0x234/0x390 [ 337.776577] ? generic_make_request+0x850/0x850 [ 337.781251] ? zero_fill_bio+0x390/0x390 [ 337.785314] ? iov_iter_npages+0x17b/0x7c0 [ 337.789589] ? bio_set_pages_dirty+0x8c/0x170 [ 337.794196] blkdev_direct_IO+0x567/0xdc0 [ 337.798469] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 337.803707] generic_file_read_iter+0x234/0x21c0 [ 337.808568] ? retint_kernel+0x2d/0x2d [ 337.812495] blkdev_read_iter+0xfe/0x160 [ 337.816567] do_iter_readv_writev+0x41d/0x5f0 [ 337.821074] ? avc_policy_seqno+0x5/0x10 [ 337.825136] ? clone_verify_area+0x1e0/0x1e0 [ 337.830502] ? rw_verify_area+0xe1/0x2a0 [ 337.834561] do_iter_read+0x21d/0x5b0 [ 337.838372] vfs_readv+0xc8/0x120 [ 337.841829] ? compat_rw_copy_check_uvector+0x320/0x320 [ 337.847211] ? lock_release+0x41e/0x870 [ 337.851303] ? lock_acquire+0x170/0x3f0 [ 337.855278] ? lock_downgrade+0x740/0x740 [ 337.859461] ? __fget+0x225/0x360 [ 337.862920] SyS_preadv+0x15a/0x200 [ 337.866548] ? SyS_writev+0x30/0x30 [ 337.870176] ? do_syscall_64+0x4c/0x640 [ 337.874168] ? SyS_writev+0x30/0x30 [ 337.877795] do_syscall_64+0x1d5/0x640 [ 337.881709] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 337.886900] RIP: 0033:0x45d5b9 [ 337.890086] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 337.897796] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 337.905071] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 00:55:21 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x132, 0xc8201) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000100)={0x200, 0xd0}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000001c0)={{0x2, 0x0, @identifier="fc9b5824f73aeef654672417d7f42e92"}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x400, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f00000000c0)={0x8, 0x0, 0xfffffff8, 0x4, 0xa00}) r3 = signalfd4(r1, &(0x7f0000000240)={[0x1ff]}, 0x8, 0x80800) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000280), &(0x7f00000002c0)=0x30) 00:55:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:21 executing program 0: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000180)=0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100006, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, [], 0x36}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x40001) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x10280) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x70}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}]}, 0x4c}}, 0x80) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x44441, 0x0) ioctl$VIDIOC_S_PRIORITY(r5, 0x40045644, 0x1) [ 337.912619] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 337.919890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 337.927160] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:21 executing program 4 (fault-call:7 fault-nth:18): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = dup3(r0, r0, 0x80000) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2106e8fb321fa02535d79797194885388d067344046fc9edfca3b11f81d29e09dbd33ec758fc3aaa1d3846f9b7fcba45076087925525285acc5586928d8ad8c27f07d54fb33c9930bd52545f50d627db972677267b2e829f22d6d6c8a1f5bd07348efc6e096b2cd5452292367f01c1054f6fef31bbaa8aac278e668690dd46", 0x7f}], 0x1, &(0x7f0000000140)=[@op={0x18}, @iv={0x108, 0x117, 0x2, 0xf1, "d4f3d447a5d326fcfcc106cbfb24a28b9ff5bb13be7119f5fb25b5958f36209cf7a02c755a378bbb448e57810ea5a1e26ee643e69f0bffa901ed26cab8d5f500a4f563efd43930934ec2edf34900821b1e162a013d4781cbb1e04f03bff59662cf4f92396082edcccbad022c17bafd9ac46718b56771a1f0ac6e433997d04e5f3e7249b8d9ea8111fa758a7a102824193c0d13549ea0d86be852fa60ecc6c2a17f1bf2d089a3a9319b046fa91348116f7d4bf0d1ac0b9be1d1a1ae1c0cefced1d0b7a1821b0e503eb7fd542141b7e2a6793ca722610071c9d71c17c2934f0b0e11b565773e37add9d0bb6d6dbef29d82ea"}], 0x120, 0x407004d}, 0x8811) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) accept4$tipc(r1, &(0x7f0000000100)=@id, &(0x7f0000000080)=0x10, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) statx(r4, &(0x7f00000000c0)='./file0\x00', 0x100, 0x100, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20) 00:55:21 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) recvmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000002380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/135}, {&(0x7f0000000200)=""/154}, {&(0x7f00000002c0)=""/146}, {&(0x7f0000000380)=""/1}], 0x3, 0x0, 0x5c}, 0x41) getsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000002280), &(0x7f00000022c0)=0x4) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x6accd509, 0x7}) pipe(&(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') r5 = msgget$private(0x0, 0xc7) msgctl$MSG_STAT(r5, 0xb, &(0x7f00000025c0)=""/4096) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, r4, 0x2d440bee7672413d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="80664800", @ANYRES16=r4, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4008081}, 0x81) 00:55:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 00:55:21 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0xffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:21 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000080)={0x8, 0x80000000}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 338.090897] FAULT_INJECTION: forcing a failure. [ 338.090897] name failslab, interval 1, probability 0, space 0, times 0 [ 338.123958] CPU: 0 PID: 24449 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 338.131874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.141224] Call Trace: [ 338.143821] dump_stack+0x1b2/0x283 [ 338.147456] should_fail.cold+0x10a/0x154 [ 338.151607] ? mempool_free+0x1d0/0x1d0 [ 338.155607] should_failslab+0xd6/0x130 [ 338.159586] kmem_cache_alloc+0x40/0x3c0 [ 338.163648] ? mempool_free+0x1d0/0x1d0 [ 338.167622] mempool_alloc+0x10e/0x2d0 [ 338.171516] ? remove_element.isra.0+0x1b0/0x1b0 [ 338.176375] ? _find_next_bit+0xdb/0x100 [ 338.180440] ? retint_kernel+0x2d/0x2d [ 338.184337] bio_alloc_bioset+0x41b/0x830 [ 338.188636] ? bvec_alloc+0x2d0/0x2d0 [ 338.192443] bio_clone_fast+0x20/0x130 [ 338.196336] bio_split+0x69/0x250 [ 338.199791] blk_queue_split+0x52d/0x19f0 [ 338.203941] ? retint_kernel+0x2d/0x2d [ 338.207842] ? blk_recount_segments+0x540/0x540 [ 338.212556] blk_mq_make_request+0x131/0x1ad0 [ 338.217063] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 338.221998] ? check_preemption_disabled+0x35/0x240 [ 338.227026] ? blk_exit_rl+0x70/0x70 [ 338.230754] ? generic_make_request+0x320/0x850 [ 338.235450] generic_make_request+0x1f6/0x850 [ 338.239947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 338.244707] ? blk_queue_exit+0x1d0/0x1d0 [ 338.248858] ? check_preemption_disabled+0x35/0x240 [ 338.253885] submit_bio+0x234/0x390 [ 338.257522] ? iov_iter_npages+0x4b/0x7c0 [ 338.261698] ? generic_make_request+0x850/0x850 [ 338.266372] ? iov_iter_npages+0x17b/0x7c0 [ 338.270611] ? bio_set_pages_dirty+0x8c/0x170 [ 338.275120] blkdev_direct_IO+0x567/0xdc0 [ 338.279286] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 338.284761] ? filemap_check_errors+0x75/0x90 [ 338.289267] generic_file_read_iter+0x234/0x21c0 [ 338.294044] ? blkdev_read_iter+0x13/0x160 [ 338.298293] blkdev_read_iter+0xfe/0x160 [ 338.302371] do_iter_readv_writev+0x41d/0x5f0 [ 338.306878] ? retint_kernel+0x2d/0x2d [ 338.310770] ? clone_verify_area+0x1e0/0x1e0 [ 338.315187] ? do_iter_read+0x1b7/0x5b0 [ 338.319168] do_iter_read+0x21d/0x5b0 [ 338.322972] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 338.327723] vfs_readv+0xc8/0x120 [ 338.331157] ? compat_rw_copy_check_uvector+0x320/0x320 [ 338.336509] ? __fget+0x1fe/0x360 [ 338.339950] ? lock_acquire+0x1ec/0x3f0 [ 338.343912] ? lock_downgrade+0x740/0x740 [ 338.348063] ? __fget+0x225/0x360 [ 338.351599] SyS_preadv+0x15a/0x200 [ 338.356186] ? SyS_writev+0x30/0x30 [ 338.359810] ? SyS_clock_settime+0x1a0/0x1a0 [ 338.364400] ? do_syscall_64+0x4c/0x640 [ 338.368372] ? SyS_writev+0x30/0x30 [ 338.371989] do_syscall_64+0x1d5/0x640 [ 338.375865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 338.381047] RIP: 0033:0x45d5b9 [ 338.384390] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 00:55:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x800) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000140)=0x101) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2a) prlimit64(0xffffffffffffffff, 0x2, &(0x7f0000000080)={0xbec967ec000, 0x1}, &(0x7f00000000c0)) [ 338.392094] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 338.399344] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 338.416351] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 338.423614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 338.430892] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = dup3(r0, r0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x2, 0x16, 0x8, 0x9, 0x0, 0x3, 0x0}) 00:55:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x1000)=nil) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0xfffffffe}}, 0x18) 00:55:22 executing program 4 (fault-call:7 fault-nth:19): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:22 executing program 5: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x484f, 0x7fffffff, 0x6, 0x7}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x80000000, 0x4, 0xc0, 0x8, 0x7baaeb93, 0xa864, 0x9, 0x5, 0x8, 0x3, 0x9, 0x7, 0x5, 0x112, 0x3]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="1400000077afce0b34696e26719e34d8a2ea8b485880c10710ed80d9d0a3cf7f"], &(0x7f0000000140)=0x1c) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x14, 0x7, 0x0, 0x0, 0x0, 0x0}) 00:55:22 executing program 1: ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xfffffffffffffff1, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) 00:55:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = memfd_create(&(0x7f0000000100)='\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000140)=0x20) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000080)=""/35, 0x23, 0x20, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 338.610440] FAULT_INJECTION: forcing a failure. [ 338.610440] name failslab, interval 1, probability 0, space 0, times 0 [ 338.637925] CPU: 0 PID: 24496 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 338.645849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.655303] Call Trace: 00:55:22 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4004000000000071, 0xc0200) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x4, {0xd95, 0x9, "31a1c93b75b5d0e479b574ea9e7bce4d4b763012cd95218161482eba68a17dd463bd0189c16567ec6f09dfe4dfe447ea427d880ef2057f710cf0e01543cd2c21758963c3a64699ebfb741e97e3f6be68858e2ec28588b2b1981caca42ea60b332cbec296e850db37b3b1002039185b2ea77872931d932e05e375773130b4b06569647fcf367339bb3fc976eecc03d01d5c8bf2d26bf15517e50b6d520b49c570947cac2377d28646408233aa90780b92aa69164cc1e56cb5ea6fd927271c4d4f305f3f3ec916e973fdfdb26527ccc0fec8f3b445e5448aca355e80fe37193a9e1784bdfc4ba5ef74713201a12c3c6c5e0ed32b5848898e552bea73aa57c62426", 0x8, 0x7f, 0x0, 0x8, 0xfb, 0x3, 0x7f}}}, 0x128) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x5, 0x8, 0x0, 0x0, 0x6, 0x0}) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f00000000c0)={0x20, 0x9, 0x5, 0x4, 0x4}) [ 338.657892] dump_stack+0x1b2/0x283 [ 338.661532] should_fail.cold+0x10a/0x154 [ 338.665683] ? mempool_free+0x1d0/0x1d0 [ 338.669660] should_failslab+0xd6/0x130 [ 338.673640] kmem_cache_alloc+0x40/0x3c0 [ 338.677710] ? mempool_free+0x1d0/0x1d0 [ 338.681689] mempool_alloc+0x10e/0x2d0 [ 338.685605] ? remove_element.isra.0+0x1b0/0x1b0 [ 338.690365] ? lock_downgrade+0x740/0x740 [ 338.694532] ? retint_kernel+0x2d/0x2d [ 338.698438] bio_alloc_bioset+0x41b/0x830 [ 338.702606] ? bvec_alloc+0x2d0/0x2d0 [ 338.707117] bio_clone_fast+0x20/0x130 [ 338.711013] bio_split+0x69/0x250 [ 338.714470] blk_queue_split+0x52d/0x19f0 [ 338.718617] ? __schedule+0x893/0x1de0 [ 338.722510] ? retint_kernel+0x2d/0x2d [ 338.726409] ? blk_recount_segments+0x540/0x540 [ 338.731091] blk_mq_make_request+0x131/0x1ad0 [ 338.735593] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 338.740528] ? blk_queue_exit+0xb3/0x1d0 [ 338.744624] ? blk_exit_rl+0x70/0x70 [ 338.748346] ? lock_downgrade+0x740/0x740 [ 338.752501] generic_make_request+0x1f6/0x850 00:55:22 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x1, 0x1}, {0xba, 0x3}, 0x3, 0x4, 0x1}) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001"], 0x64}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4c844) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x80, 0x3, 0x5, 0x6, 0x0, 0x4000001, 0x0}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000180)={0xa0, 0x0, 0x780, 0x800, 0x80000001, 0x7, 0x20, 0x0, {0x481, 0x7fffffff, 0xfffffffd}, {0x8, 0x20cb, 0x1}, {0xfff, 0x0, 0x1}, {0x7fffffff, 0xc22d}, 0x2, 0x0, 0x401, 0x2, 0x0, 0x9, 0x6, 0x101, 0xcfc, 0x4, 0x3, 0x6d846be6, 0x5, 0x200, 0x3}) [ 338.757010] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 338.761780] ? blk_queue_exit+0x1d0/0x1d0 [ 338.765930] ? check_preemption_disabled+0x35/0x240 [ 338.770971] submit_bio+0x234/0x390 [ 338.774610] ? iov_iter_npages+0x17b/0x7c0 [ 338.779638] ? generic_make_request+0x850/0x850 [ 338.784323] ? iov_iter_npages+0x17b/0x7c0 [ 338.788564] ? bio_set_pages_dirty+0x8c/0x170 [ 338.793087] blkdev_direct_IO+0x567/0xdc0 [ 338.797248] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 338.802369] ? mapping_needs_writeback+0xd4/0x110 [ 338.807213] ? filemap_check_errors+0x75/0x90 [ 338.811744] generic_file_read_iter+0x234/0x21c0 [ 338.816516] ? retint_kernel+0x2d/0x2d [ 338.820416] blkdev_read_iter+0xfe/0x160 [ 338.824483] do_iter_readv_writev+0x41d/0x5f0 [ 338.828996] ? avc_policy_seqno+0x5/0x10 [ 338.833221] ? clone_verify_area+0x1e0/0x1e0 [ 338.837662] ? rw_verify_area+0xe1/0x2a0 [ 338.841733] do_iter_read+0x21d/0x5b0 [ 338.845544] ? retint_kernel+0x2d/0x2d [ 338.849436] vfs_readv+0xc8/0x120 [ 338.852895] ? compat_rw_copy_check_uvector+0x320/0x320 [ 338.859917] ? __fget+0x1fe/0x360 [ 338.863398] ? lock_downgrade+0x740/0x740 [ 338.868021] ? __fget+0x225/0x360 [ 338.871486] SyS_preadv+0x15a/0x200 [ 338.875199] ? SyS_writev+0x30/0x30 [ 338.878833] ? SyS_clock_settime+0x1a0/0x1a0 [ 338.883236] ? do_syscall_64+0x4c/0x640 [ 338.888281] ? SyS_writev+0x30/0x30 [ 338.891913] do_syscall_64+0x1d5/0x640 [ 338.896033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 338.901739] RIP: 0033:0x45d5b9 00:55:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0xc8001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000000c0)={{0x2, 0x5, 0x4, 0x6, 'syz1\x00', 0x1}, 0x1, [0x0, 0xfff, 0x4, 0xf151, 0x100000000, 0x0, 0x7, 0x3, 0x6, 0x7a69, 0x1, 0x1, 0x4, 0x2, 0x2, 0x1, 0x1, 0x9c8, 0xc2e, 0x6, 0x49e, 0xfffffffffffffff8, 0x1, 0x9, 0x0, 0x5eb, 0x8c, 0xfff, 0x1, 0x5b, 0x7, 0x9, 0x8, 0x3c2, 0x1000, 0x1f5c, 0x0, 0xdeb, 0x5, 0x2, 0x4, 0x0, 0x9, 0x5, 0x5, 0x81, 0x0, 0x100, 0x1, 0x1, 0x2, 0x1, 0x20, 0x8, 0x7ff, 0x5, 0x1, 0x1f, 0x6, 0xcb40, 0x6, 0x9, 0x70000000, 0x0, 0x80000000, 0x2, 0x5, 0x2, 0x5, 0x401, 0x5, 0xe1d, 0x1c1, 0x896, 0x383, 0x8, 0x2, 0x100000000, 0x1ff, 0x8000, 0x5, 0xf900, 0xfffffffffffffffc, 0x5, 0x7ff, 0x2, 0x2, 0xffffffffffffffff, 0x3, 0x5, 0x7f, 0x7fff, 0xfffffffffffffff7, 0xb0e7, 0x4, 0x38a029d2, 0xff, 0x1, 0x3, 0x3, 0x9, 0x10000, 0x1406, 0xfffffffffffffff7, 0x3ff, 0x3, 0x1, 0x80000000, 0x400, 0x1f, 0x4, 0x0, 0xfffffffffffffff9, 0x7, 0x2, 0x80000001, 0x3ff, 0x800, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x3, 0xe2, 0x3, 0x9, 0x7]}) 00:55:22 executing program 2: process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000480)=""/208, 0xd0}, {&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/36, 0x24}], 0x8, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {0x20, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 338.904928] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 338.912752] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 338.920638] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 338.927914] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 338.935284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 338.943088] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:22 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x2, @raw_data="85ab3455fb50cb9a99656e908bcf2af82c8eccaa60a77b2482237ef5a4f588a01beed70b4ef875f63e1df679c1600ece459fa8b736e089b37b16969afdb3ccd2a21f5cd211dc363f39d2ed5841fb627c19aa7471262bbe856ed06bd269b9f30616751907f2f2138c1b040300fe87b747d7ffdfbe4546461782e0ea86bbb7b3c047de09a60d0c175b2da46efa63e0161a0f00d081d37eb6bc799e2b0a8b802b5a7c037c0e267d8d74ade1d7e9180d36fc7990c439ad40267e6368df1c692f87445d93fe4e03eb6b58"}) 00:55:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000075, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:22 executing program 4 (fault-call:7 fault-nth:20): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x2}}, 0x20) 00:55:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0xf001, 0x0, 0x0, 0x0, 0x0}) 00:55:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x400000000000016f, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2c02, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x264, r2, 0x70e, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_RATES={0x218, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1ff, 0x1, 0x7191, 0x5, 0x7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x81, 0xa64, 0x400, 0x7, 0x7f, 0x101, 0x5]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x50, 0x2, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, "f0f864a296ec34df070a2197b18d1955afc08edb2c8a3cf95521dfc471"}, @NL80211_TXRATE_LEGACY={0xa, 0x1, "9d0f42fcb1d8"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc2e1, 0x3, 0x20, 0x6, 0x9, 0x2, 0x3, 0x7]}}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0xe6, 0x7f, 0x0, 0x400, 0x9, 0x81]}}, @NL80211_TXRATE_HT={0x2e, 0x2, "55091b36fa98e5e3d1afdbca2d173e33a94a707badaf60977a269daaa68c769f30bb824b7f447783cfaf"}, @NL80211_TXRATE_HT={0x3c, 0x2, "933563b66870999536153697ac6a9e05cf245cad34f8dba9f6be32b1fd9e68ed785abe12b17eddb0d5299238b7b1122e6cd1fdfba3799775"}, @NL80211_TXRATE_HT={0x12, 0x2, "a4ceb9be7e1332e6d449f2c05952"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x113f, 0x7682, 0x53, 0x48, 0x4, 0x1328, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x1000, 0x1, 0x101, 0xffff, 0x1f, 0x200, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x8, 0x5, 0x7, 0x4, 0x6, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x6, 0x2, "aba5"}]}, @NL80211_BAND_2GHZ={0x20, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x1, 0x440d, 0xfffc, 0x4, 0xae, 0x1f, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x90, 0x2, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, "d77b9ec8620bca9097e70c26bba920b518131b8cfcb4a39d"}, @NL80211_TXRATE_HT={0x48, 0x2, "11ba21b6137fd9742453c31c1e4e0c65ad1f0fc2497b7b389ab1c9c5ba661bc2cfdc717dd23f4b4b9f33b20d8181512f3d6b8024a30833c4de13766e5eb79b167a5e9e65"}, @NL80211_TXRATE_HT={0x20, 0x2, "0990656982a1249d6906e25bb64786424058d519c8b04d5cca02668d"}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac0e, 0xfac0e]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x80}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x264}, 0x1, 0x0, 0x0, 0x20080000}, 0x40040) 00:55:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x2]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:22 executing program 1: mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x400}}, {@mode={'mode', 0x3d, 0xffff}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x4}}], [{@permit_directio='permit_directio'}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:22 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x80) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r1, &(0x7f0000002740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002700)={&(0x7f0000000180)={0x256c, 0x22, 0x1, 0x70bd27, 0x25dfdbfb, {0xb}, [@generic="9653d036106f0b", @generic="b3385b488be436d1ba7a25c6df7eb6584928854d595c8870924fe3eacd8f861fee0a1281a3074d51ed2c8e91e1d9d53b950594a4a63fd592532b22fe0f35ecd7c8b6e1c1e8dcf0809f7276acee8b344404a1500ddaef744169b1339034be91e5316cd984c57402d412fb0baf918d081c7e8b32b9a617ad87735fa863e7d804db2bed4d88adced9b13ba7223fdfe37f0515dab89c72f4d4737110926c46d2b00bbcf6a10d0e4f8e094f03be8052f6f48daddb3cf8ea6561a4a6800279b584d4f6231c5cedb7eb78067c3ad9063d7e2be7030e98f31bc97c5b2b8a2e4b611fd38449b10dce20c69e", @nested={0xc, 0x60, 0x0, 0x1, [@typed={0x4, 0x1f}, @typed={0x4, 0x3c}]}, @typed={0x8, 0x37, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x1126, 0x4c, 0x0, 0x1, [@generic="573dfad8dfb71245d277e9b345d3a0d90fadfc03f2a2da77481233e44cebb9994ea3279f0207b9a0c9ef6e0ea68bdb56326f36497a9eb36904626065188962f23fe4d903632da7cf38cd626bcd198850640b7b8fe3c289864392407645196b24bfa6fedf0ddf4b9d4815159c34768f2553b337fd91d4f924d9dbbce6d387666776a14407629f1eb2f760a1645d3f15f846eadcb5d796f62f73658c2302cb0ef546ed10e5a78c752dde2c23149126776059d502dce4999e2c0a57206aac17eefefa1b41d3cb13af733a2ed0048ba961f7914647d8ca8a00e4a5d3d743ab89539aefbee4224139b7baf6fd27a4f64d057c624386d138f9421cc81b5892971cf509aa1ecfc43f26208e0f8cee04a2f670616efb7640cc892977374e2a5e83ceaaa870637e321361aeb4132fc56b4094779dcf1f5ea1c4c8e7385722399694f4e537dea301852c646b42ef24506b77992c6a3f91d20691f40f81a47463680072c0c726f65fa7b2e1d2be721a5af6570701481440467156b9ced6d18c19b7ec42507e9a951ce8302108b7b5bf0c29c0584cdb694bb33f131231acbb14de2c9716e52ca5ce5d3c5e3b7dcf334f9179708b79ddcff829b807e76b59ade442fecd2e986c34cd47136e51e071dc1614170bb9263d8d036a44924b65a668c7dcac408493c75936ecc8db433f85b89bf6f39f98413f13f63a1ffc477735e5de01363cea69cef8bd6e11ff845a61ef4d650a9f663dbca842f0290fdea4124bfa0dcec1a00f5e2b3a8b48f28be42b663a9c5ba74f6761ae76c403f019adcefa2f9c790948889a30cabb7df6df4c32833c96d703850ae8e6abbf13481e4a0d8fc44d8d72199d84a73a69b2bda439e1f98d28a83ca04ccf7523f9514a8d591ad1a6ffa6e211a050ec3cdf4978105a98c6409ac042c79883edd0de9687e38a0d1a162425b2224a8cc0434e176dbbe1697a1e7fac461f674a38215e41fee7c1c06173c6d693dcaf3984ced736985384b46ec28076745c53ec1f6ccad8e76876b94c99fce79f72219cdfd10bcde4b0fe5d07092c39eb567cdab135ebc45ed173b3ea45bff9bfae8e872d23dbe2ac7275556209f3935cb44ac3a3fb9a52aa9eb065b910b711228e6437d7e916bb3cbf52de401cfe99772298a1a4731355d2f2708afe3d7e47e5fbea561f9399053da8d3a4cc21d393c70ec5eadeb79bf37739fb154edcce2ef4f98fb406b66ffe3969ac5a9a7ec9f083e27a0c801d7b353be61b713024ecab76e648bc32f3550db3f9426c499612403b59af706f4adda3126048b1ba00d62fb428ff7626ef560bfaf2267a326b829bbfdf8c8a1e924ae00c7d3c86dede86801f06e68e4197c81122d0a634dbbb6a1dde9525c479ca3f2ef066295641877a6db8c5dbee813b55fbf9ef202c7958c2bd40eb4e8be893111ee0155db971e536c350d18222a90f714affdba0a7037cbe3084398c5d8056dce2c918cc223aa408c0c1f5207e90ea0e09a48b0f8c7bcd28c3cb49cbf23b422ea807a266baa61dc83f1d0beaf2d7913bee9912782826f5311de0263afd4d5ab3964db4deb983cd580f7e30dcbea84cc89b78d19beb62b4e76d9531b537f6f7df7fdddd7bf755a74c8a919340a6470b656dc1201282accc8094fbde48f732f7f7462661c73c9be60f1b88c4f4e03b2bc7d4825e92cbee51d8dab4be10e621e5029e294500b63f7ff8f4b55c6434c488440784455e36140786c3206bd65cb13ae9129e7bea77dadb624d2f7ee511005914b83e4afff096dc48bc355048c9be5fd2dcde84fd3a429d7d75e08a780ece36aa7fd9c17fd8d7f1927de2b71bbb4307516f32c19c011bc953520c3473102b578c75364ecd3ae5bb1a7d1d15e13fea5bc3f5711a455b2678b5c735ede6abc3460f135905ff6dc3d256b49699e69b27c3569abf0cc5626de5eef1cc6eae6821283c5f08c30a41c27660b4c3c8f380b9439f7339283654fc1ac50afbfa698d200db21c3f2fbcbc145440c4ad2a35e5195a60386031ab10c02a13658fe534678accfc34effa05935e6f7ad72a4dafd297d61e3e0e7e73e1a8bc80cdd34473179c91e43b08d59f9a3408707bd73069e4513fbe80eea0b78f5a00b3fda96927085007489d0be0e8340eed1b9ea6deef555bdefc261887fcb9f16d0bfce535c66eb8146acccf05ff2fa5c4393c546c1496a11817b6fc16485eb65e71b184c9455d520c187340d8f678bd85e731e732f8eddb6b867cdb5fa50ec25f28d342f803627a4056bce59246beb3e835f5b38378ce3fd565ef28b6bf7153fa95a78518bb90ab990d557660b3c9df2c15732b58cc2ebefe0b0678d5e544e5cb3722a9e347846bc84d44ff48b5b22225dd9153c7eca4d04fb5babea5e962d9dd945dd0971c0c765548f94ad85ad105f248f38bcae381c23d624ae8cdb48961b67ef807060c581f60719610a96ad6958f2a16fe897b690e7c11c11983cdf5428092020f17d7b0f0b7ac7fa10023635bda94aedbf1605aff474e6ffed31d841b1e08a4629bbe2a8023b27f84ab53ea0bc947c0bbf51ce854bab29411d0bb3eaf9eb9ee99b8a1d91ee5209bfc5b4d5c653d21921c5a25f7983c1fb7ef2b50d1531fd316b0cd43f946f023c4c7da503beb0a1c5e238ac1c1c14c1c3541e3cc895c315d15802c924605e9543fb1a88f9663e577785ea1d3ff98fc093f171361ce93327f22a89e69f8864b734155450fcbff004854378a2332df2ebebe5e44a3db2ad7ed127e3973b0ebdf620ebfbe13ad3530912af7b73344d0ccf00806103bc8b6f4e41462393305aafe9d6b0df20e77ffc26b42c0fb87c59bbfd4abbf47fe67f05b99251068179b77c19850f1d640e14983453f2c44fcf10a50ef0db14c11e38e6e3f24941059eb26fc7b3d6904667cf395f532f2116e55019f61c1fef88cfba78c961b042e0cb97a38f6bb69b16bef461f19901f029df218dc660f3cb4eaa75c193bcbfc446375ffe0d92a98d85f5fbe6fbd79f49f229fd743163c4bc39442a9f6070194eaf979d52c19ec3b4012724e956eb28294c2335f1ca05056f90745f5d597fb42a4ff260bb07049180d8b1e547a636755a08c45630cc84fa1fa53d22a28d38a4c3bec9d7236eba451a40357c460cda096f608b28551cf8bc57e3066a8cbd71742b247deddde226668bada1af4cc680f6d2e67f103b6051640f337f44237e41425077ff38ee803d3f374f9208ccdececedfc0ce7eb2c7b57f6da3919bedde015d748517346534a3ae50b1d17d6d662cbef78921b298846640b1e8dc832728efd39fe698eb67336726a69ce228ad1a295a57f981b358bfa103f36a6ad70d92129a8f6b28daac55c07105f184582f1c816bd5c9e62bd4d4fd8feb55d7b7dc6142015b2c9a3c28ac29be79fada00cf0b7c2f7b0d34d3488c02bbcf67fc1100784076b236de11980b89daba3566d831667b356679c97632a68607569dedf3e279114349899d23587d18f2af2363edd4787f6150efdaeea8e6c2d871d2d5f8822754dcd293d0e9cd99081345415934b1f4336b916b2dfdbe71e3a79ca886d4d73ef10aed727ee3c76f85a5b50be36f58a8b1c9f49395f224ca76218965024f879e06b2660acf8c74d3b3a1509886e4a5007d7cd0a8d2140375b514a20d3d40bbaebc404227d3d1ac7f454571a958c8a9eb44ff8c1c4054d8b1ef5b968d0bf7d24f7b3fdbd1b0fdccedbebe67f18f030b6194d6da5e7bdde99d20d532142a6b4c2165c271648c45f388bb9dc6532501173f906328308ca42244bc193749a552da20cbbf0046a4d862b4429dd27e6c5e12a98a30a081686be7f8ff452954bb286bee264f8b9dd9b773d550038d5c89c4ffca186b3573771154cc31d53be34df35e4491be10e88d2da047aa76d99907bf4f7d4f8e28f5c9d2a3d29e67b3b9a0a68e21b85dab83dbd904c31374705e8dde8b1da44b03a1c8bfa05c59a55af22e95fc815d8578ce7ac950ef1f8061bee1484c51a77622f13314997d900b9466f30392168498a14e96a00639dc30b253bc8a073ca58f36c1480f31fdd34478e0fd7c36eb2da5778b453ed515e116ab3895d8d6a11e4af0aa4063b5725d1c62099d7cd11ccf096be182e1028d4b7187138187d168d06d5b932714da69d97d7692d65c39f7033059c11bf3d7896b52b62972526d038b23b881f9fd8813b836084d5569f0253409abc96c04b1a86a0536adbcea44ed59fc0961c9ae8c61553b695504663631db6397dfaf9fbd8e7abbc015f40d0eca640ccb45cbc5b9a30379dec5ba08379ff401c4f71751de2dbd58ad1a81e21d09672ed774fa0e8f8aca6a026e4270579c50fdd4a0d5212cc94ef8c8beeff30e6bf2ae6543ad13b023b7816347a7736fa13e7a0a03daf0bd9190d55ced9bb507d5721603cf3c5521e9d168d9492883c9084782f1a5a51f7ec7a388405c504624f8b522391d7d7a095b376a8bad781d76dd637455c026c5476913bda4e8ee427d4e999fa24e059656c7a1fd8ec4544d368db922952f74d3841faf4b26cf6b70377ee69f4caa15f4a5c6e501efb2214491d83366f5797fb6eb46c22037874050db850c1e5817a745a1e28dac296118f90baabfdb6095b7bd3747ff1b8e9e661b95c6a4f3a42483d1e479a7b2056568ce3dca897443601e2e79fc40d5e84b23ccb1b1c094932d630f5add62d6bd6842fdc03348f2bcb12c6dd3df9e57b69c33324a7ff786614bc229ed6e9e7aec16a23e47901a0386e2714d6b5a9a912a6b06f6e0af3f577fd3d68ed35c09448f0d9429d6c0332d99dfa84118355e51b76717a3917d435b34ca55556bc86cfe7a7ee24cd7727e3de0a3d6de5918dba9196ce5c47f1e53867598e4b042d774b814a7ec8058f1e73ade38ee0bc0330854413b4e6b89dc1ceff3dd3ea6d15754182c144b926b55245e1a91d8fb1a96dd804a859af7f5a023240145ed352938633429c4f4117d9a8e780feb08b9d2ed6404cfbaf8ea61ec180b6e87aa821710b565ae64ea900298f6feb4c0186b5b4fdc5deb77b7c5c1c8ee41f64d6da632323249233db513f1e5bb7c6dff3224a7b4d2a9747a4287db2a2f5254766fb8df391b07accaf2697415e38f6610eb8fa8681a5e80e023a108abace54942b83af06ed47966d4733e86d4b0f45e9735b4bc80a4b66f10efa1334def1a9293ee27dbe29f60b009e77f3fe26b180c09fb821ebac125bd5a61f0a8ca10e3818dc786f2109a3ee0c0e04575ad985d8a50999251d3bcd195b05ce455db17eb0a1a8e0ff5a1abe19d69cf0763c16f0e85a8fcad6e74efa4648c6a609b10875d6b880bd24651f1692dc2a301d5592488f4381b24ae4cf6181d18076150072a30b605716f7174dae2c913f82f781b1ead3ae35b3ea1c65bdc3519d5121ef9384398dab4ce223051bc000ccc59ae052fe3bb75f448ed045269c0639e80a8fe0413940534d40735610c0a9d634e329af59fe80c33a6f0ce54a99612d68830190987a3e9e2cff9401a1fc3e9ae517b921fe045577132373144bcb48a9124e057694421b19680822f57621eb20ebfe48c309bcbcf01c2076a3a55fce33c31ef3778dc63ce33d8e0ad25bd4c6f98a980c2cd97d5f2db22e19ca1b4a9e7b7c0f4a4f5083160df6cee6b284bdf29da33a49908b1cab25ba64544035358b51d5074a71ca3d8eafe5875db735a1356c931d3094e67f1426664eb21fb1ad61387122038ef9a11d8f85e0c12f50ab0099860634731f869a411419289c91c2e177f820b84fb027a698a2c9605de87f070ac4077335742d571c5c", @typed={0x8, 0x66, 0x0, 0x0, @uid=r3}, @generic="3ed2b943f074c760c303c7744f681138c2637356aebec23cd6a03116be9e3a9eaf9b0ed68b9e72e7ce73196ac2", @typed={0xaa, 0x60, 0x0, 0x0, @binary="1d731427f93286b3c4fbd6ca29c952404ac5bdefc6cc5ba8463877f071805c135c6240621eda1918a941ebe5605e0ad9afb27a485cdf9e3ba9c4a7e6906e6de93ff68af586130d77806917309f4e7c18e4f4ae126de73cae9dcf9b1696079762e00ed2f9542d55c20f4cb3017d99c3cfb1bf0be69e82010c99d5657fc42552f8c8a9f568f8aeea8cd44d947b89a8583bf739f53677367f142f0d70d78c5c6dfcfab10161dd9d"}, @generic="e7994c3f86abd78c1533e7068c115b22959a09a39264d22dd59487a209b90fc9e363018e2c", @typed={0x1c, 0x46, 0x0, 0x0, @binary="43b265a00cd65868749395d397d846b4f5330c612c57c3ff"}]}, @nested={0x1295, 0x4d, 0x0, 0x1, [@generic="50ffd012a25044cb709505f960ce0d126e1868e785af62790541bb091e845094eb0fb536a019aa53c95995edb069cdf578d189be21eafc3d9de3ee296763b0dd2e1516b572f4081be165d7c98081fac0734a28e2dc13f11519a659cee932533e126952490cab68fc5f8d742f6c8c50791d08d0a457e8d64ff8e7d71cb4cf260667e4275ed642df9c37d088e83cca7b61fb0afaa463005b898131a526b2a2c38c0643b6c99f2e1189b91ae38b13303c8aa538d46485c253e512161db9ee89dc755074763efc7be61ec2004bf2086baf49ab134d9c9676464ab4", @typed={0xc, 0x31, 0x0, 0x0, @u64=0x1}, @generic="030fd31a94bdaf5aabfad3cd27d3f200e0382f66332ca027c2dc58a072b8e5a095de1d73304aeb7bc12ae22ed7f21ac5143de58947999b563aa0c99fd6406504bed093d4b9a523d219aaf6c768160630361ec7276c2f168025cdf7759bb084b26142d125dd127fe0548dc2b8aec1fed8ecf17ab381733746ffac06dd4456646c17beaffeafe758a2ca397e2cc410bcefb4918a666a91c749bc8ab847e029a89951", @generic="c54210a8cf4467b04c8577c713dec3dd88d97c7311d4024fd7a2652654382089ff3ba31352e03636a8eb9a29b585685d914db4858765035c17b5c4d6289f8d0bdd81e94adcbdc1a038168ba9405b001999d57f61e2171f1f9e86ab348f96b968ecc214430e8450e5a6ae091da265ec7132e042f595d0e16d19665a9dd86d4d624d39b9b182e471f3aa154a4a72c3b4b1fad353a58b8b0e4530651e3f906b4116c6022c856e7e532e3fe217be6c3264", @generic="7e69870edd0329956ec92fdf8b00ba063f3a1b0d2fa6676c271b84cedcab75dce39282a5d28e2944c7f838bafe8c2299db1ecbae0f7fe285116d8b9b0f44e9be9c8f42e3e4d2f61ea5a99f1d5f80df3b", @typed={0x8, 0x1a, 0x0, 0x0, @uid=r4}, @typed={0x1004, 0x4e, 0x0, 0x0, @binary="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"}]}, @generic="160bad27587a717ecb3d2619de25f504c4a7d2637ea0feac405d85fb1ade4ce48c3c079d61d6c96047e62b8872ef4bc556abf524d241b553a0209d7eac726d59161dfe20db5900690bffe0e2b97f0bc403ab1f7c5786d1158b82967c5bf8e1744b3deb6e373c8cefa0de137a422d9b582a44c1407e94a300f2a6", @typed={0x4, 0x27}, @nested={0x18, 0x32, 0x0, 0x1, [@typed={0x14, 0x49, 0x0, 0x0, @ipv6=@loopback}]}]}, 0x256c}}, 0x0) 00:55:22 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x8000) [ 339.266878] FAULT_INJECTION: forcing a failure. [ 339.266878] name failslab, interval 1, probability 0, space 0, times 0 00:55:22 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001180)='/dev/bus/usb/00#/00#\x00', 0xa, 0xc8201) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x80001, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0x400, 0xffff, 0x1, 0x6, "966fc9eb4851cd21b185a9988100f714faf802", 0x5, 0x696}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000001140)='/dev/snd/pcmC#D#c\x00', 0x132e, 0x72000) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001100)={0x0, 0x10, 0x0, 0x1, 0x1000, 0xfffffffd, &(0x7f0000000100)="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"}) [ 339.326942] CPU: 0 PID: 24563 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 339.335232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.344590] Call Trace: [ 339.347183] dump_stack+0x1b2/0x283 [ 339.350849] should_fail.cold+0x10a/0x154 [ 339.355006] ? mempool_free+0x1d0/0x1d0 [ 339.358988] should_failslab+0xd6/0x130 [ 339.362979] kmem_cache_alloc+0x40/0x3c0 [ 339.367052] ? mempool_free+0x1d0/0x1d0 [ 339.371032] mempool_alloc+0x10e/0x2d0 [ 339.374945] ? mempool_free+0x1d0/0x1d0 [ 339.378978] ? remove_element.isra.0+0x1b0/0x1b0 [ 339.383760] ? remove_element.isra.0+0x1b0/0x1b0 [ 339.388522] ? blk_queue_exit+0x1d0/0x1d0 [ 339.392683] bvec_alloc+0xcc/0x2d0 [ 339.396231] bio_alloc_bioset+0x585/0x830 [ 339.400390] ? bvec_alloc+0x2d0/0x2d0 [ 339.404194] ? iov_iter_npages+0x17b/0x7c0 [ 339.408436] blkdev_direct_IO+0x58f/0xdc0 [ 339.412599] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 339.417718] ? mapping_needs_writeback+0xd4/0x110 [ 339.422571] ? filemap_check_errors+0x75/0x90 [ 339.427075] generic_file_read_iter+0x234/0x21c0 [ 339.431850] ? retint_kernel+0x2d/0x2d [ 339.435769] blkdev_read_iter+0xfe/0x160 [ 339.441062] do_iter_readv_writev+0x41d/0x5f0 [ 339.445561] ? avc_policy_seqno+0x5/0x10 [ 339.450320] ? clone_verify_area+0x1e0/0x1e0 [ 339.454735] ? rw_verify_area+0xe1/0x2a0 [ 339.458826] do_iter_read+0x21d/0x5b0 [ 339.462628] vfs_readv+0xc8/0x120 [ 339.466083] ? compat_rw_copy_check_uvector+0x320/0x320 [ 339.471442] ? SyS_write+0x1b7/0x210 00:55:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x208000) syz_open_dev$ttys(0xc, 0x2, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0xf000, 0x10e000}) [ 339.475770] ? __fget+0x1fe/0x360 [ 339.479229] ? lock_acquire+0x170/0x3f0 [ 339.483211] ? lock_downgrade+0x740/0x740 [ 339.487372] ? __fget+0x225/0x360 [ 339.490840] SyS_preadv+0x15a/0x200 [ 339.494478] ? SyS_writev+0x30/0x30 [ 339.498106] ? SyS_clock_settime+0x1a0/0x1a0 [ 339.502512] ? do_syscall_64+0x4c/0x640 [ 339.506487] ? SyS_writev+0x30/0x30 [ 339.510205] do_syscall_64+0x1d5/0x640 [ 339.514108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 339.519298] RIP: 0033:0x45d5b9 00:55:23 executing program 3: setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x401}, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x4c0201) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x500c0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) [ 339.522495] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 339.531597] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 339.538877] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 339.546151] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 339.553424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 339.560696] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:23 executing program 4 (fault-call:7 fault-nth:21): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000080)) 00:55:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) getgroups(0x9, &(0x7f00000000c0)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee00, 0x0, 0xee00]) setresgid(0x0, 0xee01, r4) 00:55:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r4) 00:55:23 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8340) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x1801, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000200)="092cc8664dbfbbc985c216435f21a005997835bbeb7ba87af0bcc6e20b15ef20d589b8832916e48f1c02f5cb7e83f6162ad2e96509a05150bf7b44ae4168f20df6b3149eabf82300e4fe02c6ae", 0x4d}, {&(0x7f00000003c0)="b696966283edfe5216f6a91fb8d71648449478c9d4b0cdf197f347c27022cae24b59a04734172b45cbe216c811", 0x2d}, {&(0x7f0000001580)="c3ce444839943a87aa2cd33ddd3d1ef46ad4164efca50cf921bbf3afc0", 0x1d}, {&(0x7f00000016c0)="4706774e043c40ccadb0b4b1bc86bb383371823193cb31b3f12fc124643e69b09412e33d674a84033f5dab5f29229e401cdc", 0x32}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002340)="d52e73fe807ba67f0c39ff11641ec8d41bbc396dabad9714d79c8d0dc189535d8dd19ace9b3e64efdd09a9a3c4ce451bf439a7079a4af18c52279ffdc47befb7bedbd56e2acc270ebe0ee05ac59594f116ad79c1b690c24764a40b487c48102292de2c44c01f6ced6376fac9aa4d517f3cc2e7d2098f8d8af6ac476da1c48ced46157cdc441eac7d04a0a87151104e3c70879f0ee0d4f033d9a49124243f8f80b31bbcf5b23e04f97a00886925ca628b4f3e138269b6c194c5845b7f0259f509cfdf139daed41461f99ec421518cf354ed58dd8868a7133f42045a1bd6139aad115f9d82c3a049bc0d0be26df5cbeedd9f4b8f81614a4bdb4d793f08199f75c98b1820aef14952a87acbca182f90f1cad0c925bae90e8b0607421ebd47ac85b928c56ad4f59d2631c04823a9b55b948b2328ca7501ef3a4ec602d5f473803a102df034a6b758cf1e3c6668734117c73239812be0e6f5b7f00e9861a8c41b9b354a4e4899dda77bfb6502d2a69f65c75f1e0dc0eccc6052b7f7614db0f0f9a1753741964ed9c0b1fbb60acc028d9644b39307a493ab0121854234d7756780e1ddabc79b802d8872054b073c459e0760eccb055839abee7faf3e71171956c23ddec843996e1301eeb85838c60b5d9c4ff82ecbe3d358862d010af2c8565267e4500dc22a0b34c50309ed3ef56d89e6eeae89cb44f1fa7c4114b367bbcc647b845039c1dc190f84d5ca3760ca437841705213140f444a49178e2f678fd6bed6e3053c855be442009fb58821535c4493171b10dcbc2f54e5541a05f93598ef19f2d2280c399e96b32e03039fe75c2dd4fc0980385cb2610c30f570c560f85697549d61ad7fac5c8d74c3290da9c6c78df0b6f183bbf44675bb5398f20f932ff3c25531b9dc5c2b31502fc1a005117e351596afdf493199ca4d03235608917d7c4d028f6875ce60d210df94228e9d0bfb71f88a24885210f0d0d6a95750b88eaf29f3cbf84a195918dce326393ac266a74279a0b016a3fea18be5649fa567d0ea8a960eaaa728f1040431a1b3641a67a1a355d7add10ae025f9ddae7f621aac1967a2c945c1f630fe76bb143cd1e197c607d48f4c4445d0d0189a4e93e0cc9d6d4a403227b1be195eaa112cf488e163b12bd05d1a0dc48b563fe2b9e33d296fde41287bae5e80d09da26225e7662b63ddf7921db88d9ae9e28e7b7d43a800fba39d8821a0e64dfcb4b5abc13bdd8f8948622466876769bae7937c0648cbf1724c46187b5b58b1926da67c9cbc9cc5eec37ee67dfc2edd4b667f173197957891b8464386e385008a68e88a", 0x3a8}], 0x1}}], 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0946a34bfbd88e93642baeb84e0fed51ea336689", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e20, 0x3, @empty, 0x7}}}, 0x84) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x300, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) 00:55:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x48201) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0xffff, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000140)={0x0, 0x1}) [ 339.787009] FAULT_INJECTION: forcing a failure. [ 339.787009] name failslab, interval 1, probability 0, space 0, times 0 [ 339.845711] CPU: 1 PID: 24622 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 339.853662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.863013] Call Trace: [ 339.865632] dump_stack+0x1b2/0x283 [ 339.869274] should_fail.cold+0x10a/0x154 [ 339.873428] ? mempool_free+0x1d0/0x1d0 [ 339.877398] should_failslab+0xd6/0x130 [ 339.881378] kmem_cache_alloc+0x40/0x3c0 [ 339.886224] ? mempool_free+0x1d0/0x1d0 [ 339.890199] mempool_alloc+0x10e/0x2d0 [ 339.894088] ? mempool_free+0x1d0/0x1d0 [ 339.898083] ? remove_element.isra.0+0x1b0/0x1b0 [ 339.902837] ? remove_element.isra.0+0x1b0/0x1b0 [ 339.907601] ? blk_queue_exit+0x1d0/0x1d0 [ 339.911752] bvec_alloc+0xcc/0x2d0 [ 339.915298] bio_alloc_bioset+0x585/0x830 [ 339.919446] ? bvec_alloc+0x2d0/0x2d0 [ 339.923243] ? iov_iter_npages+0x17b/0x7c0 [ 339.927483] ? bio_set_pages_dirty+0x8c/0x170 [ 339.931979] blkdev_direct_IO+0x58f/0xdc0 [ 339.936136] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 339.941268] ? unwind_next_frame+0xe54/0x17d0 [ 339.945774] ? trace_hardirqs_on+0x10/0x10 [ 339.950017] ? mapping_needs_writeback+0xd4/0x110 [ 339.954862] ? filemap_check_errors+0x75/0x90 [ 339.959367] generic_file_read_iter+0x234/0x21c0 [ 339.964133] ? __might_fault+0x104/0x1b0 [ 339.968204] blkdev_read_iter+0xfe/0x160 [ 339.972274] do_iter_readv_writev+0x41d/0x5f0 [ 339.976780] ? avc_policy_seqno+0x5/0x10 [ 339.980839] ? clone_verify_area+0x1e0/0x1e0 [ 339.985283] ? rw_verify_area+0xe1/0x2a0 [ 339.989341] do_iter_read+0x21d/0x5b0 [ 339.993153] vfs_readv+0xc8/0x120 [ 339.996612] ? compat_rw_copy_check_uvector+0x320/0x320 [ 340.001978] ? SyS_write+0x1b7/0x210 [ 340.005702] ? __fget+0x1fe/0x360 [ 340.009167] ? lock_acquire+0x170/0x3f0 [ 340.013175] ? lock_downgrade+0x740/0x740 [ 340.017330] ? __fget+0x225/0x360 [ 340.020793] SyS_preadv+0x15a/0x200 [ 340.024448] ? SyS_writev+0x30/0x30 [ 340.028077] ? SyS_clock_settime+0x1a0/0x1a0 [ 340.033446] ? do_syscall_64+0x4c/0x640 [ 340.037415] ? SyS_writev+0x30/0x30 [ 340.041039] do_syscall_64+0x1d5/0x640 [ 340.044928] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 340.050115] RIP: 0033:0x45d5b9 [ 340.053334] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 340.061046] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 340.068315] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 340.075590] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 340.082866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 340.090135] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket(0x22, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r2, r3) setresgid(r3, 0xee01, 0xee01) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f00000000c0)={0x9, 0x4, 0x83, 0x4, 0x0, 0x9, 0xc}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) 00:55:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x5, 0x1, 0x4, 0x20, 0xfffffffa, {r1, r2/1000+60000}, {0x2, 0x0, 0x0, 0xb7, 0xe0, 0x5, "03b2f4fa"}, 0x81, 0x4, @planes=&(0x7f0000000100)={0x10001, 0x8, @mem_offset=0x9, 0xaf5a}, 0x8}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000080)=""/53) 00:55:23 executing program 4 (fault-call:7 fault-nth:22): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:23 executing program 1: open(&(0x7f0000000040)='./file0\x00', 0x40800, 0x100) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 340.289601] FAULT_INJECTION: forcing a failure. [ 340.289601] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.329977] CPU: 1 PID: 24657 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 340.337899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.347255] Call Trace: [ 340.349852] dump_stack+0x1b2/0x283 [ 340.353492] should_fail.cold+0x10a/0x154 [ 340.357642] __alloc_pages_nodemask+0x22c/0x2720 [ 340.362409] ? trace_hardirqs_on+0x10/0x10 [ 340.366653] ? kvm_clock_read+0x1f/0x30 [ 340.370629] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 340.375467] ? __lock_acquire+0x5fc/0x3f20 [ 340.379709] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 340.384494] ? memcg_hotplug_cpu_dead+0x50/0x50 [ 340.389160] ? lock_downgrade+0x740/0x740 [ 340.393331] ? get_mem_cgroup_from_mm+0x112/0x360 [ 340.398184] alloc_pages_current+0x155/0x260 [ 340.402588] ? mem_cgroup_try_charge+0x2db/0x840 [ 340.407381] pte_alloc_one+0x15/0x100 [ 340.411183] do_huge_pmd_anonymous_page+0x900/0x1670 [ 340.416288] ? prep_transhuge_page+0xa0/0xa0 [ 340.420711] ? lock_downgrade+0x740/0x740 [ 340.424867] __handle_mm_fault+0x2ac4/0x4620 00:55:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x6, 0x118, 0xfa00, {{0x715a, 0xfffffc00, "2429c768647fb325409daa7e241ad7bb477e31f80256d49bf21328a701ba64a876053d65c976ff9c662d2183100c2119eccf1b2ec0d65837df382c202368762f60a151167abf334bac1572d63a98fcbf8e6ef9cc29c03e1d1bb7272e002683aaae288c7c42df6641dd95695b7e30d8cc452c75d7a12e68dd7c3eb0795b28f3ee0230fc92612d8ae5f37dc77887625ad0e90d26f1b0bf4d532593283d1211585f1fda57712552d85f1e17b986fb2210ce4f3055647fe5fd4713ede1aebd0e337c3563037d21d17a71bc950801bb25c7d423cbca09aa04849931a60eb571fd9a807dfbd33adb46f6b806cdf303326a0a02d101ca6d3e8890330085a2dfa0e9d3f5", 0x4, 0x5, 0x81, 0x6, 0x7f, 0xc7, 0xee, 0x1}, r3}}, 0x120) 00:55:23 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x1}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000180)={0x1, "e0"}, 0x2) [ 340.429300] ? vm_insert_page+0x7c0/0x7c0 [ 340.433446] ? __lock_acquire+0x5fc/0x3f20 [ 340.437691] handle_mm_fault+0x306/0x7a0 [ 340.441755] __get_user_pages+0x445/0x11d0 [ 340.445997] ? follow_page_mask+0x18a0/0x18a0 [ 340.450508] ? lock_acquire+0x170/0x3f0 [ 340.454479] ? get_user_pages_unlocked+0xb4/0x2e0 [ 340.459330] get_user_pages_unlocked+0x1df/0x2e0 [ 340.464089] ? get_user_pages_locked+0x3e0/0x3e0 [ 340.468877] ? get_user_pages_fast+0x16e/0x2b0 [ 340.473462] get_user_pages_fast+0x21b/0x2b0 00:55:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 340.477869] ? kmem_cache_alloc+0x35f/0x3c0 [ 340.482202] ? __get_user_pages_fast+0x2d0/0x2d0 [ 340.486993] ? mempool_free+0x1d0/0x1d0 [ 340.490967] ? mempool_alloc+0x11b/0x2d0 [ 340.495031] iov_iter_get_pages+0x203/0xd50 [ 340.499356] ? iov_iter_zero+0xbe0/0xbe0 [ 340.503421] ? blk_queue_exit+0x1d0/0x1d0 [ 340.507580] bio_iov_iter_get_pages+0x13f/0x520 [ 340.512275] ? zero_fill_bio+0x390/0x390 [ 340.516328] ? iov_iter_npages+0x17b/0x7c0 [ 340.520585] ? bio_set_pages_dirty+0x8c/0x170 [ 340.525081] blkdev_direct_IO+0x721/0xdc0 [ 340.529239] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 340.535301] ? unwind_next_frame+0xe54/0x17d0 [ 340.539826] ? trace_hardirqs_on+0x10/0x10 [ 340.544085] ? mapping_needs_writeback+0xd4/0x110 [ 340.548930] ? filemap_check_errors+0x75/0x90 [ 340.553433] generic_file_read_iter+0x234/0x21c0 [ 340.558192] ? __might_fault+0x104/0x1b0 [ 340.562285] blkdev_read_iter+0xfe/0x160 [ 340.566351] do_iter_readv_writev+0x41d/0x5f0 [ 340.570851] ? avc_policy_seqno+0x5/0x10 [ 340.574915] ? clone_verify_area+0x1e0/0x1e0 [ 340.579327] ? rw_verify_area+0xe1/0x2a0 [ 340.583391] do_iter_read+0x21d/0x5b0 [ 340.587201] vfs_readv+0xc8/0x120 [ 340.590650] ? compat_rw_copy_check_uvector+0x320/0x320 [ 340.596018] ? SyS_write+0x1b7/0x210 [ 340.599729] ? __fget+0x1fe/0x360 [ 340.603183] ? lock_acquire+0x170/0x3f0 [ 340.607153] ? lock_downgrade+0x740/0x740 [ 340.611303] ? __fget+0x225/0x360 [ 340.614763] SyS_preadv+0x15a/0x200 [ 340.618402] ? SyS_writev+0x30/0x30 [ 340.622031] ? SyS_clock_settime+0x1a0/0x1a0 [ 340.626441] ? do_syscall_64+0x4c/0x640 [ 340.630440] ? SyS_writev+0x30/0x30 [ 340.634085] do_syscall_64+0x1d5/0x640 [ 340.637988] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 340.643178] RIP: 0033:0x45d5b9 [ 340.646363] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 340.654100] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 340.661369] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 340.669524] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 340.676814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 340.684083] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) splice(r0, &(0x7f0000000080)=0x8, r1, &(0x7f00000000c0)=0x2, 0x100000001, 0x8) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:24 executing program 4 (fault-call:7 fault-nth:23): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:24 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x282400, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000280)={"a96144abdd34b094d21ded00ca5a33311e52a146ec5a03637c79fbe74c1c", 0xffff, 0x2, 0x0, 0xffffffff, 0x2, 0x6, 0x8001, 0x0, [0x8001, 0x97, 0x8, 0x4, 0x4, 0x2, 0x6, 0x8, 0x1, 0x7, 0xffffffff, 0xf2, 0x9, 0x2, 0x3f, 0xa4d, 0x8, 0x6, 0x5]}) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000070, 0x88201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x28, 0x20, 0x200, 0x3ff, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x68, 0x0, 0x7, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @end, @generic={0x83, 0xe, "ed2d551530c450276719cb3d"}, @noop, @timestamp={0x44, 0x14, 0x64, 0x0, 0xe, [0x1, 0x10001, 0xeb9, 0x2]}, @generic={0x89, 0xe, "41c8873987b3bd4d1f67db79"}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x40) 00:55:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @broadcast}, 0x3, 0x4}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000100)="315eba3322eacee0e7a7df3363b9b9a77a3a90c932725f52c3933b4067044cd9dbbd81552a7378081e2aa026aaea499ef33bf4de7a9035295932940a1a527cde9382ed0f4c1a00ff32ac0bb1d2cf68fa31e96276ecca90e84091d7b780b760f708c49c987a33e8281610c9dc5b1d1a85b49d98d99d89f2a1", 0x78}, {&(0x7f00000003c0)="086de0386f91487d63dc0aee6d9c21d0cb321da81a57964ce4c9a9ac15afa79b90cd95b0c9d3e56443fcdfc64c5e01352ba2f883f89ebb3d522a36bcbfdedc57c054d63a2448c64c0ca8f09bee737f554e51ed28bf658b388c864d8bb21fc7be3b50023045128aa17a9c6d58496fc8354fad234a1df1d77994219bd8bd64e6f72df34ddadbad9c715f6f4b76a7da81a62cba4ea7ed1c35456b5e025164735a12f5a7c7e75ea3d7244d86b1c031ed343698", 0xb1}, {&(0x7f0000000480)="7fbdd2133f9983a03315b8cfc3548c0cff4583f9fbfc229ceb81b8740d39791bb9353c2ccb883f12fbf705d0a44b09ba238711882b1ffccc335bf9ffcabbe89525b18dd2d0b276187afe60c3332941c224dbea9d790791da942a57780c5b86037446cf192572b3de32d76ff52c38192bb517abb5928ed00f31cad7ea352a83bc0952cf390e5103", 0x87}, {&(0x7f0000000280)="332c4d9d191e515d0297aabff0a051b78908bacae62d2334136690104ba42546525c4d3c0308079103b158b625621f69291ab53ff0c5ade6adf1c1a13e30d0924e867a90dd935cb3a72fbf2a6434c4e8c6914f3da793d9cadf672cbe7a0dbaa75903971bbdc51a3aec", 0x69}, {&(0x7f0000000540)="d66bb3d0690aa7e149e0f05b3efe9804e39977e352961a5156c84e35f8cc2f67cf4cdc1a0ab4a256df7a63fce30980e1d1982ab2ace5906000f14d18ef704eb55620faa2d639345e04b1355d18dbbb9e7f4e8fc6963966cf07c170e233e3fc442a7e36a59f866e1d72dfb65fcfc918093dbb33c7be61935fd86497f634df653f72b310dee220c8fca1135c9e7a21a25c1fb950c3a18e6aec8b7bc4ceef67b3413a2caf69320f886bb79ed2eef5db3533b192b51a6991769b0356bf6bb176429affb94047161e8e6be41e5f9edee77b01623a11c604bae74af0ba99924bf1eda0688b8fd2c87a297213", 0xe9}, {&(0x7f0000000180)="f0f95af5e62312a04086e62677ccdba016eb101d5a6981", 0x17}, {&(0x7f0000000640)="5484447c2ba67379586874898b7a8ea55aaa128ef27bfcb89a055d2d093f18a2433d9b74b925ae8dedca408db0c21137a8f031ba27006d4378cb577973ac59d99fde07ee0d835e5acf5106bb9355b5cce0fb4662540c8266616c5eb03bc4fd2eb45f57877e42f5727d80e45e94ef7462dbfb2a71253959cbc53ba6283cec3ccc9b0c7a929ad423ff67a5526eab15ae876bd1b6c49b6e27a6419e29531449c26c4a5381b02d52a1", 0xa7}, {&(0x7f0000000700)="59b42a0f2d6539c92ddc7abd8c6fe2c60d46bc0c9376ecfd9e779d8f84d7e9f6783190af3c4356a896", 0x29}], 0x8, &(0x7f00000007c0)=[{0x50, 0x0, 0x401, "e46b06fa0c68cb5943f13ac1f4c3fe16174290643434ae9ab84a9538db9ba9fb51cc539b00ef06a7fc5cc280afd39549e3588d4b0e2f57cb2f7e"}, {0xd0, 0x10c, 0x0, "75a06cbe59d9362dc057c6923220d0f82761556eb751fe0475775461744f830b8406689a01f3d91120ccaff0f45da42228fa557943a5bcba8bfc5f5dad29db37be930b1a6a4506d5938e5a17800a27a5bd770e24da4ccdc1789fa417b9ba758e6e0843daad96d4d1dbe8d1cc2c9bfec8aa894471b5bec54c10814ee3e66f82ec22b349e244c0ecb81aaa83293c5215f29260359d0444a8905aca969c83aba9e43c4a86a5792081410d7b6e27d5c462366ed16eea175ca9890f72d0043ff8bb"}, {0xb8, 0x11, 0xfffffffd, "771c266fe6cbc8fcd07f9b7d1de92b26d38681cfe163532a0fe3ce6adc4a52452c209654221306b2664941fb1503c7c6f123b4c876edeaec17d2cd92b9dc5bf66f7d8ed5050951c1915a5ec164c60088d2ef0546f70210185aaf639e7510a5b6fe3b87ec1b5fac9bf278b75b5d5a4b1d74037538d9cfc89c73aee2b82e483519a1b908c0b8cdb2ba4ba520c8720f15ac309d541c7ee1cb6c05fbee1ada7e838ad64c07ea749d8e"}, {0xd8, 0x113, 0x1, "71aa33890c4b08e413c3bc7958a1c64d2fde2cd2d7f8a519ab4fa271287c17d8378893da943487d3b21ee9a33d7fce2c7197ad1dce1d95154ce01f49be2e49470a335056fc0a91d1d68f69ca549fbefa3bd6f6bd57615f566e95f6e918ac1a14c26fa820131d69bceaa9f43248f9588c0c50afab5b20df99f2aadcb09957e5bb191e35cbbfa28b894f3fba2da5b3030948cb4b61acf93e5d8d1ddf26bec50c3054e895cf12721d1bd44c98825889fe9fe93295aa2b36beb213f9f9d650ac4fb14f"}, {0x90, 0x10d, 0x8, "db0c2ee066585b0384e8fe1f68a32dad4d21fdcb5d8605787f2d6e1f78a57f56f53267db3f63be2514a64220dabd4ded1f50f5d8ec4b9b8bf5f9a4f6764db07f1630142c25b6ce4f56b207a18228b9807705550123fb58ba63906a04bf84f0557805b6d72e5842af39970b43acaeffebaa1cdc23e6e52c0d3b8b"}, {0x88, 0x118, 0x92, "a5321801864e03879555b6dad6eea1e0ab59e2e00bab429b2f81af03c32f445014859ab2745307c12f52858c128ff50fb7f993e7a5a78412122c1ebd15c60c91dd806b3a911176a0abe8433c1883084941873e9a5d26342a2422417f663c2957c4cf60980f429db6516a82ad7f5c8521b813f9"}, {0x58, 0x113, 0x9, "a32aee8eceb5fc83eaea7da3d21f041b21d1f16ed515f23535e689a8176c48eb5c0b81d0efff79d767e31df6bb39cb44a9b62824be9ccf3e5bc2fdc506f3147437b7eba295966f"}], 0x420}}, {{&(0x7f0000000c00)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c80)="1f1e4f7b5065e1e8c8ad1ef6bb2bbc1188164bb6a9e04c63658eb2e6758374c1900503113f9bc9d9692ea6b370edcfa1aaca67231e16c7f3fc6e5a6871c0a72f3f640a6a62c6430fad58a1241d800c7d31db852557923ea1aa2c1b9c67cce4ee19cf3a470526aad290045b3f018cbdd4c8b17dbbf364325cea4c075cd040e1347d75cb62e8060a753de2fb12bedf40fedfa0f9b495ca210d3bed997aff98ffe4e37e02cc2c46ab83", 0xa8}, {&(0x7f0000000d40)="0c68d6d0646f", 0x6}, {&(0x7f0000000d80)="394d5e2e709c0f51f18f7c6fea911a57053b3e179030a6dc68d066827eeaad32a310155ca54eb548c031812b1ef3ee0ad4c670ea3ca6f55b23feda54e15fe371b0c9383213aa15b7421c4fbfd23a55d78545a8851a0842b4e28a9f74901d3eb71e7d122e09c5787c7dc0a43b3ff635c45b28364296cd69f14933a98967d325dece8c88e8295e0792ff0b78c59b4ec0dd70ce96de24109b801f400ffde246058c921c47bb140359c520763b700e9bdf45a948e8b6a6600349f4a97c1d862512e6f6051155ee6d2841242d99f8609f12ee7dd6182380914c1cd07673fa3603c4cee97d5bc15014d09df26a3922deea4c", 0xef}, {&(0x7f0000000e80)="4bd011fe1cddca141d9a9657d10a8d5b993010c50afb1c20d0634c14c061014c7a7cec85621be3cf10e8a97ca290f8b1248154a9b3af25a957a51ddc11e25dc73257db0b8bdea08400e1c42d368bc02630f297bb037a7cdb12d35237a586f32ea07c5ba98286fee5473e4ea1f0515b702f2528ec2746d0035c90e2653330ed53649cd62132c068d9cc260c2ef6af9bc20c533851073535f3ead1ad266ff51c294e86ae30511b0637c2636730e5300b1adc7040719aca1b0ee82e1c31c156f27404106833f9", 0xc5}, {&(0x7f0000000f80)="87c38659518925f6ab4d45584778cd696a0d228a365281bfdf7b839421982ff4ce44c3c7c3300445ca1492dbfabedd78a5b35e406e26952d8d0919f238ee1effe76afe640fa3ce8e66f5fc2c9a83aaaf033769d19fd730382d29346b040c88d9f59815c9d0b4c634a865c9f4e2325cc5048d5d74de8a970327626450bb728e65a837461690a6ac7ed56d4475868b779f68e360c6f962d16ba9e26e9ec86b504c3f81ec2f26ded3515d10186afb74157b5432cf68f8f68d9a88c055cec990173785db7b9098d74102b00aeb8b6af2f2e905ea19fa38ca750cac48fa2d", 0xdc}], 0x5, &(0x7f0000003980)=ANY=[@ANYBLOB="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"], 0x1f0}}, {{&(0x7f0000001300)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x80, &(0x7f0000001380), 0x0, &(0x7f00000013c0)=[{0xf8, 0x10e, 0x4, "a623b948321e7474e19e009c02e0aadfd62b9011b357649a886de3cc69f97545c7d0c92ab5eadcab6fe92206265f61ceb164ad2f859cfe64662f96ac30e12d058dc6f57757ccd8e3428c049afa9301568cd51e2e7be0c51c07aa9f404c1890cc627a319170fdda8a8ec01a20bfde854dfdaadfa2e32a64eed383e7863b4d31a96167eda29c8ec31756c332847e5e3d4db3d7b26d051a2be8d82039b02f25baec6b14387c96ad44fcc4979bd9d89a84d772f919c2305857b7431a175f0ad3daa0d67d8348008bb5df370950210887661eba386695ea22d9b4df444b89961324cd2b"}, {0x10, 0x116, 0x1}, {0xc8, 0x107, 0x3, "fcaaad4f2a55b3638244e3b5550683b8488ab51cd357d5dc69c7b60d299e16c35b4e0054eda176e4de125d609871c2005430e67db0f51a25d15e7d5b53e039a9f60564a9e46a85c4cd5fd6a6212d4e1a42cf38149b6a500aa84552676df640326f58036ea47186cc20a425a3276c86c5610ba84768525e73656651481cbf5cab4299736406395d1a923339ee07bfd03eb5b623b17cbbff7c0f41e77978d0c7659086cbd39ccf00f971a8881d2675d9db596c421d30"}], 0x1d0}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000015c0)="7602c4dbd452fdc2420730018ff90d71ce737e34631ca3d90fd631baf53390393e0775d3a2300d0fd9ca3d7384140a90ce6499b9de3e46e2c4cd8fab58bc3fbbefc3c5a0ff5eb9e523aff2c7ab26f4ed46ca48422b9f009c813c55a33782fc442c8e4b9c", 0x64}, {&(0x7f0000001640)="39d829821b076454f8ed2f9870040f6f55e651ed434288afed6561575d57d17add6ca06e77d3eb27c5dfb3b0b3ec40347d118c88b238853fecd43715fd629a70f4b322ef4cf62e628e8585e26b22d170f4054f4f505df8b0b5d8fa8c060e3244d71140de9826432f900633f96acb95659f9ac367080f7e3f63bf8a0524366d4c635492aac08d4304b93f4650b409f19420c5669e268cce90d703feec91e086f8ac8f35c0801f7dbef6d573dc4f6a946c1d82208c7efe3ad8af55f8d76c08e70429155d07db1c5d2032d6cdcb8c2a6562918d37078b265bc67795e98f8192fe77f611ea887b176df4bc519d07c16596fa93bdbd33ca3aa43fb61e9e22008545b75fa65517f67ab5054544b8432ad489e7d4415f90a0d640cae9e210084d50495bf9ebf976ba6f6aa9395d4aa3a46684fe4db32be5ff4ec5d83579ccea65af97ee83a86740eb347d68f541dabbce45ec4f8dc80bf7ccb5bde56fb8249ca5c770d1c4e2a7c5342e6f55114d4abd8c5b3f19c288075a046a84c18ae3e76ca361d1fa0e8404492bd56f55e684edd8206705a561ffbee3b468d3966b263687832362f403c536ec6b4631f433fe6f84b1f3ec2e3f15e19334e685ce071394cf88910308d123bc7ea6103274c6b715c91522bf0bb6a6d15c84eb5d459aaaa694301db030352e5d3700fdcfe4e49e0ac36bdbfe419527c5a68c087bd26bbe1678db1462593c9aeebec3c347160e299cd3861c281fc635d8100d2a0aee434cb98be65ae199c09e7fd314b4e0d0984d7ccae78c962b20c67ba5cf77af2599fc22eba302206922fda6f2902543b31f00c20f1605b03370c0fe0b786d31c195848c763b64f82528b64a27ff3109b6d39e5195a0b536c5b716cfea07bdde5cbb72a4a8145dd61d8562f77f2eef914aa13e949b59e4954f0b9b0cb781b1155b291d9aeb3abad7fa5883ef0ad9e2ca611bf108a1a9549356fa5215864a63f7e6cc2e8a7693e437c43f80f37aba781516d53a0cff9b1df6a3a2958bc58d2550953451bc39ff826e225f495091eac8ef1684e0fb5a9e21b2d1f69ccc83c4cf8da6e7e28a9ca4f1d3aad0cae846c509c771a7df9a65e2708180db5d276cbdfd9cf76b070109db6d215235233db42c6a4b3cc4111846b64bbd7326f8a60af9707b576682dcfd5de5038d3d0a4ff7bc3c6c6b773703e4503afdb327e030702c3465fad1bd23c2955cbc0fdac5d7f4852d7276054dc8b64ac44ccd668847ebfd3ffbf299e3a79ee5ea1030b1b18d8a5a726717ba0615490e995c24d0b047f6cef3c8c7c36e28f94bf1d218f773dcf7ebff1a0b9d03d86831260a64c3637abbbf97c73a19408eae6919255839a11849b5b9b9083317eb17d2d2fdf94c47dbf7e43f3aa0fabda7af606d180528a7deb79afc7b361a2129dda00528cf221d2c04fabe5e5b3dba677e7d0016b5972c8937c9f5c3c1a457663c8f901f13c0b25e1d2c4bd8ce843baf23f7e67952a498dbce7cef7263ae80d0172c9b78d7f80680c29f8aafe5e76aa54863667cf3a18330a708c9545ff5714547d85c2798b503b0db00380ed7298eb0dff8b393394e159ff334734a73236e91a9dfbe7c8345b2d5e41e901cb6c3bfd9ae112b5d0d6ce55b5ba0dd10944015ae8e2a7c1630f72c565c0109980014ddf1b94c2f037f2177a3d81c11a6e7c7867e3ffefb2442d8f57e54651cc0af8f297a13cd294c321b0e8a7aecc94d9ad96bd52e639fdfdd6f088c20079416747ad8bf0075a8f0835c44c609e77689dcde8e580193f5bc24a0345e6068b058a453b40d649778008053112805e7c4207a4d455c11d211571108acb3d39bc0dc90ef2fcef920c7545f94b32d19954261ae09913a4a41ee8a1be72f5d68f4cc84a6b46bbad09a9abdd72148986b8a8ea034c6e3c5446a1638728f6e06f576956f3b41800de939ac07f8639d4976e5c7aab5b6c4f4925079336f9676815cf1d16ab67a25776d160010b2a68367024f69cde0c8db068fface9e840512f055cb1b3477161d120b742e09533b462413996e740f3818c242f349e22a5f51e7cf0d810b77a5ea48139cbb0bff07b0e90481d893c6fc57e0c4d81af7b3bb62f988bae8bbe67e8109bb1974cf918ffc93e6926eacd17b9022ce9ad2cdc134a43b94fcb03d4d4b0787a4f2650eb3977c2c4a5f83bbf5a82b1d3e8ba2ddc3e4cecde79daeff3abadbf4c52bf86a90b321f5698c54c810a7db47a0cc1ec0a1a76fab1158d0e25c6bb1409ab859f3b2c3c6e6f8656f029fc8de485bd5c26adff54d4d9229e9eaddef2d61424481cbcf9f18a6d0eb3a571493a8bc9d7a58c0c7abc2ba76c1be962ef065e7eb79c9ccd8077144fe4b633418364a3ca3088ed808b82746068cff4fb44b6d2369f676c1400836baf81e1f7b2ae85b65eb689bc7bf57eb22244ba7459e9ee8f7baf586823140fe451c4358f42fe5379427d1183e51b2dd9508949d8f5686d605f2f03627639816be9965ca7cfcfc2d0f33372fa5c6bee65894f02b6fc0af6c496efd9d51ee38d77c57a6a39805d3c946869f17a8e7a816d1916720334a1f233feb67d7d5f9d16f48bab0ea49d8a58f0a58650ad6d9994041fdfea3c942e967dcbc49bca21de66d789387e1acc0eac4b2d48f747d93e721264fa8bd145653d542dfd3d642bdf11d5334574a6337234b3e34549c93d47b53ec4291c7ca474361a1dc64cfb8547ad8db50b8236c9fc02bb028d903e4b30764da38cbd00ae984f11ad63ec666f9515092d1952c34159711b28e7f2ee951af0f2b318d8d5bbdaaf5459e986f942a5ca16207ebf55dfc62927a483429f619a7c25b37edad0e6e545da4aa28e1cae5d419dfe572617e57318c65ffc18fbb2d76896c89b49a4192190e3984624183e00de2f9f103653aa7d871ae3cb8dfc7b13f20a789d8b21b3df01cdce342aa16b097921a526afae630a200e718055e8a905ccbf702a26cd1c859ae4a23cc359b65d52c27d46baa7444d20b35768e167dd6c121027543c52ff7c87268a4399d271410136c86d363b2bd827114ce81b19a278cbe05f0e356841d131810692dbe2c46f571bd799659d872228a026efa25715fc326e933219a7fd75100c56881ccb6a87aee5c3fa8ce6fd2c8cc4cf098a9a65c479ee3bcba800a2343f953f6104bfd886a55e0166be4a1ee656692bff758363fec171724c682244e624a7df4110001fd8bebc0a69b22c645b99101ad3901ea830c1b206ce4c116cac555f55b7683cfc36330818ba830c42aee7efaa1202900dacc2f0644994803d88fd02ba4c33b1108af853ceae1cce101758443adfb80fbc88d2d9baeeff9516d06a7f2d84e2dc223a71a645dcd1e69cdf569e2815271fc594b2dc117ffda6b23b11c7a3213e004b6ae3d78a919dbcb03c00ef807bce284d02ae1a5d3a606aed2e0c15c7ba657aa6b96d478b6db2c2f29ac1d7075740397c687366ebb1c609cc1d9fe474c2a9c4257cd3cb97115cd5b6a9c03d454dcff609dc9a03e05fdbc24c3a80bac20c6db6797799ad33a061db72e6e822ea893a31f79dc569771de362be5500643f68eafacb117c868d0473222e479137257f7f6b4096265248c77a50b4b36d46740749ffa3cd49fecb59918d6aedb77e4758a5fd47ed38e610f1804ed6f1f331d9210b4535d7c2e37f23af745666b0a185fcdb954b8ca0abc2a98ef3b365e1a2f6c8fc665d0e26d120d106e5083f96ba7b367095a38ac13a319f70fb182dc2eee44c3d552093c441fc47d3981449460593212db9144d655c7505b3419bb1f9df23ab2d2921c6345340fce8d3650d2c8d962da31e706378ed71a23acf489d8f7403cab10696df2ae0ad96691a56fcd0e75d662a8730378cfb2fd3645c523dc04a80ef2041371b036261168b079a635bcd92ed26002f3557f8ab6908a3acb467fec5b67c0ea15ea99cf2ecbb6a84e7053753e1cff0f70d801fb896bc70a73e53e7cf424ad9e2ef7bfa5cd5ae778d31783c400e91afb41dab75ca635a33b19a72f6ef4c187e73fd4b3a4cdf4baf352d6b2f214ea47f340759452fd755e45a8b0e9fe2960cfb7dfa48bb1574c5f35f4c760c7686d794a72eb02daf7cf263815d8efc71d3637cdbd692e9e4c49bc399f01d7cf0e6dc3b01e394389b90d80121014c0041c6e23e441ca1240a81d3c358e40624aeebbae9b2049fff424081ffa3df8c4a0288f9d548e219beba4398c7aeaf2ba7893aea76ab59ab4c609b4d2b5568c474188b6675f2141f178cbd801488632d50c64f077d53e525609cd171782596892387f857ccc99c7cd3665e3c0b4e7e8b6f5605fff86714c5955ec8f6777824db79f9fdb5e57dcac91721157c631a677b99359f3844b68ce36c4a2897eaa21dec3a48bdb51b275dbaef163c3edd2aa9bd6d70198e100c4956b24820320a0435919a981c497f90b08dd649a309743bfbb2340f62014d81a45c81828fc58aa6bc82fa03b0867b51f11d7b87310a5d5148dbd64517c0bb5a04bcb3db751362c59d21e69e0c2c1212c4c7035c4b053e77e1b2d20d2d6c2dbaf4c863cd998587394a86fcfdab5207e7d8d5c0d049259a2f3a9a0780832e9d501a2c5b5e3b3ea0f5718e0ff3c6800b0a6f9ba784343351649b7e57a536447ac35770942d4fff2bd67232410be37839339838665d75a4e68542242f413b06c8303289ee85a12d8498cde29f3a071c96c78205632bc7d34d74491c28e01484e62d0ac5f8ea9561cea0dab20c8865d07f5fb9ef5472d520325e0ddb8f276ecde4407f5666482eefeb8182987323ec183f6eb5d659aef38ac6f1096ce57c581d307d10c0467cf613a0a28fe381864a4be42d0d9ea967210752cc2ef8c308a5604a990d66d7ded174cbf7c43fbb126d9644a8954f09832724489020cc5335427b60296c09f6eab22f6fb9867195780a18ea27f3bfddd8939ce4c3bf570d83c53ff936a806753dc2bcb6f7be270beae3fffa73f304112fe9fec89112ee7ef6d00191eeae9837385c356462b0abc02e87648887648b8b25f103580feca6e13cb6cd2a3dd3877aa6ef6558b6118c26b84b005fba49f134321e68cc23b4757bca147db7e072de660e68e328b638cd24b4469a770a4c1252a67ab9ea21de3b784b9fd33464852a8c25f45d55d8e72163777f2b8780cd52bcb4742a2e5a1cf1fe8923d47f54244b3522957b02fbcc8356e3224d8b0b4637f16be9693e182e192910ce9ef2711069e8d1ff1ba960a8693180cdb0879853fc8d141dbe9f65b531afd4a07da28e0f578739c521287e21cb646f7ec20c20b7425399f4265b5b7bba70f779579a8e7485326dae1e43a156b96ace0a4091ea44138db638200dffc3847c23bbaf5a0f30a6ef86335cb465b3098c7b12f21456b5b1f4724d9abd461582b8ed8ab51f7d5fc85924ab784ca296e9948c8eceb503139457c3dc79949350190ca9d6e86069d6a54f6f60bf6e4da1c469325a2f88178c1a529a41ca57c42490725b08c16dde7ad03f92a596906c642f375bb3c916ccacfb77f1daead297fd1672ae8e476bca0abbe85de208b2fc3cac2bf595baac01599776fd05d2ef5c07f5637b78186a85c14f2296ddb81a18ca2aa18ef13dfebc5064ecbe023179b74c3780904eb20106eeba34abf3f940220e38559becdfec686458f68ac49c1231eb0747cc7cbf4f2cf0fdcf59bd94d8eb4efd30cb336d74a81d2dec536500da629a29b2002e44e9af512bf26f2b0417d22f8ea6e9ca0047ef4e4a3a06ba7bece522063ecef6831b8060ac9ca6a1ad4433c7ab0ab30664dd132", 0x1000}, {&(0x7f0000002640)="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", 0x1000}, {&(0x7f0000003640)="199428de64895d5d2dddc258339bdeb3a0a01bd3a2cc88bba4bd1aea90db315a17021da77ecc1b5e78bc08e3cc93e1651d00b34418d4a4e01b5d4b074a8954e719e2539a0083f4116dabb9aac2e8ad57307ac9bdf13bd35054dca486b374bafd23c44aa5764b012c865bd56ab355a341d07d602628af785a579f1af7bed92700", 0x80}, {&(0x7f00000036c0)="ec7240d505b344e045a01fb477b37d9e2a28681dd4169851f445ebbc", 0x1c}, {&(0x7f0000003700)="7f27394bf42fd71ebfff744c59db2f3e94c42ec814baed1d6fa6e2540e21f05132cd50cf9ffe5d1570067c772eeacd39722b50b2d0", 0x35}], 0x6, &(0x7f00000037c0)=[{0xa0, 0x10a, 0x100, "cf1947dea15f6ea6bc813ead7c292a789834ee7008f19800def4837e6b42ea22780920d1b7c75675662ddacbc29ba752fcded4afea793abb8cdd948a4ddb3bab1ed0c63d5eda0cbb59a5336a90a8d1de25b1cc2f01c749299a91fa9550d9070e29ea14f62ba8a2de48f92ff01943afde368ec3078042fab687c207b8f5510cec416c1a751d792f812586ee2d"}], 0xa0}}], 0x4, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001100)={0x0}, &(0x7f0000001140)=0x8) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001240)={0x0, 0x3, 0x0, 0xfffffffa, 0x69ac, 0x3}, &(0x7f0000001280)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000012c0)={r5, 0x40, 0x1, 0x5, 0x4, 0xffffffff}, &(0x7f0000001380)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000001180)={r3, 0x3}, &(0x7f00000011c0)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff77ff, 0x0, 0x80000000]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1]}], r2, 0x1, 0x1, 0x90}}, 0x20) 00:55:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @mcast2}, {0xa, 0x4e24, 0x1, @mcast1, 0xc0000}, r1, 0x2}}, 0x48) [ 340.848456] xt_hashlimit: overflow, try lower: 0/0 [ 340.887630] xt_hashlimit: overflow, try lower: 0/0 00:55:24 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x7d, 0xfffffffffffffff9, 0x6}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x1000, 0xfe6b, 0x1, 0x7fffffff, 0x4, 0x7fff}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x0, 0x94000) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000280)=0x3f, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000200)=0xc25) openat(r3, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x18) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x512ae95e, 0x81}}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x4000) [ 340.916204] FAULT_INJECTION: forcing a failure. [ 340.916204] name failslab, interval 1, probability 0, space 0, times 0 00:55:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) clone(0x82044400, &(0x7f0000000080)="ceabbf19cc0446da265e9c3359360f6cb95499a16ea62a4994b32eba37633a07cf32939890fe643f001bee5afe9e801f6db6aa305f6450dca6935d08cd07224dd8af602303cdd91b06c8ee19b7530d360cd48344d74f817a835e468513", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="99c5db72ceeafc5b4214604291c2fa8446228d5685cdcd3c38005dbaf77aae2eabd86c29c89cd626d56445edd21a4eaf4838d526332547eb5b5fc51d1d4d5fc3616250baf20d0df9c19afae28957dcbc7910d3d379e7e4367bf7861ebf4f0959a376903800747812cee9fc9d69c28ad9d10fb7d372e95486dd94bd63ab858c7d8cb668f7827893d34ae4fbd931") ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:24 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x400) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000140)=""/70) timer_create(0x0, &(0x7f0000000000)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001]}], r3, 0x1, 0x1, 0x90}}, 0x20) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 00:55:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000040)='\\(--\x00'}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000140)={0x0, 0x2, 0x1f, 0x9, 0xc, 0x7fffffff}) fcntl$setlease(r0, 0x400, 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, {0x0, 0x0, [0x0, 0x0, 0xfffffffd]}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) [ 341.027397] CPU: 0 PID: 24697 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 341.035312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.044672] Call Trace: [ 341.047264] dump_stack+0x1b2/0x283 [ 341.050899] should_fail.cold+0x10a/0x154 [ 341.055060] should_failslab+0xd6/0x130 [ 341.059037] kmem_cache_alloc+0x28e/0x3c0 [ 341.063186] ptlock_alloc+0x1d/0x70 [ 341.066818] pte_alloc_one+0x57/0x100 [ 341.070638] do_huge_pmd_anonymous_page+0x900/0x1670 [ 341.075748] ? prep_transhuge_page+0xa0/0xa0 [ 341.080244] ? __handle_mm_fault+0x957/0x4620 [ 341.084744] __handle_mm_fault+0x2ac4/0x4620 [ 341.089180] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 341.094196] ? vm_insert_page+0x7c0/0x7c0 [ 341.098354] ? handle_mm_fault+0x22c/0x7a0 [ 341.102602] handle_mm_fault+0x306/0x7a0 [ 341.106668] __get_user_pages+0x445/0x11d0 [ 341.110906] ? follow_page_mask+0x18a0/0x18a0 [ 341.115411] ? lock_acquire+0x170/0x3f0 [ 341.119383] ? get_user_pages_unlocked+0xb4/0x2e0 [ 341.124232] get_user_pages_unlocked+0x1df/0x2e0 [ 341.129024] ? get_user_pages_locked+0x3e0/0x3e0 [ 341.133782] ? get_user_pages_fast+0x1a0/0x2b0 [ 341.138365] get_user_pages_fast+0x21b/0x2b0 [ 341.142776] ? __get_user_pages_fast+0x2d0/0x2d0 [ 341.147554] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 341.152317] iov_iter_get_pages+0x203/0xd50 [ 341.156652] ? iov_iter_zero+0xbe0/0xbe0 [ 341.161073] bio_iov_iter_get_pages+0x13f/0x520 [ 341.165764] ? zero_fill_bio+0x390/0x390 [ 341.169829] ? generic_make_request+0x50a/0x850 00:55:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000080)=0x6) [ 341.174531] blkdev_direct_IO+0x721/0xdc0 [ 341.178689] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 341.183794] ? retint_kernel+0x2d/0x2d [ 341.187696] ? touch_atime+0xce/0x250 [ 341.191504] generic_file_read_iter+0x234/0x21c0 [ 341.196270] ? retint_kernel+0x2d/0x2d [ 341.200169] blkdev_read_iter+0xfe/0x160 [ 341.204235] do_iter_readv_writev+0x41d/0x5f0 [ 341.208738] ? avc_policy_seqno+0x5/0x10 [ 341.212798] ? clone_verify_area+0x1e0/0x1e0 [ 341.217210] ? rw_verify_area+0xe1/0x2a0 [ 341.221270] do_iter_read+0x21d/0x5b0 00:55:24 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x80, 0x1, 0xfffc, 0x2, 0x0, 0x0, 0x0}) socket(0x79, 0x3, 0x3) 00:55:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x17, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x3, 0x7, 0x8001, 0x206, 0x1, 0x1, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000001c0)={0xfffffff, 0x7, 0x5, r5, 0x0, &(0x7f0000000180)={0x9a0920, 0x0, [], @value64=0xfffffffffffffffa}}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 341.225084] vfs_readv+0xc8/0x120 [ 341.228541] ? compat_rw_copy_check_uvector+0x320/0x320 [ 341.233906] ? SyS_write+0x1b7/0x210 [ 341.237624] ? __fget+0x1fe/0x360 [ 341.241074] ? lock_acquire+0x170/0x3f0 [ 341.245057] ? lock_downgrade+0x740/0x740 [ 341.249210] ? __fget+0x225/0x360 [ 341.252694] SyS_preadv+0x15a/0x200 [ 341.256321] ? SyS_writev+0x30/0x30 [ 341.259951] ? do_syscall_64+0x4c/0x640 [ 341.263934] ? SyS_writev+0x30/0x30 [ 341.267594] do_syscall_64+0x1d5/0x640 [ 341.271606] entry_SYSCALL_64_after_hwframe+0x46/0xbb 00:55:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x3, 0x9, 0xc6, 0x0, 0x0, 0x1, 0x0}) [ 341.276796] RIP: 0033:0x45d5b9 [ 341.279987] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 341.287707] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 341.294975] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 341.302247] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 341.309543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 341.316819] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:24 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:25 executing program 4 (fault-call:7 fault-nth:24): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="00100000000000000300000000000000090000000000000007000000000000008100000000000000ff07000000000000d78a8f7effffff7f7d0d00000500000080000000000000000004000000000000010000000100000001800000000000003000000000000000000000000000000000000000000000000000000000000000001c000000000000000000000200"/152]) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000480)={{r4, 0x2e94a29, 0x1000000000006d75, 0x1f, 0x8, 0x2c4e, 0x43, 0x78, 0x1, 0x3a5, 0x7ff, 0x8000, 0x1eb, 0x4, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.upper\x00', &(0x7f0000000500)={0x0, 0xfb, 0x90, 0x1, 0xe9, "6b263e0dad4e8383d843612eceeeb3d3", "bbf4af3472de191787533ab9dfd04647f7847e67488c73017c0dfa8f41e32103031d3e926c9e97591833d29f531caf3a04ee009f72c3a5aa1e55594fe43d66fe2dded1e7691763928489a2eaef70d684083da9c4eafa8272ffb82ab2a4286eaeb2578a67a1fe75585d704e9e22a2003c8f0f58eb46cf55b2341649"}, 0x90, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0x142d7649}, @in6={0xa, 0x4e20, 0x5e, @local, 0x9c}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, @in6={0xa, 0x4e23, 0x8001, @private0, 0x2}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0x7, @private1, 0x12}], 0xd0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111, 0xa}}, 0x20) 00:55:25 executing program 5: recvfrom$x25(0xffffffffffffffff, &(0x7f00000000c0)=""/93, 0x5d, 0x2021, &(0x7f0000000140)={0x9, @remote={[], 0x1}}, 0x12) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0xf, 0x0, 0x0, 0x0, 0x3, 0x0}) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000080)=0x6, 0x4) 00:55:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0xa, 0x0, 0x0, 0x1, 0x0}) [ 341.629593] xt_hashlimit: overflow, try lower: 0/0 00:55:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x8, 0x1ff, 0x0, 0x0, 0xfffffffc, 0x0}) 00:55:25 executing program 2: connect(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0xfffe, {0xa, 0x4e20, 0xfff, @mcast1, 0x800000}}}, 0x80) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r1, 0x0, 0x1, 0x4}}, 0x20) [ 341.654186] FAULT_INJECTION: forcing a failure. [ 341.654186] name failslab, interval 1, probability 0, space 0, times 0 00:55:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x2c8043) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x1, 0x1, 0x1, 'queue0\x00', 0x80000001}) [ 341.726905] CPU: 1 PID: 24772 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 341.734853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.744209] Call Trace: [ 341.746802] dump_stack+0x1b2/0x283 [ 341.750529] should_fail.cold+0x10a/0x154 [ 341.754683] ? finish_task_switch+0x14d/0x610 [ 341.759186] ? mempool_free+0x1d0/0x1d0 [ 341.763162] should_failslab+0xd6/0x130 [ 341.767138] kmem_cache_alloc+0x40/0x3c0 [ 341.771201] ? mempool_free+0x1d0/0x1d0 [ 341.775175] mempool_alloc+0x10e/0x2d0 [ 341.779068] ? remove_element.isra.0+0x1b0/0x1b0 [ 341.783866] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 341.788628] ? follow_page_mask+0x161a/0x18a0 [ 341.793161] bio_alloc_bioset+0x41b/0x830 [ 341.797311] ? __lock_acquire+0x5fc/0x3f20 [ 341.801549] ? bvec_alloc+0x2d0/0x2d0 [ 341.805364] bio_clone_fast+0x20/0x130 [ 341.809258] bio_split+0x69/0x250 [ 341.812717] blk_queue_split+0x52d/0x19f0 [ 341.816874] ? blk_recount_segments+0x540/0x540 [ 341.821582] blk_mq_make_request+0x131/0x1ad0 [ 341.826080] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 341.831012] ? generic_make_request_checks+0xab4/0x19f0 [ 341.836378] ? blk_exit_rl+0x70/0x70 [ 341.840099] ? kmem_cache_alloc+0x35f/0x3c0 [ 341.844433] ? blk_rq_prep_clone+0x6c0/0x6c0 [ 341.848850] generic_make_request+0x1f6/0x850 [ 341.853353] ? iov_iter_advance+0x1c9/0xc00 [ 341.857686] ? blk_queue_exit+0x1d0/0x1d0 [ 341.861869] submit_bio+0x234/0x390 [ 341.865505] ? generic_make_request+0x850/0x850 [ 341.870176] ? zero_fill_bio+0x390/0x390 00:55:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x3, 0x3986, 0xff, 0xffff, 0x9, 0x63, 0x2c84}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 341.874253] ? iov_iter_npages+0x17b/0x7c0 [ 341.878490] ? bio_set_pages_dirty+0x8c/0x170 [ 341.882992] blkdev_direct_IO+0xb3e/0xdc0 [ 341.887152] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 341.892277] ? unwind_next_frame+0xe54/0x17d0 [ 341.896777] ? trace_hardirqs_on+0x10/0x10 [ 341.901013] ? mapping_needs_writeback+0xd4/0x110 [ 341.905856] ? filemap_check_errors+0x75/0x90 [ 341.910353] generic_file_read_iter+0x234/0x21c0 [ 341.915115] ? __might_fault+0x104/0x1b0 [ 341.919189] blkdev_read_iter+0xfe/0x160 [ 341.923261] do_iter_readv_writev+0x41d/0x5f0 00:55:25 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x1f, 0x13, 0xfffe, 0xfffe, 0x0, 0x3, 0x0}) [ 341.927788] ? avc_policy_seqno+0x5/0x10 [ 341.931871] ? clone_verify_area+0x1e0/0x1e0 [ 341.936286] ? rw_verify_area+0xe1/0x2a0 [ 341.940348] do_iter_read+0x21d/0x5b0 [ 341.944159] vfs_readv+0xc8/0x120 [ 341.947615] ? compat_rw_copy_check_uvector+0x320/0x320 [ 341.952981] ? SyS_write+0x1b7/0x210 [ 341.956708] ? __fget+0x1fe/0x360 [ 341.960173] ? lock_acquire+0x170/0x3f0 [ 341.964161] ? lock_downgrade+0x740/0x740 [ 341.968322] ? __fget+0x225/0x360 [ 341.971791] SyS_preadv+0x15a/0x200 [ 341.975431] ? SyS_writev+0x30/0x30 [ 341.979064] ? SyS_clock_settime+0x1a0/0x1a0 [ 341.983476] ? do_syscall_64+0x4c/0x640 [ 341.987452] ? SyS_writev+0x30/0x30 [ 341.991102] do_syscall_64+0x1d5/0x640 [ 341.995002] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 342.000191] RIP: 0033:0x45d5b9 [ 342.003376] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 342.011091] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 342.018361] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 00:55:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 00:55:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000340)=[{&(0x7f0000000100)="e990494455c899bc34c1042a2f790aad97f50926aca292b062e62201b9c0e7ccb971b8ed911dd2437ad144e0a8e2108560773a7b6497a8cedcfe279a3c963a1aea03b9e5ea6f77e0c98adc5c86eab8a7e9cd06db9fef3d41b6e57ee41ecbe8593b35e5900b78774720cdf9f072e8f8ccf032a7fd7323f2d386e182a3b0127509b8e78071e755b3098652dd8096d0d0d2202f32108c044ffe0353aceb2b9edb36a2dee5878797d7341c8e7595b852502709d4f366ea26bc7c70d781d048869932e1bf4adb", 0xc4, 0x9}, {&(0x7f0000000200)="c27c08cc10f8e60e1d0f07a92495775743b70a27590406efe138e3fc50447746596c65d8a388251acd9fa300176457d6", 0x30, 0x2}, {&(0x7f0000000240)="a1fbcdd0e82e117f985f505d366e639397c1a3b10370c8205737205d0902087c3afcfb1d32828b", 0x27}, {&(0x7f0000000280)="132f693209c727b91a4834eb947dc98262ceb2a059c72ce6015cec2d3b0264e4d22fd8210d24e481d015c5107c7299e9807a5c863ac10cd19e1cf7ff8feeb0ddf6a4f5b9ac06a374029bfad6dc46e93913d397bd6c9166863992e57d4e2641ebdf7f9b3373b0fe42cd58620090875a6e7d9bee0759ca870305c47b9b0c42fcb55c04ec0fe265badc1b640672de8e021aa851b8affb2c906e55792ed10d909db30b0dd58053305e24215a6073b3c4ac68", 0xb0, 0x129}], 0x8, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="fdce10a860a970b39aa583f053d58445ee44cb7807c591299eac19adb0ca987524b920f9c509029877dd891fad120f2c8474387c90a8f037226dae8eda8e2264e44c3c63a7ab27cf6f9a069e72720c6e7dd1c91ad7f159765173b446c1a19e5131c74e751b742ee9a7e01942d540f58a861f30de89a10929cc726fb8c01eb0bf77bb694eaf9286d67e491d46467ba2b9edcb4ab14d4efb5514604384602c211489412bef98", 0xa5, 0x10000000, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @loopback, 0x35}, 0x1c) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000c80)={&(0x7f00000004c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/86, 0x56}, {&(0x7f00000008c0)=""/127, 0x7f}, {&(0x7f0000000940)=""/7, 0x7}, {&(0x7f0000000980)=""/119, 0x77}, {&(0x7f0000000a00)=""/247, 0xf7}], 0x8, &(0x7f0000000b80)=""/204, 0xcc}, 0x0) [ 342.025640] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 342.032917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 342.040189] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:25 executing program 4 (fault-call:7 fault-nth:25): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1b}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xac}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x8080) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) 00:55:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x9, 0xffffff80, 0xff, 0x80000, r3}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x1) [ 342.221539] FAULT_INJECTION: forcing a failure. [ 342.221539] name failslab, interval 1, probability 0, space 0, times 0 [ 342.251863] CPU: 1 PID: 24816 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 342.259882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.269235] Call Trace: 00:55:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x3, 0x1fd, 0x0, @empty, @loopback, 0x10, 0x20, 0xfff, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x1d8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0c4) [ 342.271826] dump_stack+0x1b2/0x283 [ 342.275474] should_fail.cold+0x10a/0x154 [ 342.279624] ? mempool_free+0x1d0/0x1d0 [ 342.284401] should_failslab+0xd6/0x130 [ 342.288381] kmem_cache_alloc+0x40/0x3c0 [ 342.292452] ? mempool_free+0x1d0/0x1d0 [ 342.296421] mempool_alloc+0x10e/0x2d0 [ 342.300341] ? remove_element.isra.0+0x1b0/0x1b0 [ 342.305115] ? _find_next_bit+0xdb/0x100 [ 342.309186] ? __lock_acquire+0x5fc/0x3f20 [ 342.313432] bio_alloc_bioset+0x41b/0x830 [ 342.317589] ? __lock_acquire+0x5fc/0x3f20 00:55:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) clock_gettime(0x0, &(0x7f0000002540)={0x0, 0x0}) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000001dc0)=[{&(0x7f0000000080)=0x1}, {&(0x7f00000000c0)=0x2, 0x2}, {&(0x7f0000000100)=0x1}, {&(0x7f0000000140)=0x1, 0x1}, {&(0x7f0000000180), 0x1}, {&(0x7f00000001c0)=0x1}, {&(0x7f0000000200)=0x2, 0x2}, {&(0x7f0000000240)=0x2}, {&(0x7f0000000280)}, {&(0x7f00000002c0), 0x1}, {&(0x7f0000000300), 0x2}, {&(0x7f0000000340)}, {&(0x7f0000000380), 0x2}, {&(0x7f00000003c0)=0x2, 0x2}, {&(0x7f0000000400), 0x7f}, {&(0x7f0000000440), 0x1}, {&(0x7f0000000480)=0x2, 0x1}, {&(0x7f00000004c0)=0x2, 0x2}, {&(0x7f0000000500)=0x2}, {&(0x7f0000000540)=0x1}, {&(0x7f0000000580)=0x2, 0x2}, {&(0x7f00000005c0)}, {&(0x7f0000000600), 0x2}, {&(0x7f0000000640)=0x2}, {&(0x7f0000000680), 0x1}, {&(0x7f00000006c0)=0x2, 0x2}, {&(0x7f0000000700)=0x2}, {&(0x7f0000000740)=0x1, 0x2}, {&(0x7f0000000780), 0x1}, {&(0x7f00000007c0)=0x2, 0x1}, {&(0x7f0000000800)=0x1, 0x1}, {&(0x7f0000000840)=0x2, 0x1}, {&(0x7f0000000880)}, {&(0x7f00000008c0), 0x2}, {&(0x7f0000000900)=0x2, 0x2}, {&(0x7f0000000940)=0x2, 0x1}, {&(0x7f0000000980)}, {&(0x7f00000009c0)}, {&(0x7f0000000a00), 0x1}, {&(0x7f0000000a40), 0x2}, {&(0x7f0000000a80), 0x2}, {&(0x7f0000000ac0)=0x1}, {&(0x7f0000000b00)=0x1, 0x2}, {&(0x7f0000000b40), 0x1}, {&(0x7f0000000b80)=0x2, 0x1}, {&(0x7f0000000bc0)=0x2}, {&(0x7f0000000c00), 0x1}, {&(0x7f0000000c40)=0x2}, {&(0x7f0000000c80)=0x2, 0x2}, {&(0x7f0000000cc0)=0x2, 0x1}, {&(0x7f0000000d00)=0x2, 0x2}, {&(0x7f0000000d40), 0x1}, {&(0x7f0000000d80)=0x1}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=0x2, 0x1}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=0x1, 0x1}, {0xfffffffffffffffd, 0x2}, {&(0x7f0000000ec0)=0x1, 0x1}, {&(0x7f0000000f00)=0x1, 0x1}, {&(0x7f0000000f40), 0x1}, {&(0x7f0000000f80)=0x2}, {&(0x7f0000000fc0)=0x2}, {&(0x7f0000001000)=0x1}, {&(0x7f0000001040)=0x1, 0x2}, {&(0x7f0000001080), 0x2}, {&(0x7f00000010c0), 0x2}, {&(0x7f0000001100)=0x1, 0x1}, {&(0x7f0000001140)=0x2, 0x1}, {&(0x7f0000001180)}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=0x1}, {&(0x7f0000001240)=0x2, 0x1}, {&(0x7f0000001280)=0x2, 0x2}, {&(0x7f00000012c0)=0x2}, {&(0x7f0000001300)=0x1}, {&(0x7f0000001340)}, {&(0x7f0000001380), 0x1}, {&(0x7f00000013c0), 0x2}, {&(0x7f0000001400)=0x1}, {&(0x7f0000001440)}, {&(0x7f0000001480)=0x2, 0x2}, {&(0x7f00000014c0)=0x1, 0x2}, {&(0x7f0000001500), 0x2}, {&(0x7f0000001540)=0x1}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=0x1, 0xf}, {&(0x7f0000001600)=0x2, 0x1}, {&(0x7f0000001640), 0x1}, {&(0x7f0000001680)=0x2}, {&(0x7f00000016c0), 0x2}, {&(0x7f0000001700)=0x1, 0x2}, {&(0x7f0000001740)}, {&(0x7f0000001780)=0x2}, {&(0x7f00000017c0)=0x1, 0x2}, {&(0x7f0000001800)=0x1, 0x1}, {&(0x7f0000001840), 0x2}, {&(0x7f0000001880)=0x1, 0x1}, {&(0x7f00000018c0)=0x1, 0x2}, {&(0x7f0000001900)=0x2, 0x2}, {&(0x7f0000001940)=0x2, 0x1}, {&(0x7f0000001980)=0x2, 0x2}, {&(0x7f00000019c0)=0x1, 0x1}, {&(0x7f0000001a00)=0x1}, {&(0x7f0000001a40)=0x2, 0x2}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)=0x2, 0x2}, {&(0x7f0000001b00), 0x2}, {&(0x7f0000001b40)=0x1, 0x1}, {&(0x7f0000001b80)=0x2, 0x1}, {&(0x7f0000001bc0)}, {&(0x7f0000001c00)=0x1}, {&(0x7f0000001c40)=0x1}, {&(0x7f0000001c80)=0x2}, {&(0x7f0000001cc0)=0x2, 0x1}, {&(0x7f0000001d00)=0x1, 0x2}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)=0x2}], 0xd, 0x76, &(0x7f0000002580)={r1, r2+10000000}, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:25 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x7f, 0x0, 0x1, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0x6, {0x29, 0x4, 0xf342, 0x4, 0x180000000}}) 00:55:25 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x20}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000240)='net_prio.ifpriomap\x00', 0x2, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c, 0x87c3b5aa34dda0db) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @vbi={0x1f, 0x10001e, 0x9, 0x3447504d, [0x937, 0x10000], [0xc52, 0x1ff], 0x1}}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300)={0x1, 0xfffff699}, 0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000001c0)={r4, 0x4}, 0x8) [ 342.321829] ? bvec_alloc+0x2d0/0x2d0 [ 342.325653] ? trace_hardirqs_on+0x10/0x10 [ 342.329893] bio_clone_fast+0x20/0x130 [ 342.333778] bio_split+0x69/0x250 [ 342.337257] blk_queue_split+0x52d/0x19f0 [ 342.341430] ? __lock_acquire+0x5fc/0x3f20 [ 342.345688] ? blk_recount_segments+0x540/0x540 [ 342.350365] blk_mq_make_request+0x131/0x1ad0 [ 342.354864] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 342.359817] ? blk_queue_exit+0xb3/0x1d0 [ 342.363881] ? blk_exit_rl+0x70/0x70 [ 342.367599] ? lock_downgrade+0x740/0x740 [ 342.371775] generic_make_request+0x1f6/0x850 [ 342.376272] ? blk_queue_exit+0x1d0/0x1d0 [ 342.380422] submit_bio+0x234/0x390 [ 342.384053] ? generic_make_request+0x850/0x850 [ 342.388724] ? zero_fill_bio+0x390/0x390 [ 342.392787] ? iov_iter_npages+0x17b/0x7c0 [ 342.397023] ? bio_set_pages_dirty+0x8c/0x170 [ 342.401524] blkdev_direct_IO+0xb3e/0xdc0 [ 342.405680] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 342.410790] ? unwind_next_frame+0xe54/0x17d0 [ 342.415286] ? trace_hardirqs_on+0x10/0x10 [ 342.419518] ? mapping_needs_writeback+0xd4/0x110 [ 342.424358] ? filemap_check_errors+0x75/0x90 [ 342.428858] generic_file_read_iter+0x234/0x21c0 [ 342.433618] ? __might_fault+0x104/0x1b0 [ 342.437692] blkdev_read_iter+0xfe/0x160 [ 342.441754] do_iter_readv_writev+0x41d/0x5f0 [ 342.446250] ? avc_policy_seqno+0x5/0x10 [ 342.450327] ? clone_verify_area+0x1e0/0x1e0 [ 342.454737] ? rw_verify_area+0xe1/0x2a0 [ 342.458800] do_iter_read+0x21d/0x5b0 [ 342.462607] vfs_readv+0xc8/0x120 [ 342.466062] ? compat_rw_copy_check_uvector+0x320/0x320 [ 342.472141] ? SyS_write+0x1b7/0x210 [ 342.475855] ? __fget+0x1fe/0x360 [ 342.479323] ? lock_acquire+0x170/0x3f0 [ 342.483482] ? lock_downgrade+0x740/0x740 [ 342.487641] ? __fget+0x225/0x360 [ 342.491103] SyS_preadv+0x15a/0x200 [ 342.494737] ? SyS_writev+0x30/0x30 [ 342.498368] ? SyS_clock_settime+0x1a0/0x1a0 [ 342.502785] ? do_syscall_64+0x4c/0x640 [ 342.506760] ? SyS_writev+0x30/0x30 [ 342.510395] do_syscall_64+0x1d5/0x640 [ 342.514295] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 342.519482] RIP: 0033:0x45d5b9 00:55:26 executing program 5: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x7b7b4d83a91272ef) shmdt(r0) shmdt(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x731200, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x800) [ 342.522668] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 342.530385] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 342.538993] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 342.546362] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 342.553658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 342.560934] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:26 executing program 4 (fault-call:7 fault-nth:26): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:26 executing program 0: prctl$PR_SET_FPEXC(0xc, 0x80) r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @sdr={0x32435750, 0x3}}) 00:55:26 executing program 2: r0 = bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x3, 0x1, 0x7, 0x1, 0x40, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x7fff, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0x7, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x3, 0x5, 0x8}, 0x10}, 0x78) fgetxattr(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7379b506d3c97d75bd1f7374656d2e2f6465762f69d9713cc713a4bc63f307a0516d6e66696e6962616e642f72646d615f636d0073a6032c07daec7c979aad5e2269f70fb1f15785bcbbc0a9dd955a70ad2fc66ec9c9c722d44480c2a2337288281fab6ed3646cdf52ef0b16ede3f94c3b7dab416235c78140c4c4b4ed94941107d48d8c546592a00e66cc984e625fcc6d53ba0eff3d3cef65d1c5cb5ce194fc5ddb7f0f78e687c67d3b5ad0aeb7a28b9588173c8877ab542f450e36d4315c1f2fb19dd8306e01c3c537f2beded5d0b8192fb301d0e96efedbfb51e929491de6d47a074f"], &(0x7f0000000400)=""/72, 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}], r2, 0x1, 0x1, 0x90}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS3\x00', 0x100, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000680)=0x30) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000480)={0x1f, @none}, 0x8) 00:55:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:26 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200000000000003f, 0x4a201) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, r1, 0x2d440bee7672413d, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xcf7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x48080) 00:55:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x450201, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000100)=0xd) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x60, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xffff, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000001200)={0x6, 0x3, 0x4, 0xe000, 0x4, {0x77359400}, {0x1, 0x8, 0x8, 0x20, 0x3f, 0xd7, "e2f9dd68"}, 0xffff, 0x4, @userptr=0x1, 0x18, 0x0, r4}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@default, @bcast, @default, @null, @netrom, @default, @default, @bcast]}, &(0x7f0000000000)=0x48) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001"], 0x64}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x48, r7, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffe}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x276}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x16}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x24000080) r8 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r8, 0x4, 0x12, &(0x7f0000000200)=""/4096) 00:55:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x14, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x3, 0x400, 0x1000, 'syz0\x00', 0x1}, 0x3, 0x100, 0x5, 0x0, 0x2, 0x80, 'syz1\x00', &(0x7f0000000100)=['.]\x00', '$*\x00'], 0x6, [], [0xfff, 0x5, 0x1f, 0xb0fd]}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000180), 0x4) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000080)=0x4a13, &(0x7f00000000c0)=0x2) syz_open_dev$usbfs(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x8, 0x400) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @broadcast, 0x0, 0x8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0x31}]}, 0x30) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:26 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x10000, 0x2) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000280)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c4b9b000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf250400000008000a0004000000050004007f000000060003001c000000"], 0x2c}, 0x1, 0x0, 0x0, 0x815}, 0x4801) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socket(0x1, 0x803, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) getsockname$packet(r4, &(0x7f0000002e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000002dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002d80)={&(0x7f0000000340)={0x2a3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1240, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "5af5f9fe6c29e5085f0cb2af73a9face2af7375bd9ef31f5a3ba1dcd1d1ebc205735d61c8225ff18488e9a62ee21a3e53efa532f286a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xce43}, @ETHTOOL_A_BITSET_VALUE={0xab, 0x4, "b257104b714f5e633073c0efe22c609a47de9da58bb14767dc93f7594a690ecb496619e691c57d3f4a245c294f2392e1566a672857229517fba4632b1e435d1dc4542afa82bba3dcf0ee4a73c3fc92d1e53e4d205bddd15e5807b279ecdac3966398101d3938e6615a220633bd8af4c676f33cb6523200c4155d591b6f4cebb428cfe0e6cd90454052c2e40c06791a412e87a08c2582606ddce7cd5309063db4b33812513b62eb"}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "fbe49fc07ca9b1d7f3230200c7d6f1753fc2791a9d6dc59f9d1885a14abc6d9833462e52e95213da038d5565eaa53406eb0d6e9ffad519409fbdac1069d2ed23ee2d8dc282b021be697f9693400abc9350f7ea438f881ddb5a1d38f22e5e1c32379a661492486cc52cf3945275193ce0bfa003c833e6fb5bcd14382d66aa9ba2f082c2d252878604fd33e43d11054424c590afb1ddc263be9b7384afd7721e96bd4e0ec0e7c410366b2a1f637a28e0db0561388ede05faeb66ce137b8bfdbb18baf5d5f8ad65"}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "a097ffcfa72c816fffb9e913c4f47103a80b88f68d1fddddf6f14c6cb015473dfdb965ddaa40ebd39217e276c1558267c8445c54dbbd7d6d995be6160d120ad798eb8d2ac9fca9bf6f2a28ad10cac2330d7910b8c996a26d62e1775d77dddb6ff3004581ae"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "3f1147c7a07727b7dd79778a553e10697380a0bccf63ff64462394f047c9a6ff6df5c4749092ac33a29baf049cf2023117aa85146f4e084e4e28db5483e2b06728e684286a6ff83f3bf8072e9e2a22089e400c0e8b5c8e141cf10819bc5035a0992f4787b59887468853be32eec977a8fbb2f119f51cd39abcd1650166d133356095cf5a92236a0a0d3c9fa9172b8391ab33ceaba672e4472426863e3c1194f673759ff431c2cae623628983ecd727110ba9dcf01666d329cc54abe43207f174070f8c063587707c616f7c252a21b373c04820ae891a413137187221157db7941ffc6f6c2cddcca8171e8f739dfc267d5badd5e01f8d29e95da47ebf724d48ae08a3b7309d540007be9cf0c29043e76475a07e24ae6dca30be1b2d2bc267904bcc5f894d90574fc5602bc3556df07b7df291f7c53c678321726414caa10ab8a1ce302f265f2bbca08195562d3dd6f58a6ab63ce91310a4fe2a4966a729734463a75ced1c785d4ab2034a7eca9c6c72f40a18c6dac7bf551a967f3e01c276e6520219eae448543906d156377a94af3df862542922d0ac604acaad4068dcfe26df5ebf6bfb12500e8738a6e95891c49798f4a75add053606eeabb3123a60af3ae5ad7f2d8cc8898569e71a626bccf61827df322fef815d674c81c3a80a042f1b9fda8f5b9b3a86d55aeb2ded6acf7a2baff4c909d40dc3dc9b50449ffe7356e53a414f1fd8882b161f767d815bb5649ab45e1deaf42e57b9ddb2fe87c455a7265e25cb22e6edf3ca1f0c7c999ac41e4ea758de6960e67be4798f5dd482c59818288dbd532bd3b5783cea0807822c82821618ac0b9f1a5f713d4f159ef9887cc9359cb27edc613ac88277a2d4bce539ddb7e44819bc7f77c290d5973bc594426cdfe9cf8d576d73f3f7b54684daf4c5a8fefc882e593350a2872eacaabb5c441666dee77d9491c8eb9c43d2dcdf93ff06c51f6bcef658a0652b7840c0a5a9c76431c83b2e10758d7d8e4269e60003d75736989e9823a89b23413a4d1cc93dff2b79bdae8cc112eb687589216cc03688c0c7d2a83a010d1ecefa80716c297b63719e2494bd3b96d7a9fffed9c78bd59b67f1e41e40363e5c55e2732161b363a7d8a1c4eb241f7b9ed41b4d2e24b2e5091be6a64579ab012f2402377e9dae177bb26da3c74a963db224fc981ed0717feb1573d6639d73b8fc9fd5e069c779d075308ab9d0dda9f31a662fd93fd72e3d70e13fd51bd72c492c6b879da4cd97237684a9176d95a914cf3d22bb99eda8b60fc05e70e094c9bef194665bca1025e5ad66772e2cae8d85eff0241d84dae89151cf811d1ad090a536c616e5aa790552d762ae220d874754a2536875f70a5c121bbb6f4a8e16f5d0caa7140e806ba877ea2a5a508283e078e2a1f59772c7b0787af88ecde6d15d6d73363322c98949be5d671f863da44c521ca606a169cafdee13fb65467f71c3729dc655b31014283a1081147012aa08bfc3c53cfdd68d2ea97bcfb7d3f3daa57de3ea55dff63929e201a8f57501e1b332d6890f2f25e86c29432aa736ad9c575a1a4e7541371c44c8652657c3f63b269ecf1c155261c57dde6a2a8fa8a3c40b00adf8182e61042dd663ce060af802c41f144b7803373f91b5721ddd8780ce7c24f949cc7f901bb240ce374d1bc40b677e372d7f6e634c3da767c37f2439cbc9ecf62c3f39bb7d63655b876b339bf732ca6db83eb8b9665f3f2f8f46f63bc907bf16332900b0bd9e9f7efba53ed7e68469c3c25d5a925b5f6d1fe826e27edcb6301b69cfa2422d23f48fe1d6754a7b6225590f7905ffa81d48c523878a5534fdedb7481f47610f73c55244c3a1758fe650ef2c08be9a101700924719b3093653a3e305008a199fca2dd5f58c6660b5ed90e65874774bb76fb1a3c87b9eb003efd200d109819b4f64d09ae14f3bf4e8332e041a4c4e09c3f2df2f560b75032c7a82f3b29036b4152824b60cef7accc340aad4c846475314ea36f24a744c84a403f3441683f6a1e6560c67dfc1a4d1170c2f49f5e1ea50029b9e55420db1b937c4641d0c0de936dc1db2d8f27c5001e2bfe45326067f11eabbd3469a5d860ac7405e36f556e285508ad5c3d9a6b48ce4ddd7fc38efc2ed5973ae5fdd6b85d3a0a475fe291e276bb7400dd4961653910c61a5213f87547d2abe75c310fef146da2099ec6ff4247e04fbf4ab734594129d88a04120bd1752be228e80c28f52b76a5fb1f7033a88294288022aec979b36e9af3545d99c7251ca17452564c27238bd2361c6197b3d019576cc18c24fb842fc550b790772734b993d78cb0028ceacb75bd0f459cd5c6231fe026043c71d200bec3e482faf66c4e2bfa4f36ee0e255714023952aa73d807cf6ebdee7c0762d37d6da7c5445a9df0e0f99370e166e402971267dbe37190794ca00c4ad0604ece0d59480335f6faeb4bb87dc679b20140de36cdd6c5468843ec01fa14da55588cfe754aaaef88d221706fcf2a16027820909d721c9b87fde9f9a42e5adf930913a1fdba27e988174a85fa8d054bb501e5af958d2617943d2e09019fc2f4399e978a58e512a27ae8ade432b83f16a815e195c9ed36a216ed4f05ea189260166383cd42274545ecde489b0a7ea51ce1677ed1aca9f147bdf9f75bea726fcda0ced9ae37c70401e7ae61edd3befa04da5ec40ea0d53994ed483be5e90bd8fa19d5d92074afcfd17676d7a32914a79f7d05373afd04348bac9068e0f95997fd540984302267c09a2f3f5ef2d99b45a8670791c0ad7ab86d5e1f844deaa7b864a0b5774587541c90d40ddfa74f956cf2209306762c846106a1384d7d97193cce167e454b8b83523b3a77c6e75b269169a29f98cc22c6a2da59a7378236edcb345323e8f3852cc02b40981793def85f35eb267569f3de8af67cf5e915a379b4da4bd33de3e4d7ed9e18b2d8db3d6b45ab54e6129d7dc83a80dadff15b3070429a6f7663cf159d7c32d0ec8479fbd7ff5abd406ddb1d24c927cc9852496853e01a45f22d9933c0a2669f8095dea82b724ee20e70e34cfec64649d7fe11289af3534604275e02b2e11b0a093a64ddf524ce15908bc44ff4e378641aaf57d5c7de1152dba02a9f4a9e0ba0b931ed335f95cf20dfebba4c940f746a3886bbc465c0312c96dcf2883df1ef9207a36bcaaaba455f6c2b3444ccf0e267072dcfcd43d1eed43151da5aaf8f5772ef5437bcddf74ae37d924784de2dd613424735a549a2a8dc761d0663e80b0d785a883125b7df222865bb0b5b511041cbb9e4b79029d8bf74b923dea1f70471f15841919379f366eb9ca164b1bb9d34265caeeac552359af3e1d497e818a7c352fc40511a6a8655029006f13122290430bae6289846a78263d0f25b95350e413f071e4cd67d9fa51c3ba1c31659d84693bd89a77e7b1fabdd7998d9c85f91313ef7bc30c967b1ab6937a9f13b4954f808491f147d70554b21a95dcdfb853ad046acb5b9d67ae4cf88c1ad5cd480924bf598052c5f932d369e0a8e13814095e722dc166a6ace6aaa9ff0958dd7c1c2df27cdfd9c679394c41b289cafd414ae67694eba46d474e34ee41b7c5ede9f3b2be7dbd05d8154db5b5477adc4bf45784d15623510c0eae219b06e46ba812c45591cfc9872e8ee1c7fe7afab326f77f1e44fab51245d0d2c09528b2f506302fda5aa3ec5d8bad03809e520e83ce813f6d7bbfd33fa0166cbd82a9cae075e9af3016a9a8e873ed5aee978fb838c2e015d699c585ec520f78c92b8d93ae63a103b8b47281cc1c68b47eb785a2f869b03f7f0f97c88c702b4167491f0171691f2d07c112042ecb11bf21111ccf6bf8eb77c35e48cc31aec7ccb128b9f746af2b4ad0768a8f62e0dc6953ab1a66ad11d86f721dc9b76bd47c1d20f450eedcb124796efcf10ed4f056e11b0aec74ea830b8eccce85232cb919c61aa64a6fcdc94c78d028218a6800ea286362a94460b996c9adbe519b903bd2713fc2b3031ea58bec9e285ac1e0986812c1ea08d60dee8730be760c058631d93336bdc02d3f00f505a68eb6d6b2e782eebf03aa4557a0ff26a60950e7682a6a21b2b8787786d0b15ea1a19f322d933b40f985e37a301ef59a86b5bf2cbb43f0e07c75f23f6eeed4e432923811feefef9a7014bdcb7ecdd3e922cd388b9a04bb9f2237819ced14228382e4d98575e29484f1a5676880f2f49c6336851816d47476104a118ce37e1a7bbace0daa56b5193ff2ef37deb19a00105ec0e86f5cc9b9d7bb1765369713af5cd8adf5632e528677dbf88edd8b62ab388c5e77b41b6a6b7098af848b889e195b0e5160776b03be6d78353c274f861df97d3af37c28d0af3720f07d7e11a8c3bb89073fa4608a6da6db206a953b33afea5ecbe9c0688c7e13bbc0f461b38a0bb5233b55e5ccff6a2675e9468b2b804adc7c3a795a43f935b7dd00ba6f334093b1e424c656c07d7720d6fa3254c27b283630f7c5f13f3c415ddc006a4f2242e34a2b567f465a4a25b8def770a665656ef2292c484a56cfc1af2f98c6b3d1affdae44c6ba951648083c3e7545056b6f5390fe41b819268b4e51079b7047dd69a224b20cdf6e8c032e620d9f02494fc393f1157f53f9fc652ee36a8082e641539db8c5d042b58bc57e378e40b95ea048532e6c6f7582d45a94eec0faf9ff47ab90b2f99f63a67f2d2a8c81b47ef0837415dcba571d912632d07096312c82d67bd0ed6f08c9565c053903e23b562a8fea1735d853bfaa78dda88e9a2c0e47465fac1ee64fd9beb1bf6d9a1da835dee4bf18d883a95e829ee6c585ccbf59145477f91a059dc5e25b2e22981986441a29c90a417036bf579193efb7e28afd51f94e67c65e8ab9a589a84e0347e5d6783ea973a1c0385c0577347d5c759f25afa75b6b1481e002fb31d9be81b2dadd1e53d0d5a4b894ae23c08169baf4b6ecccd51ccdf4329e74e5ac61cc48d7eb15a066d30329da72399ab17de4abd800df713824a8c5844d9052e8ebff9ef7284c01b4153cbf86fd5cddb94765a16f10dda772c2cbd51346f5eb6468df8593276279f13b47f3e97fb8797bf3a33bd79341626e9defd0abc70273473f71c35fce10dd1cd68b2fad5877261f16dcf51a4872ee3e3f47f0e3ceb6edfcff548386280a9aa9f297397c5e04f5291c2f0549a233be7cfe1a2729e420c9855d543eba08e6a89a72717755f81aedb20b654389960456c3ec859348afdb20e2fe39cad74d1f3884a839c591484a213208bb0ac33c468a02495e96dd161d2805e25af245bc2a5030f137e74ffb3a46f567909b826c49115ee782bac87eea6fa037a13fb4270baf47fd53fdecf88fb321eebea848423b37e3491d2f7f59b894e4d735c2a348a745d6a617d2f1cc98e721aa9b2e36bedb1db0b2c4808640937325c183a316b4154816c653ca16cb5f1b76b3bae720036f40e39460fa00c8ed447daa56b1dadadd9126018f0550fec1fed87523dc44e2b45230ba8f5100f00d02eb9e4d6a35d4a71236926eb36059508a4891ed157e8027514539a491d8df04832254a9b1bac892b63292dbd57e467646fb56cdea6fe68bbd236b5fe17f1e4f76f3eb0e487ee0c19440db225de6075a54fd8a8dd4f7e695669830c61f156b06fce1a0a2d8b2f91a2b4a1a21e23f3b98bc0fcb6727b19fd17fc82a0c3c8514de96751700aa22c78773da6928f3f188d67c0290ef84c9b17804fdaec4b188a59e195b70f1068e1fba79e057ebde67db5f30c96233aa62c8f84ea041bb98b2f4c8cac0e02b4d0814"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x128, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xef, 0x5, "65e4bb85698bb10c7d43fb91d235a4d513e7bd3a6c3a639fc161562fb2ba4b15b5cec71352e151aaead7141a0490e368676d7a154f5ccdc649513fbd7a137c19d5026781fa5544b4f32716813ce1fa198c8c2d8d1090597f77c68f8045fc2a00542263869c80b9bd866d192cb880c4a894af9b0d39f7446e8ccfe02991f1ce00d488cc052b9df55753510e14fd01803e582f69437d1960301810a6ec7be5b7972965424ac760051e196309223098476bf13aa261359f0290a2db5b8940271e4a605ffd70a2cca8b87b3c5bc6d2e9eafcad377455f9d3c7d021177ab543d4aabcc23feec8f5850464132354"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9a1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!#-:-\x17]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x59}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7d7c}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '[{*[\x9c,#\x00(}/)--\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#)/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#:\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaa93}]}]}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5e, 0x4, "192fe88e09ab5c77399c7b9e60a4fc1cf6ad4b4d2103268b30bb3cc5938c2660a1b006fe5089f8e3f141ee81cd1417e6eb02633d15ec34b1bda2854e0e4a4a8cced305051d5869bcfe230812db99e7798c81fa40e767e6dbcf2e"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x13c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '(+2#*{{(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%-!%!]$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "c7d138d382a05bed8550e8fd403829e3334af1494e0cd600a82235211d5d5cabeec1715ddfd005e97843bb4417158daa217ae78937030911ce29b784e66a268d6122778c443aa1de207392cdcee02fe1570df2e26866283c8494f312ffd8535893be7f721cb468915c37a97d9d3bc13c49ac1670903bd4517a3478e1e8060172836213a0d4e4ee8f999f8439e9b66f5e2a6799f6945986ef22defc42c4cbef0908b51882c4995de25da21f0bc07733a141730b98d23d2a3c75d9cc35c219ef11e2356ebcff9cb0e4a4b08f4bf448d6727bdd6efe434948a695068ef97591329cef3347b4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x7f\'@--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\\\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/)'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':{+}!\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#@$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/video#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xe4, 0x5, "090181b7da5563ce88ca73ba4d8e59e925ee67fc9f9cd96917e534ed755b6ab98a09470395043d98900f9d1b676f826df47fb0badd264475c821273748c686b596f813d5ae80bfbe6a33b51af1ccc60dd55be8220a462ea81ee7bb5567a43b23ec0e294b1dfba83104c805e37f37ffd9467d733ce3007b73ba53ad004cda0ec96e7c45111304ea4d90f01707d5b448a14b00c50915bc5bbf1f43fee6b799db6ac1850275ffdfd01aba958c33ad8fe562ba20388276c0008ef0e441ec81640ecce6541cbd60b4f06da19d6f46c5c539ecb5494dd58ef925ab852ee6d1868c61f7"}, @ETHTOOL_A_BITSET_VALUE={0x9b, 0x4, "18a3d86786fb8271a62d2d042ecebb26dec9b2a862e1d7cdc4e7e1b401a7243863d0267a399ddc326601f77a92bc8b2bd0984769b37abcbf12bcfdc5c24beb2e3578ed50ceeb5dd486d152809ea08a84271b95d3d3680a7178388577444a18c083e794d3e29f6bea08f9c02eca51ffeaf6998aa0f5cf0a02affc7b925a84d3eeebde3769dc032cd91f1991ea527393c490afbffd3d9716"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "8249d46f285d3a84f3ea6b74c972bb0a617b08978ecbcd8510abf10a85b9e59dc37c512148"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x57}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "58db6e69f093d52ba44528bdb571ea4565d72307785e24e0acf1ae8b6e910f84a0d04deac23ae3d56b7b388425feeb12ee21307887707823128f29b7fca7c0bcfe1eb702fb379c0cf46062201fed969732"}]}]}, 0x2a3c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4) [ 343.228749] FAULT_INJECTION: forcing a failure. [ 343.228749] name failslab, interval 1, probability 0, space 0, times 0 [ 343.290254] CPU: 0 PID: 24882 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 343.298170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.307529] Call Trace: [ 343.310125] dump_stack+0x1b2/0x283 [ 343.313760] should_fail.cold+0x10a/0x154 [ 343.317908] ? check_preemption_disabled+0x35/0x240 [ 343.322933] ? mempool_free+0x1d0/0x1d0 [ 343.326918] should_failslab+0xd6/0x130 [ 343.331250] kmem_cache_alloc+0x40/0x3c0 [ 343.335320] ? mempool_free+0x1d0/0x1d0 [ 343.339296] mempool_alloc+0x10e/0x2d0 [ 343.343189] ? remove_element.isra.0+0x1b0/0x1b0 [ 343.347953] ? _find_next_bit+0xdb/0x100 [ 343.352015] ? retint_kernel+0x2d/0x2d [ 343.355906] bio_alloc_bioset+0x41b/0x830 [ 343.360086] ? bvec_alloc+0x2d0/0x2d0 [ 343.363890] bio_clone_fast+0x20/0x130 [ 343.367771] bio_split+0x69/0x250 [ 343.371224] blk_queue_split+0x52d/0x19f0 [ 343.375386] ? blk_recount_segments+0x540/0x540 [ 343.380075] blk_mq_make_request+0x131/0x1ad0 [ 343.384575] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 343.389538] ? lock_release+0x41e/0x870 [ 343.393512] ? blk_exit_rl+0x70/0x70 [ 343.397225] ? lock_downgrade+0x740/0x740 [ 343.401378] generic_make_request+0x1f6/0x850 [ 343.405882] ? blk_queue_exit+0x1d0/0x1d0 [ 343.410034] submit_bio+0x234/0x390 [ 343.413664] ? generic_make_request+0x850/0x850 [ 343.418334] ? blkdev_direct_IO+0xb36/0xdc0 [ 343.422655] blkdev_direct_IO+0xb3e/0xdc0 [ 343.427778] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 343.432913] ? retint_kernel+0x2d/0x2d [ 343.436816] ? mapping_needs_writeback+0xd4/0x110 [ 343.441663] ? filemap_check_errors+0x75/0x90 [ 343.446159] generic_file_read_iter+0x234/0x21c0 [ 343.450977] blkdev_read_iter+0xfe/0x160 [ 343.455049] do_iter_readv_writev+0x41d/0x5f0 [ 343.459550] ? avc_policy_seqno+0x5/0x10 [ 343.463611] ? clone_verify_area+0x1e0/0x1e0 [ 343.468026] ? rw_verify_area+0xe1/0x2a0 [ 343.472114] do_iter_read+0x21d/0x5b0 [ 343.475920] ? retint_kernel+0x2d/0x2d [ 343.479850] vfs_readv+0xc8/0x120 [ 343.483303] ? compat_rw_copy_check_uvector+0x320/0x320 [ 343.488671] ? __fget+0x1fe/0x360 [ 343.492138] ? lock_downgrade+0x740/0x740 [ 343.496319] ? __fget+0x225/0x360 [ 343.499808] SyS_preadv+0x15a/0x200 [ 343.503433] ? SyS_writev+0x30/0x30 [ 343.507062] ? SyS_clock_settime+0x1a0/0x1a0 [ 343.511474] ? do_syscall_64+0x4c/0x640 [ 343.515572] ? SyS_writev+0x30/0x30 [ 343.519197] do_syscall_64+0x1d5/0x640 [ 343.523436] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 343.528658] RIP: 0033:0x45d5b9 [ 343.531938] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 343.539656] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 343.546926] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 343.554201] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 343.561470] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 343.568756] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:27 executing program 4 (fault-call:7 fault-nth:27): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1c, r4, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) r7 = signalfd4(r1, &(0x7f0000000400)={[0x1]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}]}, 0x34}}, 0x4) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) 00:55:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r4, r5) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) write$FUSE_STATFS(r7, &(0x7f0000000080)={0x60, 0xfffffffffffffffe, 0x0, {{0xfd57, 0x7, 0x2a6, 0x9, 0x8, 0x1ff, 0x0, 0x9}}}, 0x60) fchown(0xffffffffffffffff, r2, r5) 00:55:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x4, 0x0, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x100, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x82f, {0xff, 0x6, 0x6, 0x2, 0x80000000, 0x9}}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x40440, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f00000000c0)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x2b4, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6460fe90}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35215b4e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6602d56a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x16d29c4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x794f87cd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b30d744}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29a803d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39eb18a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50c2da01}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x254bce7a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x197b66c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c839ebf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40654488}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x124, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67fc539d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dce97ff}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x54}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e82d80a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x126e3ad4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c75b58b}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51d8a24b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ad18607}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47bdd14e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72557b4c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13361c6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6572c218}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69c89ab9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b79081f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x569a79c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}]}]}, 0x2b4}}, 0x8004) r6 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$int_out(r2, 0x0, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x105800, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000240)={0x72b, 0x9b5, 0x1, 'queue1\x00', 0x6}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0xd01, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000005c0)="a9a94409d92a6a87ef3baae94f1eee51a7fcd5833776dcc4ae85cf1086fc", 0x1e) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') 00:55:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) [ 343.876416] Unknown ioctl 21382 [ 343.889703] Unknown ioctl 0 [ 343.917476] FAULT_INJECTION: forcing a failure. [ 343.917476] name failslab, interval 1, probability 0, space 0, times 0 [ 343.933669] CPU: 1 PID: 24944 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 343.941594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.950954] Call Trace: [ 343.953550] dump_stack+0x1b2/0x283 [ 343.957187] should_fail.cold+0x10a/0x154 [ 343.961339] ? mempool_free+0x1d0/0x1d0 [ 343.961750] Unknown ioctl 21382 [ 343.965308] should_failslab+0xd6/0x130 [ 343.965319] kmem_cache_alloc+0x40/0x3c0 [ 343.965329] ? mempool_free+0x1d0/0x1d0 [ 343.965336] mempool_alloc+0x10e/0x2d0 [ 343.965349] ? remove_element.isra.0+0x1b0/0x1b0 [ 343.965358] ? _find_next_bit+0xdb/0x100 [ 343.965371] ? __lock_acquire+0x5fc/0x3f20 [ 343.965387] bio_alloc_bioset+0x41b/0x830 [ 343.965395] ? __lock_acquire+0x5fc/0x3f20 [ 343.965408] ? bvec_alloc+0x2d0/0x2d0 [ 343.965417] ? trace_hardirqs_on+0x10/0x10 [ 343.965428] bio_clone_fast+0x20/0x130 [ 343.965443] bio_split+0x69/0x250 [ 343.970314] Unknown ioctl 0 [ 343.972695] blk_queue_split+0x52d/0x19f0 [ 343.972706] ? __lock_acquire+0x5fc/0x3f20 [ 343.972726] ? blk_recount_segments+0x540/0x540 [ 343.972741] blk_mq_make_request+0x131/0x1ad0 [ 343.972754] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 343.972764] ? blk_queue_exit+0xb3/0x1d0 [ 343.972773] ? blk_exit_rl+0x70/0x70 [ 343.972783] ? lock_downgrade+0x740/0x740 [ 343.972797] generic_make_request+0x1f6/0x850 [ 343.972809] ? blk_queue_exit+0x1d0/0x1d0 [ 343.972824] submit_bio+0x234/0x390 [ 343.972836] ? generic_make_request+0x850/0x850 [ 344.075612] ? zero_fill_bio+0x390/0x390 [ 344.079684] ? iov_iter_npages+0x17b/0x7c0 [ 344.083921] ? bio_set_pages_dirty+0x8c/0x170 [ 344.088472] blkdev_direct_IO+0xb3e/0xdc0 [ 344.092632] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 344.097736] ? unwind_next_frame+0xe54/0x17d0 [ 344.102238] ? trace_hardirqs_on+0x10/0x10 [ 344.106480] ? mapping_needs_writeback+0xd4/0x110 [ 344.111327] ? filemap_check_errors+0x75/0x90 [ 344.115828] generic_file_read_iter+0x234/0x21c0 [ 344.120589] ? __might_fault+0x104/0x1b0 [ 344.124661] blkdev_read_iter+0xfe/0x160 [ 344.128727] do_iter_readv_writev+0x41d/0x5f0 [ 344.133226] ? avc_policy_seqno+0x5/0x10 [ 344.137294] ? clone_verify_area+0x1e0/0x1e0 [ 344.141718] ? rw_verify_area+0xe1/0x2a0 [ 344.146399] do_iter_read+0x21d/0x5b0 [ 344.150213] vfs_readv+0xc8/0x120 [ 344.153668] ? compat_rw_copy_check_uvector+0x320/0x320 [ 344.159752] ? SyS_write+0x1b7/0x210 [ 344.163489] ? __fget+0x1fe/0x360 [ 344.166949] ? lock_acquire+0x170/0x3f0 [ 344.170930] ? lock_downgrade+0x740/0x740 [ 344.175174] ? __fget+0x225/0x360 [ 344.178669] SyS_preadv+0x15a/0x200 [ 344.182652] ? SyS_writev+0x30/0x30 [ 344.186285] ? SyS_clock_settime+0x1a0/0x1a0 [ 344.190722] ? do_syscall_64+0x4c/0x640 [ 344.194697] ? SyS_writev+0x30/0x30 [ 344.198326] do_syscall_64+0x1d5/0x640 [ 344.202223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 344.207427] RIP: 0033:0x45d5b9 [ 344.210615] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 00:55:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2={0xfc, 0x2, [], 0x1}, 0x1, 0x2, 0x1, 0x8, 0x400, 0xa509}, 0x20) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000200)=0xbf) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x20000, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', r6, 0x4, 0x40, 0x7, 0xfffffff8, 0x25, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, 0x80, 0x8000, 0x5, 0x8}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x4000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x802, 0x0) bind$l2tp6(r2, &(0x7f00000002c0)={0xa, 0x0, 0x8000, @ipv4={[], [], @local}, 0x6}, 0x20) 00:55:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000000000000069c3f812f0a71515573c100"]) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x0, 0x17, 0x18, 0x3, 0x0, 0x82, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x1f}) 00:55:27 executing program 3: ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_disconnect={0xff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x20100, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r4, 0xc0285629, &(0x7f00000001c0)={0x0, 0x80000000, 0x8, [], &(0x7f0000000180)=0x2}) sendmmsg$alg(r3, &(0x7f0000000200), 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDCTL_TMR_METRONOME(r3, 0x40045407) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:27 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu}) add_key$user(0x0, 0x0, &(0x7f0000000440)="585b03dcbddba88a351beca089f41945", 0x10, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000280)={0x30, 0x1b, &(0x7f0000000600)="0c97ea2b2051206cee0de108aff37d8a7f2a820c0b719488b0de9a5bc6a89163356649fbe0f87153039a1c3e1d8ad3f6c70d41e5e32ebc23a0da103ae29a96b136465eb9648227d739822277ac65deaf7210177e1f799171f00e7505279a1e1c8c0fc472d48f90a50c51549cf78c4024445cdfc87e7fea3edde5403c0c9f2e19ecf0c017de3c1845179fea8c3f37b6d51745354b204c8f8c6478002aa24ce37f827c8a9be2b60498716c211df785c4e7ca5df64cad6b4c75909cad3f7b9aeb28c850568a9a707b08a07943f2c7741dd4cd53a92a4cf2ad891285e530f580485032c410634f9a3f8d961607689818b28b73523b185c4040d72bcd14688997a6b02a6a1cbcccdd7f7ab0f41df41133556ad8c93806443a08476e97443b0f22ea6ba43c751acb93d9e9384d127a8d8d9c8af969dc7a693b9acada21e9fbc3525da75944483f2246a24cfe4fd5c1974d7167f3d56123d39ea1d3d50a351097240f65386dee0b77f55942ce3dc1f58bbf43f0a72cf13d9f1fba0d8dd17bee98532cfccf110f92b74c31c82ceaf84a80133352f77b9553fb48bfb0b3e7e68c7445949c49a906a27e9d8f7aac224bf52e7cfa253461444c7aa4c3aff698f6d4a31e77525b0ee795f800dc679f06a4e5e9257843e64440a31011d07d591fc91ae304de1e17a2aedaabb3c8226243c81f67bde22b52d743724bd2a49e31b3b993154a44e6870b724307ae411341467f9273c259e7dfbd08bb0febe18f6c543dbb8af218b13bb8e3f9590ee602bbd32ebc14e5808683cdb8069b2cfe8baab9b4867c828f3d377122fd2b82eb6d2808ab2a294b3115111cd6f4527459f1b9da647b56cf067dfedd018175f30a90e1b613e50415af8e8fba7af97c0b7e09206998889d1d237857f028d2361073bda8aa0f99786c49f30911f6f2c1736fd1a33c25dae417c46a995634fad6231ff833d65f92f152f406ac6127251c100e7f882228738f4c998634f8d319dc0b49d0014b35ee60e442bbae3bd76514e33fba4cdf42b185173e6533a75c1fe02956e81c43ab09529adaf6634cedce273b3f2c9b636e6b6b4a3d65a7dc722629506b160b52d1b019da310e447e581faf5424d2afee85fa2d5fea21383547a32c8af38209af470530a8c6e504e4e32feb0697f887a103233d5d35b34b933108a1dab994a2b2214d9e2f0d038f738a7f3e6c59163b3d7134c2d0fb5b7f2dd9a2d1d2ef0ae6d7ce76aeab3ade4737e445bb7d3b792826f22307ee8053cb04d5468d56f5b65632e425153aa71de2346b910dd0db4dde91a5d3ecd613a3385150193864c06d2179febc27567fb740fb79079877f6f50369e7f6b701b82c749b6c9e1a7552ddbd4a17b333d33d41b3253673399618d7a27d39ce428ce012ccbdce8eb146ac6ba4452ac3c4b96a36e0c9fa5867a0da0acf02d01f4ee63624"}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={'xcbc(anubis-generic)\x00'}}) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="36cc0100", @ANYRES16=r0, @ANYBLOB="100026bd700008000000010000000000000002410000001800136574683a76657468305f746f5f62617461647600"], 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000300)={0x1, 0x6, 0x4, 0x7, 0x2}) r4 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r5 = signalfd4(r3, &(0x7f00000003c0)={[0x3]}, 0x8, 0x80000) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f0000000400)={0x4, 0x1, 0x7, 0x7fffffff, 0x1ff, 0x9, 0x7}) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) [ 344.218329] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 344.226563] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 344.241481] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 344.248758] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 344.256053] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:27 executing program 4 (fault-call:7 fault-nth:28): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/loop-control\x00', 0x583003, 0x0) r4 = fcntl$dupfd(r3, 0x406, r1) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f00000000c0)={0x7, 0x0, 0x1002, 0x200, 0x7, {0x238, 0x20}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, {}], r5, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) 00:55:27 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5, 0x2c8201) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x83, 0x0) connect$nfc_raw(r2, &(0x7f00000001c0)={0x27, 0x1, 0x2, 0x7}, 0xfffffffffffffec4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x604800, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000180)) 00:55:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f00000001c0)={0x14, r3, 0x709}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000827bd7000fedbdf250c00000011000700e5a023ab3e8be4c3bf0c9fb04f0000000800090001ac0f001100070023a371ec70ae4ecdcaf844db77000000090007007876812e8b0000001100070023ea5d9ddf266087edbde046e20000001c006e80040001000400010004000200040001000400020004000200"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x288040) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f00000000c0)={0x0, 0x5, 0x8}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') 00:55:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 344.363227] xt_hashlimit: overflow, try lower: 0/0 00:55:27 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x7fff, 0x5}, 0x90) 00:55:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000002c0)=0x8) modify_ldt$read(0x0, &(0x7f00000001c0)=""/164, 0xa4) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) recvfrom$llc(r3, &(0x7f0000000080)=""/69, 0x45, 0x2040, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r4 = signalfd4(r0, &(0x7f0000000100)={[0x3]}, 0x8, 0x800) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x96e6}, 0x8) 00:55:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x640dc0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 344.451280] FAULT_INJECTION: forcing a failure. [ 344.451280] name failslab, interval 1, probability 0, space 0, times 0 [ 344.496504] CPU: 1 PID: 24993 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 344.504536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.513890] Call Trace: [ 344.516515] dump_stack+0x1b2/0x283 [ 344.520153] should_fail.cold+0x10a/0x154 [ 344.524311] ? mempool_free+0x1d0/0x1d0 [ 344.528294] should_failslab+0xd6/0x130 [ 344.532296] kmem_cache_alloc+0x40/0x3c0 [ 344.536361] ? mempool_free+0x1d0/0x1d0 [ 344.540336] mempool_alloc+0x10e/0x2d0 [ 344.544231] ? remove_element.isra.0+0x1b0/0x1b0 [ 344.548986] ? _find_next_bit+0xdb/0x100 [ 344.553052] ? __lock_acquire+0x5fc/0x3f20 [ 344.553156] xt_hashlimit: overflow, try lower: 0/0 [ 344.557288] bio_alloc_bioset+0x41b/0x830 [ 344.557300] ? __lock_acquire+0x5fc/0x3f20 [ 344.557312] ? bvec_alloc+0x2d0/0x2d0 [ 344.557322] ? trace_hardirqs_on+0x10/0x10 [ 344.557335] bio_clone_fast+0x20/0x130 [ 344.582495] bio_split+0x69/0x250 [ 344.585959] blk_queue_split+0x52d/0x19f0 [ 344.590111] ? __lock_acquire+0x5fc/0x3f20 [ 344.594359] ? blk_recount_segments+0x540/0x540 [ 344.599057] blk_mq_make_request+0x131/0x1ad0 [ 344.603559] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 344.608491] ? blk_queue_exit+0xb3/0x1d0 [ 344.612562] ? blk_exit_rl+0x70/0x70 [ 344.616291] ? lock_downgrade+0x740/0x740 [ 344.620452] generic_make_request+0x1f6/0x850 [ 344.624959] ? blk_queue_exit+0x1d0/0x1d0 [ 344.629124] submit_bio+0x234/0x390 [ 344.632761] ? generic_make_request+0x850/0x850 [ 344.637438] ? zero_fill_bio+0x390/0x390 [ 344.641531] ? iov_iter_npages+0x17b/0x7c0 [ 344.645770] ? bio_set_pages_dirty+0x8c/0x170 [ 344.650272] blkdev_direct_IO+0xb3e/0xdc0 [ 344.654429] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 344.659532] ? unwind_next_frame+0xe54/0x17d0 [ 344.664037] ? trace_hardirqs_on+0x10/0x10 [ 344.668277] ? mapping_needs_writeback+0xd4/0x110 [ 344.671233] xt_hashlimit: overflow, try lower: 0/0 [ 344.673114] ? filemap_check_errors+0x75/0x90 [ 344.673126] generic_file_read_iter+0x234/0x21c0 [ 344.673138] ? __might_fault+0x104/0x1b0 [ 344.673156] blkdev_read_iter+0xfe/0x160 [ 344.673169] do_iter_readv_writev+0x41d/0x5f0 [ 344.673180] ? avc_policy_seqno+0x5/0x10 [ 344.673188] ? clone_verify_area+0x1e0/0x1e0 [ 344.673201] ? rw_verify_area+0xe1/0x2a0 [ 344.673211] do_iter_read+0x21d/0x5b0 [ 344.673228] vfs_readv+0xc8/0x120 [ 344.673240] ? compat_rw_copy_check_uvector+0x320/0x320 [ 344.725855] ? SyS_write+0x1b7/0x210 [ 344.729570] ? __fget+0x1fe/0x360 [ 344.733024] ? lock_acquire+0x170/0x3f0 [ 344.737262] ? lock_downgrade+0x740/0x740 [ 344.741417] ? __fget+0x225/0x360 [ 344.744908] SyS_preadv+0x15a/0x200 [ 344.748598] ? SyS_writev+0x30/0x30 [ 344.752236] ? SyS_clock_settime+0x1a0/0x1a0 [ 344.756670] ? do_syscall_64+0x4c/0x640 [ 344.760668] ? SyS_writev+0x30/0x30 [ 344.764298] do_syscall_64+0x1d5/0x640 [ 344.768208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 344.773395] RIP: 0033:0x45d5b9 [ 344.776580] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 344.784296] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 00:55:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) getresuid(&(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)=0x0) syz_mount_image$btrfs(&(0x7f00000003c0)='btrfs\x00', &(0x7f0000000400)='./file0\x00', 0xffff, 0x7, &(0x7f0000000780)=[{&(0x7f0000000440)="431c55b6e213101c3f2dc648c1ce28da9cf9e6983215521c591b5c0591ecb55e8ef6da6762927f29980fcfe9d60516ad09d8817d47", 0x35, 0x6}, {&(0x7f0000000480)="d9b7bdfd983c1ce08daf9f00245b294a5c2d44e39527cdd63554b5be9b08d86b46427ca99865d43753585803b2e9b94c1ecd18d3d178452d59bd1f000b6069a3110ca703b29541c768379d30426913ee923b488469a62533728f438ac3980669039b32f7f09eb22b46df43c56ef958c82db74050432bce7b8901f41876fe5a07d5fe5da1e23f68b9c7e85f77c74d3a97fc1d16822511b70d152513b865bd3afc0830cc6e24ebce3cd33c33d048c6ef3625c02172", 0xb4}, {&(0x7f0000000540)='W', 0x1, 0x9}, {&(0x7f0000000580)="46b2d515561a0bc711edeb82e1a14744b45eb0fca5d84615503ee7f68623e79086f79126324989f0b639efc435602de80b2a237b60675b1fad62257feeafc0e08ff0cf4894b7e7c2b85c82b4abbfc2844f703092b2d0785f33ede232b464d582743ea0ebcb93ac57dbd261c5f0e3222d177dfa566b6e7ca0fef4cde802a1870a2fe1aefcc40ea6619319484b243613a97d475e730f43d02e4aa41ad7bd90", 0x9e}, {&(0x7f0000000640)="ea8af2ce253b13a949a1bc60dd6801b8e1b1025a2209d69221af903e92962f751e38b03f22275f76575e3028955e6b490f4678bb025c23ee45a51585886bc56f6a0a0e97d1c8143f6676cacbeb84080f439e1268fb9760fa18a0ff44652124a4386fb914de9db452c91344e603e6082b2dde2862e1", 0x75}, {&(0x7f00000006c0)="7650663416bbca941bce7ead0a3de203c2832248e64fd94c75776a41b4edc82020a9557beac634e9da06f577922f5444476c847cece3f1c7b8d51df1f8c76cc5e775c5e1949e60b42bf4828caf1e6d24381de1e5c8b0f72e6757dc9881bb0e5861b8feeea6380dc4b7be08b8351408632b43ef77107de5d1fc24", 0x7a, 0x6}, {&(0x7f0000000740)="00bfe2d153a5cd6433ead404c08db97e0cca9f488dd7fea759ecc54b55c6b29f54103ab5b443dc55f460398362b6d8c389333d38bb9f8cca7182ff62e3bd", 0x3e, 0xfffffffffffff25c}], 0x103000, &(0x7f0000000900)={[{@thread_pool={'thread_pool'}}, {@check_int='check_int'}], [{@fowner_lt={'fowner<', r3}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '^'}}, {@obj_role={'obj_role', 0x3d, '!]\xcf'}}, {@fowner_lt={'fowner<', 0xee01}}]}) socket$nl_crypto(0x10, 0x3, 0x15) 00:55:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000180)={{0x0, 0xfffffffffffffffa, 0xb49b9c0000000000, 0x1, 0x5, 0x1, 0x2, 0x3, 0x401, 0x9, 0x3f, 0x3ff, 0xffffffff, 0x1, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001180)={{r1, 0xfba, 0x1000, 0x1, 0x8000, 0xffffffff, 0x40, 0x1, 0x7fffffff, 0x2ae, 0x80, 0x40, 0xffffffff, 0xf36, 0x3}}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @raw_data="e9f5b5c7e97323000c2096040849de084e98de9b4d60aac2c518adc46a3923fdff23a9db71c4597c961dc7f0bb87da7d2f074d24987d893ef8d92577c9275f2652411e14577248d8a209b49345525ef4d14fad3d9306b36883ef60aa80bd79af097bc2036adde3907e4be9a2296d8b784413cb4e78c121ab75eaeaac225fa0a36db836cb76a86155a9749b0bf1536706b7881e3bd44da21edfc5dc9cdf4e532d01eed71c9f9feca548905dbd3700e98aeaa1f7c86dfa8e836b89417e52fb043a35544c066a53f3fe"}) [ 344.792520] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 344.799808] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 344.807078] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 344.814371] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x2]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:28 executing program 4 (fault-call:7 fault-nth:29): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = msgget$private(0x0, 0x25b) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000080)=""/77) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001280)={0x0, 0x800, 0x10000, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x5, 0x7, 0x80, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl(r4, 0x3, &(0x7f0000000280)="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") getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="33009281da387f05ed405d43d73e07061435676f26af83c2dc1d51a3d907f0c9006b99e099f8106f2f6b8c9940ddfc0c321c70752cd38560026966d261bf7abbaa85243f3e85bbe1a9e8bf8b065143c7e68a44617810f457ef17f9e2d201e05a946b6fc7bf94576a9f74f108fc79c3052d9dbc4761c759dd617726314520c84c6514ce86272736c3c53edf4f39f769b7b20919dec400"/165], &(0x7f0000000100)=0x3b) 00:55:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000000)={0x2, 0x0, [0xffffffff, 0x5, 0x80000000, 0x7fffffdf, 0x0, 0x0, 0x0, 0x2]}) syslog(0x1, &(0x7f00000002c0)=""/174, 0xae) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, [0x7, 0x3ff, 0x0, 0x0, 0x401, 0x0, 0xa79, 0x0, 0x7, 0x3f, 0x3, 0x100000001, 0x0, 0x5, 0x3]}, &(0x7f0000000280)=0x100) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) [ 344.940673] FAULT_INJECTION: forcing a failure. [ 344.940673] name failslab, interval 1, probability 0, space 0, times 0 [ 344.955017] xt_hashlimit: overflow, try lower: 0/0 [ 344.973988] xt_hashlimit: overflow, try lower: 0/0 [ 344.989371] CPU: 1 PID: 25037 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 344.997329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.006701] Call Trace: [ 345.009303] dump_stack+0x1b2/0x283 [ 345.012971] should_fail.cold+0x10a/0x154 [ 345.017127] ? mempool_free+0x1d0/0x1d0 [ 345.021106] should_failslab+0xd6/0x130 [ 345.025088] kmem_cache_alloc+0x40/0x3c0 [ 345.029164] ? mempool_free+0x1d0/0x1d0 [ 345.033135] mempool_alloc+0x10e/0x2d0 [ 345.037051] ? remove_element.isra.0+0x1b0/0x1b0 [ 345.041812] ? _find_next_bit+0xdb/0x100 [ 345.045905] ? __lock_acquire+0x5fc/0x3f20 [ 345.050163] bio_alloc_bioset+0x41b/0x830 [ 345.054317] ? __lock_acquire+0x5fc/0x3f20 [ 345.058565] ? bvec_alloc+0x2d0/0x2d0 [ 345.062368] ? trace_hardirqs_on+0x10/0x10 [ 345.066780] bio_clone_fast+0x20/0x130 [ 345.070691] bio_split+0x69/0x250 [ 345.074150] blk_queue_split+0x52d/0x19f0 [ 345.078323] ? __lock_acquire+0x5fc/0x3f20 [ 345.082573] ? blk_recount_segments+0x540/0x540 [ 345.087257] blk_mq_make_request+0x131/0x1ad0 [ 345.091764] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 345.096698] ? blk_queue_exit+0xb3/0x1d0 [ 345.100785] ? blk_exit_rl+0x70/0x70 [ 345.104503] ? lock_downgrade+0x740/0x740 [ 345.109007] generic_make_request+0x1f6/0x850 [ 345.113511] ? blk_queue_exit+0x1d0/0x1d0 [ 345.117667] submit_bio+0x234/0x390 [ 345.121302] ? generic_make_request+0x850/0x850 [ 345.125988] ? zero_fill_bio+0x390/0x390 [ 345.130056] ? iov_iter_npages+0x17b/0x7c0 [ 345.134305] ? bio_set_pages_dirty+0x8c/0x170 [ 345.138807] blkdev_direct_IO+0xb3e/0xdc0 [ 345.143840] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 345.148974] ? unwind_next_frame+0xe54/0x17d0 [ 345.153509] ? trace_hardirqs_on+0x10/0x10 [ 345.157850] ? mapping_needs_writeback+0xd4/0x110 [ 345.162694] ? filemap_check_errors+0x75/0x90 [ 345.167197] generic_file_read_iter+0x234/0x21c0 [ 345.171961] ? __might_fault+0x104/0x1b0 [ 345.176046] blkdev_read_iter+0xfe/0x160 [ 345.180114] do_iter_readv_writev+0x41d/0x5f0 [ 345.184642] ? avc_policy_seqno+0x5/0x10 [ 345.188706] ? clone_verify_area+0x1e0/0x1e0 [ 345.193136] ? rw_verify_area+0xe1/0x2a0 [ 345.197203] do_iter_read+0x21d/0x5b0 [ 345.201022] vfs_readv+0xc8/0x120 [ 345.204478] ? compat_rw_copy_check_uvector+0x320/0x320 [ 345.209845] ? SyS_write+0x1b7/0x210 [ 345.213567] ? __fget+0x1fe/0x360 [ 345.217026] ? lock_acquire+0x170/0x3f0 [ 345.221269] ? lock_downgrade+0x740/0x740 [ 345.225426] ? __fget+0x225/0x360 [ 345.228890] SyS_preadv+0x15a/0x200 [ 345.232523] ? SyS_writev+0x30/0x30 [ 345.236153] ? SyS_clock_settime+0x1a0/0x1a0 00:55:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = socket(0x28, 0x1, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x28, 0x2, 0x0, 0xf00) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x1810c4, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0xe, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b005) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000003c0)={0x5075, 0x2, 'client1\x00', 0x0, "fcd07a4bf592264c", "4a19be9a9df074c3b378cda18ff0e11b15aa5bbf35f9414cf214c67edf776916", 0x401, 0x7}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x4}, &(0x7f00000000c0)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x7fffffff, 0x100, 0x1, 0x0, 0x3, 0x7fff, 0xffff7fff, 0x1, 0x3, 0x1, 0x9, 0x3, 0x0, 0xa, 0x2, 0x2a, {0x10001, 0x9}, 0xff, 0x20}}) 00:55:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2100, 0xe8681) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x2, 0x1}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 345.240565] ? do_syscall_64+0x4c/0x640 [ 345.244577] ? SyS_writev+0x30/0x30 [ 345.248237] do_syscall_64+0x1d5/0x640 [ 345.252858] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 345.258052] RIP: 0033:0x45d5b9 [ 345.261236] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 345.268942] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 345.276213] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 345.283494] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 345.290769] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 345.298050] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:28 executing program 4 (fault-call:7 fault-nth:30): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) [ 345.370304] xt_hashlimit: overflow, try lower: 0/0 00:55:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080), 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x2000, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000400)=0x2e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001500)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a600000000b0a010100000000000000000100000a08000c400000005e0900012ebcfd88cea5f6b7ac8b1a9c510073797a310000000008000a400000000308000f400000000808000a4000000000080007400000003208000640ffffff0008000c40000000030800084000000001140000001100010000000000000000000000000a0daffb06c8c826cfaea64629153d09eec7"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendto$phonet(r3, &(0x7f0000001580)="56d5859ffb89290cfb467a57374da22f70da2b08d48ccdd5570289d8e7cb5ac4f93b1c2d168710e614dbce62a069e3cba342f6e7df632402e23b8ac9bda02b08a109f63ad2c9c8f1bd5f0ad6d1044005ab1e71a9d48278a5de4b4c2acc14e68101f2cacdac20d750786ac6bc7b02b840a94e2a5f7444aa2e900d44db63a9433b73b31cb628363a1f89b3e74de8203892d8ca3b28e4f794e5dea4910346bad152f037fc7c1aaab16844635345ce996a6416346a003604d7575a1178baf252d70cb403927882217140dc05aec1131c8aa3d69359790578c1316c990c2b9935d9132f43d1f9bd4b962cee22b0cf72f12755f3715b33663d8d8592d4a691300d94f96cc6eae8fa9bf09e592ffbe7f8280fef8e2ba49dfdf12287f8be743655c01b47252786b72270de67186b7e9688e3d2238d1f0acad35cb025241ec99511a6aae9f7ecf700c218cd6fcbc3203468d3771fcb5d9dc29dcafa6a4aa318c883d6eacdd7f452e120b1d2250d66ec4898c97e4439e77b97e2ba6890726c518df32e6ae8c159ce74aa50fd5f6c4a6cf5cbd6e2c10366dc49168fa19d437e6c5a564549dfc63270bb030c22a6e41b15f98bf69fc79ed55e15465aef8615752c35564f506319bd64cae423518cca44f2cbb9c445905ba5a8582d6003fdf58741426993b6827d88ef1664502d53ad3adb86c9448075f4c7c20f16fdb25de3039b0c84626945ef3a433837720ec0c8702093020c5a378f47cac437cdc5e9c38607030060ab4b5cfe311533fa353f7b156457d612b2734dd1f4a6ac07f2acb6d7a90f3d9e5334af918515c4c49af4c91c92d52b0ce1f5dc7bcbeb549dbd2a6f2643badc74a3cef450fd984bc6d6f6b1c5fb501525065ba702fc266eee872a28963fd313f38d77805514911ff2a07d6c40cff2f6d7fa0d2ab840add8ce53df9af6142a95f7df83caf9a1ae13df815efd4d553e5f964af5fe38db453d7bb201f13045e10d7178a0ba68a30b361dab67f1dc31a8370e8ff9b2441cd90e8f52e2990f1f5575fdffb844785cd18f687f8cb0dcd42963a2258f4cb8b1d40df9350bf73f3d22409b9770acf143dcb9c766f7c0374869a6eec77f795a3b7a3c0fc968d2412b12e5d9180e3a21bf4ce6a80da2ee71481a1f8a0482dfb678378ef52ca1d88740fe8cb026e2b71fcbb1f24233e1cf66a71b0064f446a60ac5ec52514a2dc96fadc2e3c0064ebbc664c587443b175a6a0d3ce2ec6331fa98eefa8a6e4dcfb426fc5010306c2b832eba1f974c559f95a62dc7b6e6161a978a20e8edd017c59b36d5e099a1c0f2fa21b803c5a53d1ea3ba2b7cfd0d16aae168bb3e790e49cc021515d814496422e95019fbf610a1bf68dd78deaa8bb6b188350086c59eae1dd4426925d7a2f6505380b8c6290befbe2c0605eb2c57be021f20c273603006c30b1d372b6fad81ecc1bd73b4e0309f1a270d38c819df6335460a068937a94e7b6ced6c9eb8f651e03cdd241f9e8d9b94adc50de4d62b6974b4e37aedade9a5022930b3b1add60d810bcfccdc87bb48dadbb40e0a430c251aa9792ee1aea5a017e56a732b7d6aa9e380e943fc5f6112139de903afcf3df79596868b9b934c2dff9d616e0d9d8d38c02f2bae22f5bfaec9e4197dd263c3a4bafd77d566268af90c773eb66a65091bc6ac1ca0e4ad88c5e1e12e0c00ed7b969c6dc50d0ca083d0ac44e77507f0a0db0bfade0007055004fb91fe662afe1aa50c24e67787e97e3ac956a7b18cd1380336079dc71f79661c1a5da33560fcd1af2109942e91947ceb8ab540309be20bda89fbc1ced552e28f0310605b96c2b9a27f249c02b1309331904a6def453991801d9eea153ca6e2103f579e95a4ad48f0032459b633aff07035a3cd1a83e2d5e4aded10b409552d7556dffd5a1653d3655939bca3dad5bdc7401919d64fa6da7dd10bec55e8a9149c614f2dd41a1945ea233dbb647f0c29cae455c8fbe888e84c32b756d27144a0ee1c70e57c8d98a1101777a7623c172261865125180a8289a55bd9c829c7a95a6bc8731e5ab7cf5950c1d17108f236f7b58e518ff1efc0f4c95262d18b9451dc9a2a17522357f454d1d5a4e9d98b75531fb9218d4e765b6a46293adf050fd43f1ed070846e6872e7539ac12886b5f0912bb7513384ce01bcc3a943c297f336d29a8e45e0bc2ea8f9b6bcf1b7ff48e39cae9219263970e026db8cd03d98f8c1d252996ec34b9ad1f04309539f70dadb5500e582c1c36d46a3994484dd1fe03f9eaf9c3ca9b847daa1d804cdaf84153a5bf081741629c9c3d5c02617ad70840a74d7ee4d51e1ef2f0910c3dc12758c91f790094fbbcc8d116b25270162db020da8bd78a962add214f25d011532437f5aeaa2184c23972a64a6221be74483eaf760fc3d3b5f305b16a7a44ed508aad76d4a715033e749d722793dd0aa146e6854480a5378543fc12db88a60d8ee6d1ee17edb378c8560c0e52c140100520bcf4a231c04d29f60b23aff2543a00f452c99cd4b950f27efd4728eae00b7610d333db5720de65d3472499758316f50cf3776077fdf75bae8adcf8404b09af2be0498e79740907f50378b8532007347c48177fb9ca9401f501cd2d4274ba61abfe941f7705d88b721c03ef5c5a2d8b26eb45d2a2965dc6c449a52b52ad3c59c84d6f7c95f00e1cfaceb836655e4c3195ea1173c05225b3d971b81b026afaef14f1c6fa237e8a7e55f7ad5016f4980b8958bf37edd6145c4e58fa7f9a04a12ca3b99acd0408215a63aebfeca005cd78a1e59a8bfa0155612afd6369479af3a2af053ec09abc07e0801631d0c9c7a8c0f947b911e2d5f1b743dc8a979ea41b6ab5fb1bfd09a4b1d0913f861f5448ba8638e22f1acaa6d2aeba9e33bdf5bfe0bc9d6ef860496bfb369debe2dc24f7f72c054432bf344c49dd74cf46613eabb03fbe42014113297319811dc01a059a999747d3358b7a1b8cedff6aca2d1ae6ddf795699c095cb0c2daf87c304256ee8732dcfaf7b6cafc1910d86227d029f086470a6a586f8b86e46999aec9408711c8ac5e46872a55c78261a3f8d125ef225225b121f736ad574e6a7d7680bc4b97a4e1fcc2a716f87b9a96b52a51d6e46f3279f98d42aa21a1a0afe0bc0307ffd6ef996df76f59d51b4983f70fec0bef11709480f29ce7faeee673702dedf475755c2b0b7814b7d13fa7c4b9513cf42349edc6811a2234e96d6c2c94651bb067b0073fa2bba9b61e8e76fb533779f84102bcf2c4d8682ede9e5cd5a46c08bdf2e3006b6a14339f855caa6fd4100386a92f994e128a88c3646bc18dc9879adf073c2a9701ac69eef49be1c9158f60816a25afba543c85774bc73572e9230acc7144f7c25a5ef660c2ada341c83f951b226254981610d64ed7a951ec57fd0b9d6330f5933a81dac06d82d282e46697198b90c0f49ca7c500ae6edf77751ca12445f666ce7dd891b0f13169436c3a93c320f60950d080d22e1cd0f70ca2c909be3111ea69554f6ff5308f7864e985e765b53c20b7e6dd740549d3384452af36415a3b43067e92665d3a2092bfe53838f06f6064711cc26238265badfdcc56b153e8cb45672f3042001b0dc9ba859ee4a5b518dcaaf93d88bdce4fe8ea9a031419fe0e8b6ee85f646230340f87d317d54048f695bf70a8e4de5b9d3d2a8615e0dd5e51f09285cb9c7b996623055a542f39732296d0922d996393b67c7308abaeb4da14abe8ac8347402e2e75e0111ce1007c6201953152cf4fdcbde4312dbb1bca03298e59ec48c00a9b1176d6abae5e3a391360a3e53bc2ede9d09c6390b480aca4153808c7d2234f1c2b4cded24f39cc1b13fdfc3809e1ee61c41c61cf9c7cfab1b838d65bd847ad1a25e1df7eca9933bec768e4c3adbefb7c14e90213b2c67e778de88f0e7e07d9cccc44dc4d23c52573bc51042875d913b4888b002675e4848804425143c3e96aa3b0e263182e3da5b32b354ef471ea73b1bbadaa6698a6e48ca4a24aa268975dc917c3dfea861f032b6ea31c5175475f4126a78fa5b10c4ac5a52191378550b60e0351f68bb30a04173c2871acb7f085e90592b77a760496f98a52499c3be3b7e21aa1cfba7293efc7871770c114a225ee8b041a5c19dad3e38cdd7bb974e2449c771db8513131c4e9ac6790e4650c34765caf305e467d557663ba72504f2ab779db99b1e30135eac253df9c455d497f1651ae25f1dd0bbb1112e6485b3e7aa48c1505d49164a7af5d16404ee722271f467c1249cc7a67fc74b45a9376ae7e1c7e5ea7cd78bacc521f48727526c37ea6389c43c9f8fe581b1bda8acedcba26ca451dcbe74aca39157a916522e225e2063baacd852c21ec6eb79d948a8e54671af32a2097304dfe5c10bd5c9918166dd120f16c267f20c7793e7e7521aec7c2818fe3d69cb7deb17bab2a164e63a9cd8701bbf11e4d3d06e2cf6c9347b1feb81b83a2b018565f2bc9afc6255b7714e9a1f7caf54bd2de9c81fe52e5ffc02576e269fe02d722216a13da894c4e149e534dd1d9a1a3ce320e9016ea3eed5c70e0a59a996209848d8ff0781d444c9ff9a2ce7de65ea25d91c6000f7e4c8c1f9cad77ad8c41cf42d2dd881d12a8179b1a7e47626056339fbd2ebac8db703c97b73cb230bd42cde82ab4a10fd5683fdf398c67ed0ab23871f967707747514a574a129ad1757b160932ba632f09d6b2c8bea8988e617f8b83c7c4facdb377b0fb29c30c3c2d7a4c5fc555ab26108268384d4fd33fdc3c344a06cc75da093c5b071fe02aad75dda94a44464b259f729d9787db870a0af40d029c53398fed7b6a025d047147e42f194c7ad2ca1e04ab87c99c6269c7215d16b0fd43a86e5210c7b40e62b2c9cb9aefc1e1d1c7f0916f47751784b809117da8983e6c3fc90c1a83d36544514133c02d56c84625cc4f5beba55cf6c9ab2d50ec7f8914797ada56d08873a184d91fb60914f1818d9726ef0d90c1c29bf2b1a69dd92db6c114ea8e519c8d6f1ace8028a764d1720857207c5491a3ebb30edffda11465702b04ca57b87f09f1063386bca549b7e439d456d39697a0c928ec7fab6cf304edcb76155221f1436324bd944610e03b6712011df26ed3123919784e6746b6b7b1da5f80b3f906a659ce31d7a9b4ff1658dbbe4c8e532e85c618c6f13fd697a25f6225a06e5f57ce422094c5f23ed74bb1dddae5105d8ff463402c15795b4b28e98a57a29f39ec20b76593e7b88d64af495455baeb28de11ef93b425e21a00996b104665c31e0f4799049befae258759aa1759ef4a8e2d90fc561d42520d6a6dbb05826f971dda5d687a7c6b45b73bab42b44fa035dde57225a95fde6b88e7b1837fd07d26bf2307a42c89f588c8cf4341914a6138a2efefdb30e46023f6e9736198f2961dc8c58249764c70d9822e9465f8485916e7a211c86efc92291a370fc7f3b810d2f333451866b52e4efe4fd09cfaee2e3cfd3c6f8ac59513c7d5ce0ee62ffd714a9a161fc479d6bb0c5f616b58c1afb7b08332931e46c8e4102bbe5686d0230f96d5ad4110978e4217490952158e7bfc63370df066d082144175f69c367f9142960b8753009f7da651c910a0c41faaea0ac7773c03e741c02c02842115236d9215f248be4c9d0991df2c5e56e480bfc9035a95eace930f8ffcb0c1ea832a04d5495ceb3212343a3c5b9e884d27c91a3de750aa4cc72fabc981f6a47f43b1065067e9ec5824ff64eabe2d6ab98974114fc49bc6a7cfbd3df7ae21073b730a9d64e50c1834411c74b49d8abf2f993dd85e7", 0x1000, 0x4000, &(0x7f0000000640)={0x23, 0x7d, 0xfc, 0x2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000500)={0x0, 0xf7, "31a259e6b9bdad05e68dd249336f77dd4fad6888a0fc6dfc695eb8e588cd140d47b921f4e6c637b3682f81b07f494bdcb8b43db95fb0ef73387dc7f3282c60666a6323f5b872095c29a63359a67fdb282b11ff3c706787b0e4f54be52718ca4044d5ac30c9e11080b6f9b4a7305fe4ec4cb573eae152fed1f3b94ff0a5c6b5dee18bb5aa3c94a87f9af7d9b15cbcea4ab4917bcd427a9daa4a9be1977e3d1c4067c7b714785cb4f0781d9947d2dd040bd13343dd4bec70dc4ca295da03da4ed229f9242dd8071968833b6d70057196fd441cf41ca6e29fbdf25806accc20f5e581cd4fbe3d90a6166f628c04650af9f03e43a4f8740c95"}, &(0x7f0000000600)=0xff) write$binfmt_misc(r2, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x1004) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2]}, {0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xde]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) pkey_alloc(0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x240000, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2002a480}, 0xc805) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x2c942}, 0x8000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/schedstat\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x91) 00:55:28 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x3, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0}) 00:55:29 executing program 0: ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x2, @pix={0xfff0, 0x101, 0x38414262, 0x3, 0xc, 0x8, 0x4, 0x7, 0x0, 0x8, 0x2, 0x7}}) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x5, 0x1}}, 0x50, 0x4, &(0x7f0000000000)="3a85e4f79a9d4fdb41c0756847998febcd41ca8ad356e7711d165d6ce4119ec6076df67a8c2c98230cfab43fc7aa453a978aaeec86b3338b5afa0b2f7c2f90f5171831f15c1b0ce177a1f68d31d2c660"}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x305002, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000280)={0x3, 0x5}) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x119200, 0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xffffffc0, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000200)) 00:55:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'macsec0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x80002004}) [ 345.500106] FAULT_INJECTION: forcing a failure. [ 345.500106] name failslab, interval 1, probability 0, space 0, times 0 [ 345.539904] xt_hashlimit: overflow, try lower: 0/0 [ 345.561660] CPU: 1 PID: 25087 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 345.570035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.579402] Call Trace: [ 345.582022] dump_stack+0x1b2/0x283 [ 345.585758] should_fail.cold+0x10a/0x154 [ 345.589921] ? mempool_free+0x1d0/0x1d0 [ 345.594017] should_failslab+0xd6/0x130 [ 345.598002] kmem_cache_alloc+0x40/0x3c0 [ 345.602081] ? mempool_free+0x1d0/0x1d0 [ 345.606060] mempool_alloc+0x10e/0x2d0 00:55:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x2, 0x46, 0x0, 0x0}) 00:55:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:29 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400040, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x20, 0xb, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) [ 345.609957] ? remove_element.isra.0+0x1b0/0x1b0 [ 345.614723] ? _find_next_bit+0xdb/0x100 [ 345.618796] ? __lock_acquire+0x5fc/0x3f20 [ 345.623314] bio_alloc_bioset+0x41b/0x830 [ 345.627495] ? __lock_acquire+0x5fc/0x3f20 [ 345.632379] ? bvec_alloc+0x2d0/0x2d0 [ 345.636194] ? trace_hardirqs_on+0x10/0x10 [ 345.637922] xt_hashlimit: overflow, try lower: 0/0 [ 345.640439] bio_clone_fast+0x20/0x130 [ 345.640451] bio_split+0x69/0x250 [ 345.640462] blk_queue_split+0x52d/0x19f0 [ 345.640472] ? __lock_acquire+0x5fc/0x3f20 00:55:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r4, r3}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r4, 0x9}}, 0x18) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb, 0x0}) [ 345.640489] ? blk_recount_segments+0x540/0x540 [ 345.665832] blk_mq_make_request+0x131/0x1ad0 [ 345.670359] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 345.675299] ? blk_queue_exit+0xb3/0x1d0 [ 345.679366] ? blk_exit_rl+0x70/0x70 [ 345.683081] ? lock_downgrade+0x740/0x740 [ 345.687261] generic_make_request+0x1f6/0x850 [ 345.691762] ? blk_queue_exit+0x1d0/0x1d0 [ 345.695915] submit_bio+0x234/0x390 [ 345.699573] ? generic_make_request+0x850/0x850 [ 345.704248] ? zero_fill_bio+0x390/0x390 [ 345.708659] ? iov_iter_npages+0x17b/0x7c0 [ 345.712901] ? bio_set_pages_dirty+0x8c/0x170 [ 345.717409] blkdev_direct_IO+0xb3e/0xdc0 [ 345.721578] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 345.726696] ? unwind_next_frame+0xe54/0x17d0 [ 345.731212] ? trace_hardirqs_on+0x10/0x10 [ 345.735454] ? mapping_needs_writeback+0xd4/0x110 [ 345.740314] ? filemap_check_errors+0x75/0x90 [ 345.744821] generic_file_read_iter+0x234/0x21c0 [ 345.749601] ? __might_fault+0x104/0x1b0 [ 345.753678] blkdev_read_iter+0xfe/0x160 [ 345.757747] do_iter_readv_writev+0x41d/0x5f0 [ 345.762249] ? avc_policy_seqno+0x5/0x10 [ 345.766312] ? clone_verify_area+0x1e0/0x1e0 [ 345.770723] ? rw_verify_area+0xe1/0x2a0 [ 345.774805] do_iter_read+0x21d/0x5b0 [ 345.778613] vfs_readv+0xc8/0x120 [ 345.782063] ? compat_rw_copy_check_uvector+0x320/0x320 [ 345.787434] ? SyS_write+0x1b7/0x210 [ 345.791177] ? __fget+0x1fe/0x360 [ 345.794657] ? lock_acquire+0x170/0x3f0 [ 345.798632] ? lock_downgrade+0x740/0x740 [ 345.802820] ? __fget+0x225/0x360 [ 345.806296] SyS_preadv+0x15a/0x200 [ 345.809926] ? SyS_writev+0x30/0x30 [ 345.813568] ? SyS_clock_settime+0x1a0/0x1a0 [ 345.817990] ? do_syscall_64+0x4c/0x640 [ 345.821968] ? SyS_writev+0x30/0x30 [ 345.825596] do_syscall_64+0x1d5/0x640 [ 345.829489] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 345.834703] RIP: 0033:0x45d5b9 [ 345.837892] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 345.845602] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 345.852872] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 345.860144] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 345.867443] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 345.874714] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:29 executing program 4 (fault-call:7 fault-nth:31): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000b40)={r0, 0xf0e, 0xd71, 0x6}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x8, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1}}, 0x6f) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0xc608, 0x4) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) 00:55:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1c, r3, 0x27, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25050000000800390000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000881}, 0x20080000) r6 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x4]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:29 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9e, 0xa0800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000180)={0x4, 0x0, 0x302a, 0x9, 0x8001, 0x7fff, 0x8000, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x3d, "5ec6405ab5ee1bd5acd2fcabfc5f062945106248dc4f2cdae628c739d6dae5ea0bb42654b66d22f1871946672444a733acdd9aac9c686b800f441d0315"}, &(0x7f0000000240)=0x45) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000080)={0x1, @win={{0x1, 0x2, 0x0, 0x9}, 0x5, 0x1ff, &(0x7f0000000300)={{0xd625, 0x5, 0x6, 0x3f}, &(0x7f00000002c0)={{0xffffffff, 0x9, 0x1, 0x9}, &(0x7f0000000280)={{0x1f, 0x3ff, 0x50b, 0x6}}}}, 0xe44, &(0x7f0000000340), 0x80}}) 00:55:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0xb4, 0x0, 0x0, 0x0}) 00:55:29 executing program 2: write$char_raw(0xffffffffffffffff, &(0x7f0000000400)={"d9de93a9e01e1284755da6192e6dc80d53392cab03311fd8668f056589c4ae5fdda3459649df33d0dd99f7200fa8c2bb686c2c1a2010bea86c045b7a916df1aaac1887ae923849beb7be0f0fb414fb780bdacc64328e33ebe889648f90a9919d837331ab3f6e1ece1e761fc7fceacbb295933c5eb20482e483492da7e5f73ff78bceea8a00380c2cc0bf62ec696d83a29b4cc1694facbea4a54b0e10a1ff06a622f08792c52d2bfb811c1b3e557c86057fcbf5832fa0a06f073732852e3a11ff135f58a97f0835074ee695dd7b8b040add97e4c108907ea033daacaa5b91a31ab948e093f77cb29118012e61dc0aceec53a3d9f7fe0f6c12018eb0bfd327ec9700c9315a3bdd3aff5774681a6ca172942f4eb7467c98d1627cc33a2e199e3ec450113af031b6cfacd61929d44204f7cb7a4d76317700a9c06ea5a0fc458afc185e769020ea62e64c6cc0105481c7b69a635ce3219db6a5c1e49a08bebb8db03be048113a155437b8354ca7f3777ab2aa69ef54c54d58da18d0255394fa7c194dc75a927fcdf0f13d22cf1ff702529c8707d4726d76fd088778b65289395d8e4fecb40a5b07402181571e18af9f91e122bccc4c47c8bf6e78ed95e2991dcce59cea5eecb6fec6c929451f17e931da7c3d16c258b6ace9cc56aeacda0e3953b8106793abd409a0614c461a8279cf23a81972f96582c8f390c4a0d7d0f2bd9e2b22ab6300ed57f7a8ee14777a86302f3cdc32c0bb54ca280d6552a2c70ec9dd73baddaf77defc9bce5752565adaad43f4c0eb73407fa6dc7ff29936968f6bc27dd0fdec04beeb4a010939e509ef59862e5a56d223caec93eb918108b2c72bde0e9078f605c43faf3a1b1e8bb4362c849a03750cf3156b352c9e483ab230b825da8f4dae859ea58028b8b1c745633dbd3882b9f475b38f8b995d427e4ab165f4fc489f8f8204a5c0bcc04587c6079e34d69a29b8193cea3b2c090bbbaea959302f6596ee788bb5e68d8dee0d5cdf84e97f7a3027bd9ebb80aa4c7373c6fce170d1070b014d58efb9158c161199437cbdf5545c29fcfa80c7440798542b2479d6caca0af98b2baff4ee11e0bb15266e43a3abeea1e72f8df766af2646fda8c0412e503b8a6a3b5dff305b4ce77f429acee75051c170806f7a3b0132ff01b66b515ead09cb0738fb596d97f3c89772993aaed074d7e403cd575d0297eaa5dc16451e2e23872d5fa726934306e9231f699d733ddf303c825d1112b7de59b9cdd56a49ea14b0fd25cb3be103b7710ef534aff155ddc4dffd9e4f41975d52c48bed39d696f84a145f1675d8061e53d3cb791b8f5fa583b01fba4b81a15b4e4581944e70b6e33af32e9021f36156b2af26240cdb9854eab3c5e38ffe5eb341a1575c9e3746d5c3a68a8facbecc1c936bc94f7df8d9db7e6ec356f8408e42699bd2a10a0ce1086784043ba2499c26b104cab65af98797564053eb1e6cdca7c35433f253e08e0ada57e5f65621accf3d302e833d7f4513944117242956de0827f5b99553de4fe4fc957a20d0c6811cb579d0da146bd0a66f4dcf2c8c1d0d6ec4ba5510c55d5a3374c43cfb7645717a1270d50b532250efdedcf887b58be5e6cdf8ecfcdc5751ed570f381d2b68650d39336710c92b345e5530a3014b2d7b394d007ab7b180ef41e282cb489f587b7d67411d111c932c691c1400f30207590fd11afeaa87ac0756ab47efcef566a02c0f8471062f51e5c3d74f5e64bdbf3b9b08e3674bff9b2947da8859450c48b025f9a5de149421f03a4a773616290a004b6644d0be4cc697695d82148312b886150870390678a5359a22a46e3f67ab5458d45a5efbe5bf8f750fe2f63a79ac5ae903a2d91d72ce11b5c7791266a0a39420963a129f54458b4660ec30d03ab66cf0a16a71768ba73b78e1f7164165d85ed547d9f2a7a5de75c9319afdc31a9dfec884eb2999b4714bfb1aa4513462256bb877ba31173aa45edb591939f8b711d8cc651092bbe42da9125ed77eb2582d9b640eef9fb86f7634ff658d2bfc6fe22143d1bf9ab46582f5c626e55022a5a2f06522435863304bb7b4977bbc2686460e4332f0839b1ec58c38922ea400e0ac45fae5dc5adc4f1a6696c0fc1b9946c177acaafe17173d5479ed26d727a887a4a502ea849218ea2b1a3a4faa8dacee3029531e32bdec4dab6b1b197d3d5f05b413d45b8a0588772e88708d51349033c9010707fa7f6ad67e147929d5c68638d75f9c8b5aff7854b8a3d55c5209bf246cbf288b608990972e2009b523432811c8f9d58b730c7c826db0a2fde533b98a01fe10da128f4ca02c76cc0a85851c30f744c21db8de7c79427b2552009aa8550ef4a9e9a63d6f967fb7f21d713e624e9619ffc21ea6e69a3411a6a8d8f74f79da4a51dedfc9b3243f1da34c34b9b81a7c50e6fe26d06011c0b6698a62e0c668171d02d6f84fac86813a96908f0371b26b2cdb3b1fed5ff36fb2e347ca4bd06946ba7e2d4ced23078379bbc663fe66c7c1fac4ad24b5c9972c965b70f220c70102210c440896afac1794364f4f9d90b3483ffa6e1cdd449955011763094b32c6a6e02359cc9134d95cf15fc0ecb5f2506e640aea6e467e05ffc5ee02821bd3cee8fd58416a6f939945f3ee4c926833ca25b8266c5b1ed5562e977e8bc9a756e197de0245c57a8422b807d2476c259b64df59d36a380e750c2fa186ae00bffec88ae14865f7d5504b8bf8429f65663a4bea2e8be3fb4592b422c617df4d417918bb87bb6a3495318dd5acf39dbf195d28d8af922ad0876e9299084f3e4af8d4551945d4d127bf84d15cbbd00edc9642ecd4d095bd08108950e45c94b0c987bb828b3891eccedad28d9c8210bac67da4fe05abc96ecd055c9a3c83de49f2606d49e805cc8448d91b4c8cf2bc41c114c669f16844509d6bc6fa63cc2cb20b7624d6c18b72eaf1b8fb0a258d9445080a2cdf0ba0c600b3a9e04f40f3b25cdc86fbb3c71b0f08028683d27fedecc6292aa27774ebe7ddd3825abeb3804399da3e5763f379d6582a486b81c24ab0fbc829ad0af46c398c4a4df2b3aa2895237cfc586466e761cdeaa2e4f320a9cb5b7586f8d628266da3646f2a09ee605495a8258ba70b12baeb6d8bdcc0d52b7b3b227652411190122f77b1179e3d78aad8d178a45e26e88aa4ba1d279b086513d4c46628cc9adb638cafa439c74c820ed1a984ec51e17db93bfb77a60907d67905ee2cd5529c8afbb093b574069f432be9b216f77f485689a937802a9cb7dfcf1302aa7bea99cf03f255a8eadb02f67d1e22887ddd86f43e3c9f49f24734fa5cbbb67c298f029dc792d751ac6bbc08d55f91d874729a8ace13edd7b064c8fbb9165a434dbdae8cc934becc1db068da5edee6f02ba4998130ef73822e7153eacf92376bf29fa3ede7f2366ee1c083d9adba47fbef53eb17c5061e7f274fa50ae881d96e4cc7c971d2d01468a8e4b80fab4d774855e0d38067d713f7086ffdddade6fedbf0b05f317f150943e20b5754b645e37957ea2013d6d7aafcd3cfa610bf16fe6cdd84b8f953c2b22f29573d8f141393c32fb3ade3405b6200efc4bf8f217437e4d0d6806c61b4808e2cc8cf1fb5c747684591d957f52f45c5424ab392e0eb030f3ecf2fdb815930a612c3a4061d1a0bd70094306ea12bb2da794797d30459b4657551ad1bb2474c2999d6a4c9aa264371ffb5c8948a966da9de49edcdc39bdc35d7791d63f89b194a71ece7a644ab76c88c36c27a11110dda18aaa2241b20f3ac5a1d0cddd1cd5b397d923d7f9cdb095b41b32b16d8d8ab3178064d181fb5c474dbfaf4b11779afffce67425766c407d42214e2d87ad556983b27d2a5d5d57719c0c9ccba5e3b596db6bcef40778824563fe32a368aa95e74c5a45508507f6e90834c5659a021259caf7ef73c333b1356d0446b19c73d6597224a0008eb899a8b9957d91b86a4ca8c09de251325ca99c38cdbe93a57cf3f5d4e01f44b5ad83e99aa5621eb866ce15d6380c35d6bb164a86e64b8b97f3b7658411b29b8dbe28034a39a7094fb50cfeba1c6caa5a4aedda0b656ce6757aebef332a1ad1ece995219c39b3fc3451d4be2b07d8c19b675b1d4b420d0a70c301c43e629ccb7ba4755f2b32505c56c66b9f8b61aa11f433ea8708ae0124b1971164d81b18c9a3b525833eb4451f3a8b029579d350f2277b08e38e77585c2c5055160639763fb6dc1075591d0a0ab0c38a17348a4023083bcc5a3bd594afdaad1be88df09a6bfd3aef316f5e2d11128c0183f34497e03c2977b5de46f641c5fbea04ceb5588e0bd0daa601e99b53ee9dca60d7cdb5aac5562d2ef6c6cd841f2999cd3fb06bcd3f923a58a73eb0c685061132269a656ab903d519584ca6af8c33168b42d0a908274691e412c275e0c7b326ba0af7eaa3ecb6fa5afe7517eb0ef5d50beb06055ec19dc92ad7737c3301bd83cebbc01c163e5150197aa9df335f38be28e2c63106d04ba85f0a4e3fb51003cd62f078b30ead1c61e5587e493a6f11f40333f4deda678f8a31ec138fcc492659ab024257a37c07ec457e8b3d9dc8a155a08a08b03d2be54e665b204d87d5ede50c34c4b3da8a7e48a938c544ab2bc1a13ba1eebc91e5076691fc1c9361bca050b3b1a1c89439add0a35ca21f8aae9d4f2914581619db8870c5658d8217c950fbe6fb42dadefa5c5e2cc7400722f134074e2354e803081cd7b92b83927367d4c07528feb46335b1e79e46e9d229712aed5d8c7beaea62bfeced5e2da230b19e8cd18332446c4be87c0ee859841264ae1ca8eebb08796c765fb3e07c16c0555baea5a9dd6737ab6b39f1e8861711bff5b358becb04c1b3c24afabeecc897aa1d4e8460eefc17b1f6962f3545c9d7b8c7794184a31440bcc52fac2f0f7788ef7c00be2f90af3925456995975909f53735159cd51d24449d0139888f328761ef9d5f70a852ca4b94770289b8582abe5ad7a2237ec1902f7f0fcd73db9911ab7187612c9d5bf0b0c5cf9e7f300d315508de1538ceda7b7c495f210f6791c15a15a132b8fc654a4d84e46c0f3ccdd9be681e76f210617291ab0ac1a749c15ac7e68b5b4bd86387e04ec467138ec0237d1073bd4e65c36aa1ae24e356fc73faf4a572aed092245c1713ea65cb24446f683caba35b86ebb0504d268e7de873bd62b03f0ef4669455cdcf8995568abdf025e9ff18de56059a96d9e5c3d130a95c9c27c127d9e32435bdd598eba347659c44cab0a8915519f7235e43daa8e1bb36819aef8174496f56f0f7a7102e2136ea768ec487fbb424ff60c6ee603109138c0ba2caf3c15ce13352a5fd2ab4225e65d6aaadc64246e9599a974cd60cc7f80d4ac2184a92ac31c03d4bd0e525e214d380bd659aa5117c3658305ff17a92bfd98a7b6279178b268de78435a4af8a953f89fb7b51bcc1ac926632c34ab72f8a55bf9c5d2aabc6c44c0d0ff3a40a6c8e6c769987b6fd2a85056cf7b55663202221e01d71277ef03e57944f7ed83ff91c0ea991f49bb338b83e37af94afdb48b66c28c938829e9e61baaaac9b4345cdefa6ae96b78d32594ea75ddaa732c0da1d21580aba6441dd1a78d048c1841abb12c2ddc7152eb445de1e986db28639c0e9a64dd357923bc3a986430bca42b30275cdab3fa788602f41e8b377575b009a37f73fd22d6a21c91b6caacbf0e058c710354bf16613b29c51b2e714e0f7e9a0eaf61ff3e932373142f11b812d6c0b5281cfb6023b69cf45b0728cf26b8d042559adc30cbe13ca35c0a55b9da9e598d39ca500bf80ff4e34af6b2af8bdbe23d212072f275afbfa1f8bf836ed355cf31f5a48a0973e80a96d56f3cb0ccd678fa38e29ee0dfaa454492b35db3c9624966061773abe32b9f6497baa90f3707e3fd1ca66145ac4ad98288305c31c0b93dc992264c447302aa30000f365b57e428d1718b78d29f1f355a5d13ee62241cac1810d8a41cbb808ca0537bc16f53c18708eb607784065f5b0d8a1f52272d37daa8e2051e2e976a329177409c3699a482b36bfd87dea3e9bff04851fa84d0cbdd5be8a6de13efb0bc03763a246908fd210f223bc5d1d294006d6c21f888ff0843f4f3d2fc0c09c7a974138664f5f5bd65db699135aa593bfb33e9ca17a241299ae4b1fc02c8784b9d7ef35217c4a0deaeeac5f9857dba3524c3f67f201182371d08247e8a1ccfd9d32d379268f73b34214eb2c950ac8d1d12cdb3d943fabf1e34994771ed753a89fc5d08f73762b3e10b74639ebf29d374a352cd7532ec6981008d50154518fac816f34caf9389666c2c356fed2012161dbf1674c0df3595988bf0b839f4114e0ef1deaab4e36ab78b4faf3b2fda7c2f33708f85cdc0b95dd7c118c8d5f996cec292e7916e9a4c712aec660ea592b1b7c15318ac22ea66ebcd0061add6e7f256770f54dabd2ea5f7fdd97f2efe268ab933ce8daa033fb0814aa9d23c4f183723bdd85e4e56a8d4b063a4528f58b031862d83e40c78b7209a21ee8c3844443022df3eef5175018d18f1323e6425fa249f1b682f35befed7d2a56b20ee1ab99bdef65eeadf25f16f2100d22cb7857dc9aff24ce75c484b7bcefcea4a6aae2a746229116dd5dba96ab39061893324a2b957762d59675db111000d6e453eb4a9b839c858ed497f25bec74cbf21aec207bac7b96a0fb2cf1e67de359e22d9f9f694fa20b49586b171ac0b0e92c4d25619d3bc935384920768adcc00f155c7aedbbda7cf97074a2fdcf7c140d4debf2a1aa6e1a7441b17eda05a05aff47e8c5be906b461f15428e27d414b139f71ec26a986118bd16c68c91f53c1a415e958d31be20a46d421086c73927209529433b3d41e967fcb637da17dd50c8b0c8758ad87479cb8bffb24a8ae50c41dd45989bf22e81ae2cf86404cf9d258f64d1be54238e9d55b1ede69592707d4f3b58d5cb3ec8b30df63cb0cd8aef17765f5c5ffb39287915966606ec13e413833d853dca05883b05d5dfb38ec7deb934e74128636ec1a04f4f521ab7e2152f0aff8343ec43164ed5e8c4f6c6a91a7f6e555e4a039dfd7949be7a2a21bc7599cff8350eb2aa584b10dee676ec9ab30cb40a7da36c0cb545db9f05b7bc9691b8ed87555f386d8ae324a21657d7d1c4679c1ce25f30443156ff79a90caab7706c732e4636cad6d002473786615081813dad60357aae138f795036a7b214b33d7de10535119334f4a157ad65aefc926d06933221b6a2d49a2e129665cd217edeffff8f11b2deb5e3e08efd16c1e0e0f991ec57f823071b278602936aa446ff1f1d031757b190bcdf11ca3e8c9e2a90aa8517dc6f1dd74ea0f49093db121b4ac5e551cb8851eafe519b5153d73d826e2d86226bf119820d07a62ee4dae713a7996dcc68cd837805b8c366c232adfaa55f3f85bd0e64ef85f105a4c486b745ed9b2a8c8120d6a1e028fc9e18344ebee9695568649eefe159f08adc37ac34218335fc02cc9dbfed87923cb8b1258b92ddb6929fc1db30a9d3e11778a376ae4a23be39238e37ce8fbbf0bceda074d60e812553b6554be5d63416821d908fe1786b524216c9bd6adc4b4f58be987fc8389f800d8d0661afff4f0f619ad812089cbc0e7113e11e14685d32a4a26447d497272f39ef4777e7617f113a0fa44f94f9c505aadbd366ba8d9f8c40431959e7363c3b395e51bce4e34eed737f1c5f136553b7cb2a412f9a5b193818e146cbb529f89b8ea61a31132a5f781d17410611b8776a7f5378049d0ba09ea5c32758efa6b0dd18c29e2711b706930e7554b8d8406b22ae7ade92c9a3b8490f0bd175544225050189e8e12c1fda693e82f41f105292fcec82fda258e56994f660abfb3b0c003c7ad343f5012ebf37e17c0acbed7da7fcc1921315c773c012b6f03daa4d5754a32c9e81c83b5c8d253a6b67ca9682842ae55bfb640e902e7f275104077c7c3b68064c947d197791812ae7b4403c6eca587d94d2659a0d8a323413b12ff9da51239a8df6404e6899a4322e5b60e28c1793a258358e32be41716861860590267b02a31b015e14ce1d08dc86eadb6e9a73ba2c4e93734019e7f03520e4bb4ba5c26a5b0d4c07d26ef5474aaf5703ed3408e89b1db7dd0fc91e40071a2e02f702b20956c74b9b0bb83326a1392dcb9feec5cdd0302a5fb7de86186d3d01e2d368faf04a7ad9fc6a1844acd992d6f3909f081a56cd123acc1a6165ba826a21917e80292f4884072465ed1fc3eb3b930ed2a57e08e390c77d16d7729ea3beb8b682cce7727e9078054d74d5c78b86e4e02ae28f3fadcf586a2b7579b3529fa6798febd98359fadb456880b94b6f0d4838ffb2277ad2ea546a9109ce39ec1d4fe31a156ce83f60131f7dfe91aad78a6f6a2d989a4728c5b4c00a594691d2a3217f63b16b4a07a42b5466c4c39ef8f1677e0b78bd297cc87c2a501d65b764f6b3140e2a813722a033628f19599b1d42ed5807b4337e3c2b60602fa1a9e9bee72bab145332c7e2859f3e7eea484fab69c2fcbc185ce53a2e0628ab347379ba931501dc1a0f2c31ed0f3306cbf997898c25583720b61a8baa644783506d9e205e9c2d892a96b0710e25652b928e7cfb987bea08e8ff7c975d1112c50482d2eb342b49bfbfce30970ab28e73b9d5f7e36c970921b57b5251016a1bbd8673d1a900db27152ff419188eeb683484b40cb761b0090c7cd86c80fc53b0befd7719f75a3844493c3cfabec7fb7319d8eb4a44a80abd8b06e70efb553796df90b591d871d7b6cec0b538d8f101114d2f93b209ad49b3f38ea6c7456ba2bb82d5fc2493006de3b9737f09cde9e1e3cbe1485d7bb53311ee56981619884a40fcb15d6d4c3d3cc7b92b5ec1747c79c8f9d3e3c8351fd9b7b2a8059b0d60c85d8ff042b9d5b0f9e977bebb67e68842d435a410fa649601bf7586365dbfa52d292b07011a7c44c7cb1a917bc366837cd33ccaab0ce5244bc02671c5a4784e1dee736ba9a8ab0e8f8eac124fb6c83268c945fba5cc00b6d40a0f8d8ffe6ae6b291048c2702f9d64ffff411ffe62c4d7b72605a6016b89c917a3f3f86c12b434b05d9aa3f3666e9032e89359c20e08820c9adcec162559a691af9b735109b8645024a9c679f08fd6e8d8a7289559f735a751bb5583118cd6202995df06308215b2c86c6d2e641a016c99fdd11f0b210b10b3c4c215b21eb396d95e0ee51e4124482fd9a2b246acb984d374b3ed7762c97c83f8e6c24f7bba75a6053727787294c74224075b67b669f3d792df20d3f28c53f12539f4bab3d3f056224e8383062b2a2f1ab6b75f127aa0fd9f6cd68fde317bc4274921e5d69acdf8f5e1fa7eed6e3ac74d6b459e410df60235939a83a178c8cd8cbbb55027e0b4b96f8f779e4de6b040dc975605f25b8a0241ea9b1db6a29c96d0e23a09f1f3e7710aa3c7b909084fec2cdf8806544ba2aa4d5fff7cf40a8769858273acee2d30c1788a2337e01aaf5ce20a1ac9680d428cab7f7cc1b5e04b8bc20945b0b9ff68032f5c4da66f98f080b9f86f131f3f487229d6718e1e3999fa14ac39a57f1b92336783992fd05d16008b35628b56a3f8299d2ebad29df956e5be8d47fdc657923541e5a3a2cadc37758e51034a6cf62761b259c4b68884a8993c5f27f53b51a82cc1ff53778e1d448150e78324c0920e878d12ea62222567e9449f8e73b34398856720ce6f14824047d9fd1ee5b9a3155fade1f842458afed8068aee979bdd8920828f4471902650c8d2b7581060c6772fa5260ee0227b2a0a81ec3d9f650d52e366a6c5957088344c06e28afe566ea49189c7da30f0d63c1b96dcaddb4b104e09c6a8a6845dd3f2bd24200c2495e617f2e573f7a75d6daf0f173fca2536a8ae3a65ab652b2ddff1944d3239e314b9ffaa232ebf127d26bff627ba64f9dd36e23b6b95e826c3ce97349d0713a735b204258d2992a2b2ddf7f2eca15bbc32e852949cee387336ee1e00ac377ed7d3af2f395dd73e9ad8722df2cb12638f218c20bc41b88946cc3a4d14076bc442f7a7eba5fee10a75829fd008436699a1d8576b6d9673312b866a54408bf6e63a2c37170d39559831399006382d9b4d999f2e4a1b96d4596bd60ccd23df61f1a5008fb41cffa36336fde3177501c6720ce3501c997d29aa150b4daa44c1384c4f1a050bf2503d36a3c6ec4c5b9627c7619823669a728345c89f2b9e8986db7befe84112849d612b47fc26a07f79d970330449a087815d12458d0dad8ba66e44bd81c1abef2400c91ccec975c176883c2ad6fb2b0a4eeae7c91bcc13ecd5afc1b84580e0309b6b11dc304a381cb611b401d566747cb0b16072bd6139dafc076bc3c97474fe1319afee548179e009f2e837d73cb35e96ab7dad33c8f3e6eb3a2582ce69ff4992b347a780663461c14010445d8adb52299711dbd298a05c3ea6f2ef44d180089b5145ce25dd5012ced3f3ad91bf6d59f2dcf8630d7106958a31e6b98fc790fc745a8be2ef7ea5098206572df6a9bc751b531af1544264685c84eb339ef2d8a9ac678bcc3a7336eee44fac0093b38b73131eac4b2607332559b40c8104ae82147b6bc58a529e03a414757317cc71629513e1d2bc6e4cee7236d1e9d0f97b7946ad903d35c0b8182e78e40ea9cad4a51296ea963aa502167ca3018692997b8db4d1281bd89f57e7aac8838a0cc99389a7d841ef6faf23085c3cc23549e8ec595af0a858bee06c705119c72da16c78afdaa97844dccd4515c71342d5fcf1d6e7d68c56bdfad4f3be1aa14f3403b9b1a56ade7ad90b76179ad269d4e846f762af697bbb3ac3b8ca8a8cfd9a6225d796651cf7d3c57bbc43defd4a4caac75cc1f9cb303177d0d53b63d1a7eec00846b083d2b5fda1581c3c93ad7447484fd4e24fba5726c89c91254ba8cff625c48a0a5f6f1ddd9311378eb3c2e5ca89d937aac0c5c8ab4fe6dc2d4061c1a64eacaf4ec918e9d5d79b961fc1e206051a73a7808d61387618cf9f85c2f039a9ddcd201615f76f58a549826bfcd967c53428afd6c6f54fcc8d5d26f15eaca36b621fb50015003816f0ba033ee16e864472734edb1727080489eb9550a28136adf639938973dbb702ede6cb8df816bf5e84ae631768d4db739512a543078c4f4f6dacf81ce035c1741fd9c6e8df94c96208798399e241d5ef570a55ae3450e41dd6bdad6bdf5f1adc2ef725f2a58794685d2c9a4c957835a6c119fc3623e7ef3284810410208f76addeab98c8214f0ccc718f7245f91585fda521be519e55ee858ba6d9b034785268019b3531818a4ec2e66a950a13fac062acb8ef88a18295d9771b98a503b3a2c00e5c57e2c2cb92a860de733f4b3e7374b7c61a3c2944e95e32111d63f6a9b553686c1203ee1f7424dc7bc0f9c0c25efa25dfbcb859e02913c5c7db3b49d913fc17b4645a17b760b0ec67ce3714916bfea0435906e3f5e3f95c3ee5b0712b09dac0f83884c3d953207df0b50ccf216bf537ad9ee4bc70fbcd084f82082afebe71ad3a15bbbfaa8dd6e1072885d1b15edd4cbf30ae92a817546fd10d0d40ba83c55f072d5e0b71131967beaa06c6cf08729a0e649544be4ec10acaa549273ef17a828f5f12fe362ac52f7657ece7ace534a7b39e57e3c39f40d02a4117b0d7905e081b3959240729d6cc82098819b0348c2cba65c0be7e24b1e8be01fa270ace86dd69fbcd85ebcf40a1d4dc917034e41991e498bbb369b953b0a68ef612003b14ccd403aeea9d8b32ad07f36c1d4dcf7df0fa915dabbe169ae967851f68dda0f20c5d6e707b3fabb3edfd729c00118562e2f3e2a5bcd95eaf5d9cb6974ffe66429a37621ae9e9fbfe6d04bf7312aaa221aa5f7efb74fc8230ee9d06ca033f7a113fba189bbd23352ff6b72549fd79cb4ccfd32c73686316f0f696083d8609c74f984ffe111c19ec89c8bdad253449be0db0f457d0df411e0a53fa481de17ed2f558669b5cac031cd36f6ee20d1d02b2868d28d3679e4d86987227923721a921050d6e9b7debac25a7ba53c4235986c7e7685eca6daa082400947aeee8e8348c628451ad0a4752e782dd820b96725db08f9fdaa01fb5741e54c1a5e4fc21e6e1c3c42aadb90ac0362ae322ec870c97fee1368b25a103d82316d987b828e46fb6d019252b12e7fa81fc057e72981a293f4cabfce50ff2101822ce85a27650a2d294bf39d6a4704f82be8dd0dc01d5c3721e09b4748c5ed2482e0f8a67b61cc7fd0a8ebc636c1ae9215facae97c68d623a9ff1fb73727be737fbf7d2f36e221176e300342e442bc8140258c4cd1dcef1076892f156e106ff1349c8ad6e1e503d237f05e9781aa932629bfb0906173f4d730aa2f74a58cda7d12422f2760c0cdc745fc1a2e493122c2467a09aad64e880866dc43d1c2e2502019479c86005dddc4b26ee96bcd6debd228cbe3e80b4b8f0a62771e8e7f1c99613f14c82cb32d564d8331fffec9e56e03a4dca1991cca9071b89766281907daa000655243a9d5f9cf606fc6fe44aa92daff099e20fd2d818fce28b7fe5ea910cab69bb067899a3e8af1cb6a7c96afbc250b9f6ab1712aa35bc647957f4890e29a232651bc7ee0211d73ff20d635e2ae904f63503f68503eb45ed051f190e2b30830ac632cdffa42d5447fc5f6beeb1279a24f86a6ef380a87358d7e3d9ea1d8a78719e0e5c1d1b3434a1a0f50b3fcb01fd804d882081c8f25fcdde83e4ec172c63503902d40a57b95eb2c4ba92087b03d7c7dc473b7486d8284333ed164cf6281d1bfda8d7336db0cf1ebdc24f3848128cc95226ed954e9ce9fc1b46669c17fdc87686065c62328ae6ff8d0d4594f5e66983602e90e93487eb655cf2678becdc78ac755d50b375ca0c29f712e06d3da252bb5a1948932426845e65c7dd8e52cd2e436a87caf806657b8134388a2d3c798e89ebc69cebf753784ff756c67edf1917125edaa738f98cf8818e2611ff494454865552a2d48500f30eca18af67374d00dd7dee2bdbf5babc5f1331320108ac2d898838cbe828e37aff43e26f5efec94968aa9ae0bf96523c3392ad874939a04805427a0f32e08e523d5614816912132f0d0ab53e3d49c5fded8a41f0fed5388c0ffed0c9616c915950ae372d0eefb3fece99cfb55e85fcbb2977613142150b2a75e0cbc5a6257519620f14a456385b5b5576c1453dd2711beee5936110cf7a99c47f8d1e9bb0a69488f7d765123cc60b8b75d63b9cc5a9e6ac07408579b71143194623c13933fb38d1671341056f3e37cb83bb1e2670704d73f5229dbc4c7459ec82eb3b83e9ad8cec691b2a53c34f6bdb0cb7f9714fcf87974fe3f51d5f1967e12bf0a6514015156fe40fb78ea94a4ba9aa90ef01707b07f07daf625895e63e99c08dc004f4f29c47def91bc40db415e88f01d26ed1d80030a70c4c6a214f823f13c1ad8bf453b6b58b86379573dcd2ae200a681244b8cd454bba73ac5316096510013a42288fb3020da4501b2f59425242ccd06d8ec0d856af1a25de3589d8f63908c33506f954930c514c4fcc8d7cc9833ce8e1db5a17b9581b536f5736dca9de97420e30323ffa71c980783c33cad2c6539776550f59594389e0e015138ee8d2b14bc174eeec1a991e8d7ca1d42c41c11e572fea031af694b64c8a17fc0889f270506dc3596c68b95bbeb5b915eae0f3df4d6e0dcfad19f9aeaf1f3a2dd3cb099ca12ef93a34e38ab66ee1f9d7c5dd3f7ba41c1c4c3e0d82c47cf531fb06a5c3f3241328f5da6cb75b3eb425c32aa8208b85c6696f73d0806826573d9c3d01af2cecc9c24927f7876d8b2c843861e11abbfaa718ecd445dc9c8681dac7622800c2deee1237c6985dfa22aaf953f486543bdd30fce4eec63340a559c85ce2cb8b0db4f95008c01b381e7924a87ef282911ac85a88432de741949b86ef1492be44936fc96f2e986ecdda8465838743e75e1cd48bd42d1fca3c61c856b1c943c8a38fb50307ae5f08907098cf9413e228b8880fd1be3017647ccb60a387cc4a0c0c87c47da50366290a380c84e573527f4a37ae23dfde4852fc1b6b8e2f52d96a6d127afd15a158a4f15ec1ebe646b848a2443967d7dfe73c240f2f26f23df10c0001b5d817551ea520c4caec3468c78a61e21994847668cf8e55178b297fb0ad935c0e6f73f55cddecabbceaa6a97749b8a89d3c9849e176da7d8bea46eb1a8cd2c10d3abc2e5cb855942b2fcc25710db9efc44f6a1a274448c052b79137edb413143fd122992cccbf4e04b30ddd4572cc5d7b85d15139672885899a732abe05443ea6bcad3ff8b86d78290e63c2c2b3c9ada5b3813d73e3284086d87c8ded53e8995ffd1a872f2c6e8c7df7aff41b859473fd43c4e0040e22b64fcd596c0a1b307bbd16cb12c323b5c91b2c300496cd49f4689fd7bcbcbf445ea864bbc11c30168d45de551ed9ba1b7c93a8c1f9259fbe0588d00d6efa9c2dd13fd6ff752e8bfaed06ad55c4fa815ab18cd1fa1f7eb22a58309fdb324bb25c6d4ee2e93cf1b9fbb14fdceef0df212b4d0ad1a01460a48ce1cb1b3f210f568b9bcbf7177a7480e559d79776cd2d6b2d495e84c20cc9590876dd2987fa3bde7dd2895c2bd3cb3400dd03ed444586df9f8675787bbbe00d3f99dba941956aad35e6a6424f4adff59eb9273ecff948c1d5b4b10dd2d50cd8c13ee5bea98284d555f3fa04d6c5ebc276a79cb8eb47d6d1dd4beb802c7114418fc5c95be1094e636d13e6455492bfa792496d4d4c85fc3c2d9bdbf74c4bee9c35f8d64559f8fa04b7504f0a41c3c2da61b8bdd7cd6f2b8a9ac9c42cecfea87b4ceb19190b75e8161be3d2447104c2c92f7308907f6c768b0dc6a1d4eae19de6130abfc4de6c28764cbb55139d452c8a3aeed5d6a3425c56eb69f134553bbc3cf1a9d52ebb3643db3c97dc3924797fcdb707dee0bd98c501b44d87b23dd0c216c51ec0ae765e09517b5c6f51c2b318ca5abe4ef57fa5a05ba247bebdc4f25d2c1619728764ac141534b7119ef72c69736a4e094f9f9d725658f2d04debc694979d3cf5bf87b06f233e619ff7f9ed61df99ce79a2ec053bd9698023c72948d3a4b23af706d2128b1e912f027cb819252856cf97ecf50ed50eb272c6f32399058c040ecf3e9e86ed24c2b7354f220a5133dadbb5848552b1677de15fb3cd04768c88066c3f15415254ca20a241b9da529114ace834a13ba156a399db82388d89573c2cb7cd70837b99425c93fa40f5fdce62d1218ad7a190de3f68e785173312757fa28dad925f01a1b594cdadf5726bd2c937882a4d94f05e58d03f9d3349193dd33fd7ec4fb834f3d2f42386276b5bbd04cccc167271df6403072d6a71406642228b5e2a27cb58fcc9f02aa8fab6ac58de66f6607843ce3f633e88b1b358d0f55435694870aef4fef224e9e8c7604779f174d36b8db41c9d6c9de56103c2466a5676f8009c27e4b8abf3dd4e9af57cd381b6283b4b58f22ba406a77e38982765c23178d8815fbc0bf458b4163e028ea3452c4c9e37e748c3d873c408242fe21271c09a5e060928065b77e53679b8c7ec3324bf5786eb12309fb6a1cfb2ce1be257de08ca3def9f0f6a89de2f15f8341ca0aa7a03526cc0a9341d53df452f9133c738177a83d1a6482f8f732849da0e742e3d7a5b1cbee99c6b79c0baac9eeeb8bee350949f35aa0c422b15b1a2f51348b0dbd05658c64341b973c80e68c4526ec7c490aa839ae72b1f581bcbaf9dcba131f861016d83214465bb2480e3b6f29d01b394b197bb1f0bd63f78ac2b322687fc331627e035afa84b7ad626b88a770c98b2234ac9960697f9dcefa8151b8da128a56c78a63d8386006ab0a141f72293edf43e8ce8606e26e2b6a59faaa10c92b4cb801776f4b614fdc5a5a0dcd29a2cdf3aecd44fa70a8724776bbef5860e7ce1eb62866442e391877e3f0f7e4c5c79272b2b916a1209a460a2325ae9d8f671b1eecafdd913fd5181317c01c91a84392b70e8198a3f9182606a6c75ea96626c0e7cbc9ccd3439232a8e42402dc067967a9a7c909c6f12b4bc0dbb7a94fe300364a717f2cf418c4da61dae4d3f2b4c507567a941dad45f869d4d6d09036592b440e84e684c1379269407de33ffc2134b43bfa5f4606f24d7d833681af24f89bcd489dee146881a77dc16ddacf6446ff9c7d41f66df1528829d6f01fd9213477bd965c895bba9fb099e274761e97c5eaf2c86cf9343ff3a4c772b13ab58ed4f00f9e454b6cfb7a0d1656a6859f87a9661c81e14f0c66af3a938e6ae6c01234c8ba1b3a679896b44772409d96e813cf065f3daecffad48fb8f8464cdd905fb20de2f4f6677ea5c3daeaa08206af3103eb9a22ac74c5c951ef2aa3647ba0458bec966780f2000d2026af6257290a5cda9d42da9dac3a6f53b949b10c5bbf9f4ac9bbb39f1037bae9fb16a5edc6d49b0e187e16c7154e16f50f7d7844dc3467448edfaf06bfbae9b7d94a3f12cb238959859ec5763d139f35ca8b50730270e0d364188be1ac2b24a0b8f5199ee14b9e107479f251e7e17f1955da3f1c87fa1098d20d5972b782c2356e1f5657e69c2e4820f3f6a104b30a2d41b61baf3f6ffb51d8fa88e873d176544a0079cabf6614b8b51b48e95ec72efc27711dd17938b1e029394de45f52576133f230f0d66f67830e53ec4fd70108f023e5314b2ef8a0edd190a5f52923d31cefcfa35060fd0278f0ed26ddc4fd758831f6550a8ca0bffa2f28423423d4113aa1bb74fd6248d9e859e04524c5ec70b5926e261e46817b3498bbf902f3f058987c213da204307556dd4c6e6cb5c158453ff539db8c5463f229376ac6a4a67dfc0d229538617decaae745ee209f63b3f1eddfe0f6717499b01a7d6a9f3310673168737f7475de775a4b1dc054eb731c4fec89d0c148313eae46ceeb717edbfa43f3b7b513e07abee5902887ed9054c8ca9f42e636e81cf5499c3f88ed25d5faac9692240edf2b91200614e4d83e8ac3c3c1dd36fb79e46ea0860db926fdc748d669e8dee890dd8fb17c967b445240a4ef8b0af240c9f7a3ef30a4a075ab8190b98a1669a769b6be8be0a9fdaf39692777d46270de05efc1f2789f22724ac06772ae889cda9a045a2606b10991308a835bce30166bcd748d92a2651aacbd5ca0c837e30bbd065a407183d66ab90dd8700190c26e1b3253f28349d242d5db5b85233fd077307abd684f9c4bd3df9c7df85d16b08710e8a6f9c9414ec6d020ac83ea9140371a00ce4f26f2e50b16d9a264108b297fcb2405194105febce08c966d17669267a7a5d33f471c6d9600bf95d109b16c0c814857cf3dc53f3f47a87a1c9214ce55b16a71767ae861a5b600c50bc527e705367fb00f054892069103532b8cc8db6c284707f4e32a785f91086cd0aea0a8f566d2b17661cec61922c71486130ee162d8dce84fd4d33745b528b5aee26fa5b599175508978669827170afbd61785e2d20342aa8870dc178813979bc9ef3bc6a16135be4835f549558f397ebc75dff20eccb25078bf68eb4e1adb64cd4ad693e3ab5a738221239cb93ecd0e55fc13422df0844cce36060b007c340e3b71984eaf3e13ab79777de8ff7b3bda8aa089badf959c29f43a986639ccca1622658b75e7d9b8bf2e7e2fbe80f07223ae031c8db740ba96bf68d645b72a1d4eb9d1c906df40c09d5587e77243ab72d81ee3c56a46e0f34f2a673a36fceab6c6bfa71f5c4c735f42180f842f0e8d668067438976b7b04f71a4a2308e6e2042fa3180699aca45975a63ba215e9de7d02b0c45655bce5e181a7169a46b3b9878fef1555f5185af5d231dc045c146b8b2352357493a494c4b8751eac7b41b0fc44638f3ebf59970492db2e84c6e8764882402687c2950ae3a31d6129da98f7a9987776c2404feae47f04382096f460633e7fd6eb171097e1743318cc1fd904fd1448c9c2320238ceda37458292e2fac83ac3824fb66f85084b50ce48717fb082370966da2ef76b7dd76531b8b42320f96d699a09647464c7ec0d86be4db4e5d77733cba2afd41dc7fe2ca5c8d03a26ce27082b6d93d0e8b1744961a44256c0a8bf8aa89eb3678d14f8fe33e54a73907b3f570d4ab90fd585852b24760359da8b3a78819da8629f802e481038efe97388613709aa7e41427788bcc2994826a9644e1c623052e6f53da0bf7c55c99e5c23a421f3e3bbb682dc6c5d2a3dba12153086e88a2c79ca2454c3bdcda0a31c451427c12c6aaad790aef9860596d457f0e32920e0cf8d3967bc6a04dc27430d601c2fbb865835292cd32443e77f765c2d161220ef7ca0b037ecfa0bc9825e8149a4ba85c117ef62465367514506fb141c6484c9b74ea9cc82e0ecceb012edda63586dfe6765fb1bc29075635bb07da5d0d746321703479f3a0c000e1fb089d1a1c6ccd7050fc58eec5294e18d1678d80d77b1ee21b05897b213690bb140244a0a7e515993443cacc15fa44ca7ca58d74031ed55afc4a926ab51886d1e206e02610cc61aba4a692c6e38ec14d58494529b5873fe53aa08624d4c4ce13b49cd82ddd6f62c48b8d4c0e63a3057331fc59839b89f9ea3f9b872ec86fdfd457d3e92e88d36fb211197f4df2b6f0dd0d687951064c73fc7c6075f21065535381b80b2c50393fd87467c731ae963809f22eafc84fffb45017b70901eff1500583383e1d74078579573213574e06208b834c41f8d8e1839c470618666e93e85e60bef616caeb4ab5189d3a4b025fe4de88abbd5740bdfe4c0a7a5e60031a4bd93f2b4de091f571d2d3e13df80ae4f28da2f898eceb60f86994701fe4dc699da642ff973a0384b342dd82fdd900d74375432bfe4cc4187b823c23ba81aa8b4e6056bfd79c0adab776f14490dfe876f1f2b5bd553e9d83091cd6a2e86f46c6591dda5cecb10b250af6be77ae113b195be858d909e3b8d519ebb0c1061e5ef28744c7d935603790f9cd95d099e0861b2226358d7092e2305b898d9842774fd738f46b0c00b2d81abc0ea360759d6b9c317de70423a17032ff62dda3d71b0cba8dfd658c137102921ff28bd22036c8b4c3f3e0255a9126e38f2840f4d458a38ae2fa96b411923b55f44a46f57f225606f342cba63e05485cfa56adeb34b612a2ada753b881be1a3b7564d05c0d2c924858c2d1a4ed1f42b303699cdee5bbc8aba08ab28b0d333894bc09e88a94841a527eed16f3415e82501f282d7a4a2be8ccc244a320d233d3a4fef2e1ede0e48900c00967301ce5106efc27aa6b3730a0e957ecfb52d771aa6af459182e91ad9894df2a8568dcc42d2a0725fc48f3d048ccd56feb9c7ab1c8ce6f4d2f7b8e1b19a3bd03e9554d397e0cebf617283a4ef80dec042d15b3805e44dc00301f5e26061024903db135b53a17fff7ae2a84496239b0e519bf310010d3f78bef2ab23abe112ebff9be10affbfc7c5e8d1301e8a6a7891ac6ca54e2659596a141c041c70f9368f063100617deaf5170aabce79087aa5975fbd6d28e3e87346fbe741de34d4aac9fd50281d1bece8c8d1cd95efc1de24ddcfb0fc16226c72d5a9bb03533c2e93724d6f384e615bb30041000f1021803b0dfac0d090b49cc0538c567c54c8bccab4af0617812f1d1f1096d404de3fed4daff34b411aeda8240cf09e76442149276fae5943fc3d2a2d488c937136d16363b212a1da2e048e16de5a7f921f3a78b41189ae9e93fc94450ab71eafd38a7670313c3c1f158133683dd3ba70823c4e900a1c1825350046860b2a3188fa5ec5f2effec2a6341da440ebe6e5d3bc063bd2108bf23a3ead62abea74df649112d4655f5992f1f4740f4ca112f27f38803c8cebea7375c3713c01f23398337909e4787d3fc63c2de329bbdf5d01f59532db92740791e7843c03ee91212958f299dda48112be9748463dec118603c1026b1e1d62e0155a0e845b6f06d4e7009d8bda5e3ced9e786bf3b090577f9902348080b457c85eb1251684323b324f91ed8ef3874fe027220934e6635c2667a6ce02b5696aba422d35362ddebddadeea32cedb51c2985f3c877578facbc135ebc2ec0942351146c7b243168099a60f12509c069d0e5396d1dbce3c836329851ce863967716a44e0a602c6105d2d4872d8a80c1cd6fbf499f4febbf8c179e134c52739cb8ab467c9ee906be2690a06622d848c382c0da53ad46bb84577ee22db1162b4ea4a3f4be7689e532cebe23a6975ec95efcdfcd35ab7bb7befc14f4298a93da0c3d8c5853219fcf631926b1f5569bb8cdd9f4100ab1f8816b8c9d93dc5d04e3bcb9a42d03b996f80df3d4f2c6124b6ce3afc9df85638057ddb57312e8f37186c259547dedfff646e8d79b033e120abf261814153577950d99db3e12741dd6b229cd84a018343df62dbf4519bc4778ac3793291bb6684fa1b8f38868de322661525d9f31d09dadd338893bdbd0560d4317073d05e1e77c5f137a1cf02263eb1d66cb4c046b17f0e8ed5d2a372e634cc5a1367a61e558e808407df6715acb5ed3a8316bc90345dc6a090818bb0f4a2dc5d75ecb4d10aa93771d9c811042855d50fcd50c7f68e799daf08f1e9d81f13b9cab7fe0d003c3f7cd4d7092689428c3ad695918f7e27abbb23dca16468d23d969dcfc2c5efe873f44104f001c95b15cc79aee65f64a395f6b3d45f17cf86d6fd9491c13371ef83d9644af16c761fea287f9df8a3d4558d4bc69dff91b56520d560f4f992aba1be31002b824ad08c344d6519a2fa5fcb9a3a8ec2afc577b76b7a466bae04337507a6bd23f3548eabeb286b99a734e75c4ecab00cfd86f697bbe00bf9f3b2dba3c915e639ff8c4de14d68e077ecf8bb706fe00915eac5c820fe2ee94b6bb7326745ce75c497381edfc66023f1bf0bc9f2a9f05e6fe58d55b9d9a3a257ac9cb058abb4554d4d94e96d22627181c601214c2fda9f7a7328032a32163fdfb28934144b5d66e53b8a3aa7a64c203c2143eea73f068c3104519962ea9957ac918528722567b3e55582982ef9776127832a8ede78dfd6aa0ff663f7dfa204a5bb8b99380f4d3c2ac382f3e1e98ae8dfd00c1bda8dd7054f2c2cd5ec0c7f174c99ccfe8b11093b88ec42295fa3c09838ba7ec4c49eb4639397a2a03a48c12b045ba2a57f54b0f2589ced8a4806a646e1ad7e40cce48886fa731fb6b262ba636737a08b1f61cca6073d2b162eaf2805a141d192da0838a260ea326e6e8d40ca61b83f5035c1487dbcf71207a68c21cbc1956c3b7546a7a96a1633fd96698ada56837b724decc58096f67370771fefc87b4ac9a68a35df3ce90b0a9a494254d2e452241f981120124049754e42db0883f3a0f93bb423d9333889ae706f74006088e340997c28c30e6c981afe4e4f251c6d6921b98539c6f7347006773b0a57ec4edc54343815e9b89fbc131fb9ccee6f556db21a13d6be562d139ba1069ab441e7ecd1495a5662ae0e76b66e6227e215a8db17f3aa4734e5dcec551467f540905bfdaa6738b9dfb9549461fdb607c1701164bf463a75078552706b7461469a3708151e6ec3a548d37866e93fa0dae1575b0b0bf5186b2869a598f39036030f1cff33ed73500c086425abbabfa2bcf25a6c5c180beb70500b2c816ec97220d38c79c5c8e1431c03cb9cbea4dfe9bed524818b6ad7c0179cd17d1cec0a2c582be8bb2d266d6f9f1c183b7658ece7b223cbbfdd0d958f781a35fc0512964d70c454eeaad2608082999eca71a88d37d097f22094ac32436d8633f3f9eed3d8f1f17cc90a1979653a8e1444c95a739a9d7bd9b350fda16313b5642cc7bf3d51cf0cce22dea1c765713ca491b74e434753bbf1632ada788861e393b3600f1959fc7e8fa62e048a1911fb1a3a5f85830ede576713858b88df188f8ac84bf758dc580b672c9cfdf85588b13248d4634d5deb2f79081530f9fc9aab9800a43cd64b20f22df1270a970622a6b056e7c25234f79c48d67ef8b21105709bfbc74cf50864e7f7b50f02975f9b63a9a71a0cb7cf1967b439f80695c6cba3fd3ebc755741a3223d5b22168a398cbea40fa8331bba545dcc2a8dbf0075a7427d026ee4c779287d8584ff2d4257d8f6d62c0e0db8226e3b86e95ae648a6282c03b4fe6e3ef7c1aaee759b06f91e08ee1c29666a66f3c7ba6dc793b0a3af4477771f4e63a4b6ee70602bd87096b28425f5aea11601185a52ff6e1b1a56ea3fa4752d3f27bdb748b443d4a3c357a04c704f2ccd5e5e687e19ecf8c8e88ac3e008308b40d7c08d65cba64467bac39ec9d02e46dc6ab025cbc861d4dfb711ce14dede46e4766ae8122d1666d95f8b505e48ba0eb7129ffd2d359b09091bb4de3b07839dabfb29487487f84581e5316bf1bfc42f5dc502fccad4f95b74563d0d6721b519138e6dfd6a5170c95866c93b0e9f1b6427fb153122fb7d4867182ff561f6633d0239691ec9715d001700100d7d0c6828bd2e86836b82eae19c0a18b3a7e422589bd87fd9f5fab54cb23c2964aaf3c9c259dd57fdcde52c7ae072c611bada6b39167196be1fb0759aee001f43cb5db3ed783b4b57d9ba2f3d396d000fcdba21fbc1386372ddae41aa407c9bd983de6fe7d5cd5f8d4f3ad4d781d506c5277f63481ba136505afbe2f612424dc452f44cf9e5b4715e093f7ef741081dd7532dfcf60619bc803199eb4076a61d820bb870969428bdbda30390414152e8ec33f2fc1a1ed06b9b7cbcdcc90d9335c6da5642e2232e0908a0dc9a7dd109c549fa7c880f27b5a15b08310096596dabc5be9a6a8a7c61ec592ce45985f9516363e6a69fbfa0fd47352450eca553fe1f519c124c4aff546d61bb1148dcf9c912157d19083074b337ea6b6337f9e3346ab416508c3d6553a89941aa33ad524702f507a8318537b01efb1f0a414e906aab53cf5ee9136d312beb1cecda035aee75c786486021d13fb473d45e3e2e6b7cc4d805a4e63008795ad2ae64989c918923c30687926d5514c520383eb070de7bf30fb344a8cab28195fe0ac7c375a6b5f1923bca149b5d896b5fce696a5667d7bba2fc48dc9e0d073116d33108075acd905c2781e6b0bd52df0671e7d8340598f3345c821fc9797d38eab469b5a4b2975715cf0ae183b9e4bc6fd44620023795a78e1a29c2647ad8db6d236906df4d6a3bbfa49de04f00e649fe86434a33e485a1c2aca0b557d23ffb746abf5af5c108dd5b591fb0f746299de2e9b357c9c22a3504d5424965f577af01bf64beac502041d2d6cb699fcbd35013eab1738c141c821094230c59814ce241f69c53a867c0600d49339beb4dd750f55d7aecf2046bfcf3d3ef711e5058c220f5be40db39842f6cbd28fd8209885350cc63b04ad8baedcdb6cf49ec4bad11920664b890e3a58caee91e7ebe3b4940b4ae8062b176c6f9bdefeeb88cd6a9e1441afda7a3c467e6895c1e449dd6717a0fc515dc4983f6a6143b9768bc7d1cdf2f4146bf59090c5e1ab4c0cb3a6bb0cd93e6965fc7e7ff5ca90a1b04c7372b42c6ae523d620b556cfabc1720c97d36590c070fa97d866aed467814337477bea4ed0217848b86cc71d5b4a8bbd3273edb773147896789f6ceb7b19c02d32650313dbe833128d3887330805d52711a97d2b733c0fa1719fbe6006c4055e601b72c7df744366dde778069b734e2ad56c8810692e242a6a68612fc20957e9b40bb380b06a557e6bc17817a0cdb1fe6d187432d832db8230fa43945bc496563d5b22194fb00100391daaff575e855809c6aa8309d47b349fa8ff85c0dd332ebef67355da08983bda0eb8e800650108acb8b1db5a3592c12208940ec2e424f4c17314328735db16dd2a6b9ad9bce05bdd0433d186df1b69ed5fd1b115f5c8b7ebc00aed75aa90c067dd89297741fb76251a28a102f19a9a53ac6f7684399b52ed1af4d2d3e0f16044a16c715c75ec4f1c657c416d5db4b89247901ce57d372345060288fe0e6ec3bffe00c9dc2921fbcb7e3bf0584df8668bd7a178e5a43c1cd49f604f62139a0478254bb8a9e4c9056cd4bb6b3c042771bf27f392c0a6d8bb5ed523decc5ecd804af84e16c1bd18dc4c4de9d21bf5e6f1910f11b56bd5641145d8088029141d9084451760f1126e9303626c60b456f8c241f14eb43188141d6cc7eac9fcdf0ef1a095a9c4290a9bf80c23f5c92d78d7b87289cdf626f776e61e28eac1374e33466964ff5fd142bc558d46a82108c24a78927c074707ce4ba506be1d6447c2682994362ab0530dd1bc7c8fcb55d57bc5b83cd779582862cab8e0b32e7a50ed7bd6e0d214f538687368c9f4bbe12421a5999faf12a02ac2f1a420ea687055d953555958294b58f230edde51ef30f2640add33b5b8a17b9c65957e7faa96e58c24291be2975d3a57a0c3e03a3020b05cbb726b1709b339ed1c107147239b8cb45cefee86454eed5c540b2f3c8c96e334f5461fa7d3c92081ea4b414f61b5ca5f08642a184219cb30fc75bab2f38bcc38b59f3042a51e250670ceae863a3be507cdd6b9c9f7da377fb2f989f4e853e810f9796a01c57bdd80e44003bfb4b63372e73379ea917ec3e8e5d40e826bc2f402c07440acf95b247798e9a0bf6ff7d109c273964d7b6e959d16456ba1412738b306f7d293cbeb9d862c80b2efd5a56e6db79fb6e5bf79bd297b6771928e78bfe3be9ddf74d0d7e96d5d44dbde273326ff3872b40b49ec5d0b1edea854bbff4f713330a52b194f3121ba2cadd93f64db833472babcdf3fe367028aafa720ad98702677c57b592b96d5aa8ddee50d0401b1bd0013c7985639263c3885fd8880f9416cef377ea33acc148fa91121c58aa55208a5342071bfe2527da5c97d4fc9f3c2b5944bdb8127bdf75dc1151b0265af563d3db48c0b5ef2fe0bdda369e166401c898cfead5cc871003b01ceadc3b4b2b5913461b8288728e66d209ded81c0bc1a7488429ba00d4427fa3bbc171294d711a354c9580dfa6d930aac5c1d10244ec9dc1474d4f1ace6b9aa831d566b3df647b4a79d8c57e4e6298e28a4b8a8f31e36162a2984ebe661341f99906c63c5c6e33a1802ced4b21a95b2ea9b840f20056177cafecb5251ba98b0259cc5c8f3b1a79ad766cfeb6c4d02de26ac793f04d0a13b614a2414f792be2ff34dde11719b04570749da7091940a3e74828ac62125b74b5cbf3677b3292aca5d12ee6dee5a4c96c64760b9fc3d0cf25dfaf052b7eea03f3c5aecc1fd5c47f7ec256414255617ebd176d338cb8f6ebb4e0b454bc2b26ac89854be3f454c1f0e8d14c6f57e2a9cfc680343fc3a24c51b5a3e5b34b6e9a7fbb0ec457159191331ae700fa34c2fb47e9ea094a56b4e40ada4febf92decd9cb0d3a77e763300ee61b9228658f52c1c9085ee7caf392ca9b32477f5aa535effb12eb952f83565da7981e8696eec7605799014caf3afcf57181e2bfc2f67c897677ab50c2a0929a38f6399fb7bd039c7d50e186a29e7eec0ee1bc6ddecf1b6c8af7d6b22bb78f279939116721e9d729840f247099dd2111e15a195dc46c16549a2268c2aa259fef15f1a52b9cded205e3a0f580922c4ce380962b1deddbd5f9d7d3bf150affb1de739a0373a553e4b1312e9f93a1cb5646ed2a7834611aca57c9fa15cd00ecf9139ec9a2308595d747f6aec6fed14686b7847847aad47eebf878c33d6a68ec85ea47e2c8c03d5da08e25d3fd16e0553bb86b90b2bbfd9970ee558ba7a21cc53529c01c2cff1154234fada755fa2cd69210ccc051303fc9901a5999f334b35203957ab71c24baa5d08f03412d6e1ea212bc2fb076f6a2a1af6ea8dcc2bb4c847c7b992c4253e8106897bec30d2b306879c345fdb70ba1fcaaa15ec59e31a1700a19943fb72321bd3397b603cf9c317a1a270a24849cf753cd388b26a7732e00f1630a7a60df9921db49f51a4f550ecccffb1dbeaae51e9c35e982928caaa5add6d7e5da6287ac29f64fa74e3fbdcccfd0dfc1dd619664f35df86746d0e0e21bf6384521075a4c7acb0fc73e98bdd6192d9dfae7f24f9397f04cfcc1a12d7a03d9325d55a72e88ba22b465dd39490a2cbd55102792ceecbb48a482ea81c935b51aba372de7f3fe52fbeeab6cf9da2fd4bb21dda1d081bb3d7ad0d932f339ef809883f99e0cc187217360e1d9ce33f8569f554b1e9cd070293f504a12068483b03346d717b1702b659df65892e50c1100688756e8173c81d4ea33a4f93af48e60775fded7251d9bf4bd74aabcac6924343ba64bdcbe11c856ad2fa9a299fe2088d7c1c028aa1b8abeb324d28c7257ad2af662e4ec3a23d516aa52c0a06b11f6a06608f1575e62a32139b33a63192e492499e4b9a2474157c89580477e006b755cf66918d34583803b1ce1078cb66abe042dd8935e7eccc762cf6531300042e37508438f9f128f2e669dd3ecf241345ac7e75ac9887295095eb4fa8824f24348bc0b30ef139a3821d06d7ad2217d23958bfb07e5b062480ec8aac4e9c03afac729e75aeb80d256169385717f9f31c47f75381cfb4148e13f721aec231e4437207d41e63813dfd92e11b865234728e6dabe689fd689d2ae0a9b53f282ff3501d2462a29a382e72990a52497dafaf367cb21704320300765e72c0f170e9df060bb28c9b55d680179b799e5b070d610b8a033450672371f4dbd392d5c009447bfdb2aa58f8f264022333dad6915cdcc9b7a6f64ac05a963005f4ec39878d995ba9f543d2e2370c569fe8a5f4c83161b32e59084018d9d6f3cd64d74a808aeffe56aaf673753f33d17eda3abc48081850e0eb27126013984302c63502066789de7e1309fcd342c101fbfffae5b48c8e2bf12199ccc0e51aaff2c7fc8d4c0a302603e8cc44028ec0baec3d9d87102817d1013f5c6e142ddcf66ee07df813221cdabc859a79572a36fd19c62277fc95c684f63ddd3510dcae1cb9577b53a4fa5115e9bf479a0ccbe7dd101068aff5f7cda64d58e6807ca7404a3660b76fdc9cd33e2e863a46ae12df18f865a8cf0f1dcd1e9b65a7d15d4fa3871a2f7ea2fc2775b9468d3791c1e23a74ab25b3085eee6a159bf43b1fb78a763c2f61d7152624fc25bfbf1cf42832bc6fef41dc26d552542b9eedafa890be2828ebfabb908ef1d143bbabc51442938b8f9fb8a7246357b06ad0f61124c248d17122d97f56c65ec927caf75bb627e609c285266168a847fa7e70c7a1458707c6d67e85580f5da4933581b0982b49f53d52a3b4961cf61770dc0646b64579ea6b9d210923f0aa203c461861c385681546dfdcc8bdacc7474552772afb3711ee5387930505dafa4bca0b10b6f0ec365a803039b02f1875ccdc8a6ea96fb5f512f078b9aabca74bf9976a18ebce953879cca1b36eb7cf59dfa92b3582080a0ab2a0f3102a047b00f3614f166f741b528b3d467825b5c0e77ea5d3553d17250a6f0d2b2e6064eb38424e7749fe96d547e60d0f4681bb54b4c56b68d7c6c35f0728a90ad2a0334d00b4685fde1b89058f10c5b3a27a55c2adf00d5b56effc3c37b4985763328e672db7d3ae1d7b5f0a17365af4a50db010a3931870cec1321c00ce160fb7615ff8f64193a463c49a938c935e56cf247a1040bf57b18e89f0a10520f90ac78aff2697e615d7770cca3b84bdcbea675bc57c08b2812d313f743398f068599601cac4144125b3657127de79d2f05f878deaca677867bb2caa73b1c1410a8308264d7b22a5e2e0732aed7244c5dddca65721dcdf63daa8a96549e2b305603b822166daf166aa65a0c00b6f3441bfbab942920100c778578cf39494f800a7e69de3796acb38849f829cd713f0e23c2d3b87105ad2f5e88bc0308f137c9820337ffde187f197f399ef121d7161d641a1708b6f425addc2f3c585fcd64532a7dfe3112d51ea23a943d89e81be1e7239338d164add5587dd6f92588b16849d627a668c12d635afc8d83febc56a5ecd3df5418398354b4a6d3282137d3b41a4cc3a518ac509121203135d439e434480b098c36eaf627e4840e6dd88318c74562efec3e6b28bcad1ea4c149ce5ac1992b2ed8ff77a731c0ecf968b16c6aed640b96ed4df9d486f0abde97bc4d5cdb70ea3be379e3343929381f9373970676cb052fee5da57dbfd1ba9e30a7ceaa1f809d54cf44fde2e2236b91190abf71d4d87c942bfcf1d9c4cdad2890e7ddfdaef8830d1a6ccfbff27a7c2f338f252cc36e15ae5c7f83e5c547a6ff1779ed5b78d4939d3a237cd4b579ac3291bf72c282412c951cb74f66035bc2ce96349a14f618279200598e204c09ff70e70efc38c1d2bad6793e1f1732f940f276e392dd2fc819ca8fc11d0d79b911890af033acc9307d8009584c0a8e9a39a4b5e1b18fc5c07686eb4a74d73091f6d6a03598fd5f7dce813db41c5dd2a51e66e622c9248c2cf5ad3fc73f7562ee342a90d56b8f66a2fa27a5eefe060b4bfa3336b15aa4342349778934eefde07b6bc3c737c65dafeb0096b3936b4db39a86af905f174f525289aba5aab46609e7e38eb227ea083a250637b5ecf13e26f47fa2e92b87a70f03de750d0aa897514a4860f33823fa11bea0b48f7f4381ea51a88461e2674978204ce013cf9c51dc02f131966b17198ccfd84cc050912beb1f20063e917565069e3cd72946d760737ae03a9ed07de9950097917038ef3ad4d452f899b5803c47e4948e8eea43cd479082fcf67ed4caa7b2cc51ca6eda9c27f9f3b07b2cc74ac92d4a9489c04d72b76bca75fd14af16e2f03e74b8fd2092796a25345f885079e583100653a162f2b5507b188b6ed3326d62549b1501f5a3d05e7cb8294c2c107c3a814f3fde7153bab21e23546d850ebf80e6ef8f3585801e00ada198011bfba6baf48dcd9d89933138a9f4881378df94b54176ea10d27113278ba5d78182aca26654de372c9422ff13eee7535596740c1a9acbc206de2e87fc29e01c4095ff6afcf9832d73b37cab22703bf8f9e9dd147d503a3eb94c5c2296a121d8641637992924a790bd32734f57b13911fe034a3e833268d31a1f9c2d21a371217bcd2ce1190db2fd40f7e2b551038688bee144aa5d93f00d12d00814ee909976e3d94d9f3a50067547438f16d32c846fedee4a8bf6c3664bd92750cd7a3960aa9729a52e0a823ece461e6c9b79db0d435bc1124b9f598a4473b994ebf643f2fb1e4c03fa872de45d330e6e5ce1e886a85cf8f640f9ba8ba88be8ffeef456d40506fd4acf3507d23a040db51115d74dd630fe7b78753c3141eafa5c38509e8f165238040c8a62813e2986346048521c7a4211e94e9c8df9cc3633a06dfa462499adfaca9756912300b104beaaf3bff117e29e44ea6b92ad1699c0661732d2009b0f483b2f9e29f6e4f21f554305245449c36d515ca061d99481fc5968cef99a6598a6124e1cf840737cb270e6768196aa4476dfeb82cd9c3140c2e2335dd56568ef085a64f73da7c0aa63ac0b051f27058efc651d7786115606722eaf36da6a16e552f4e8c8cdecad233a9bcbaeb4d7302781bfa5c69bf376be81f241ee7174c2c39708f7df2de875874000256df23971d0e9f3b6c7d9f85337d03568509163b270a6c2238b8d444cf5fda06ab86a53e9b41ce03a0da9c0d05a978620364a36d527a9e4fe897b90d3a4dcb0acb4682afeea84a6676026788233cd5693dc007b69a7538d23d0ebccd73d89ee528c1d9a921ebcb94b7e452159853122bf579558f232dd45fedef8604ba02cf29ec1265b1414eeddf170141407b764327dcfaafcd6cb6f0fb8b17e980628a4fb6c56b64cf0fb0db22ce9e7ba4652aa3a6d10569dd73f43e0dbe505fa10e5bd6e05a399ce5f52cc1cd8b5317b600c068543ac27f78c1bc5968f421f17ce887ac2856070eb691a2f90771b31a107ccbf68bc6e20d553fe5462d8b37898336ea036434574fa33a40742658ad03bfa459055efb606691c4b1d882e07cd4e3f96c7e60994d50150a0ba31b8e7f2d81d7345cb1aa41914ea125a4beabd4c7806eec632fffb448d92973af5845813c0038c39c7a6efa764494bee7f2d944583ac90a22a387b62a9d8629d9486de5c9358bf3d78e2a86123a18f698bee52517f25663a423897a46c88f1ae56ba3b103a4a45fc65423d503dad4c18fa6854f1533d8debc47acfec253fe7b5beab45aa4ace3ac812f5b37b4ffaebc5a508be0ce76b4a11542e2d016d8076842e4c6e921c94d04bd5a0d8a435dda88dfcba01ab166e7f624a8b680171baf96d2236f11bb398cae1e2907efbd5840f2c7ead6f5ba41eba3da6de3d05ca1ac9dd3fe4a550a9d9f551d39419aadde93bfe6c39a33191e65ef29b5b0edd0bf718b13b00b5182354b2c4771de4ffebe6a395a3fa86d39ffc580e1179ce7c4a3c6bd2001186b0c23688e00721717007512a9f31d5b1408848448d5f3499281834323fa546078d98bb7cc60a7acade151a7e24c11f1322a8885660a8314dfc4ad7bd6fa499981321d9bced5b7983cd7a9432d5addf36cbe3df26f6a91aab674e2832f27f5b8ecc73860be47ea07b4a55cc9374d88f9712818858281a9f134e0e6eb7a411244de0666d9c6dd1abc485f3a05ebb820d44ceddbcc1c2ea96c733b949cc867f6dcf15b2cdd3b2df1a3565d73d2a0925d3b48922db3dc64e3947cbecd091c25967942aa1f7c8f5abb734dbdd0a5eaab824eaa0608e976356772ee70a2fb657d6216b1f919eece4364882056a27bcae407d1fcce7accf7449d88ed0680516330cbe2b28db6bbcc0cb809aa4cf4890ceaab3891fe431d6bf244d956ba3ab586c05bba5ed3bced8997c153a02456352ba6dac1355cc2f8363d09e4fcb2eb6d4b0dda811ec401bce227a4c4b62e65d31085a61e511190fa0efec56bd106011ce275905f3f7ce7018ed9d99c10fb09a16b12014a112790429351df9032522b76a27fbb6eb2a6b41c6d00bc30036ef9dd743936475cd06cda8dea66850300ee54fb476be1d7f1823b9260427e605e10561c7eed35e225340b9972daf065ba4bef2e8b46b7dff585da44fbb01b597c5d79637ca18747c95ec081d24d8b8a25b538e8cf627b6063430da6c042f1c63c5b2bdb212d8cc818e1100376f9e49f4c06394dee53299d265b28eb105c8d36454783294e17c19d04696a9629e088664bf9926cfb3500333f9d983aa543df87355dfaac4a6a8ec37d399c173f48af346f95d148dbb23c537aa7ef3fa81b49e3ab2d14b78aa637cb0e9982adf9b49c8959e522f311ae011a847a2f0a8115ec6c5618ab1fffc0b467b3f12fd772236c2d943e3d9bcf827a139cdf6cb34afe7d8183fa1dc2b460ed993b3c1a16e0259bf4a0dac0d7cdc2c7797a6c3ba03582a35cbc540bafc94ad89015e3f196240af8f352d14f7e1237ca0d2a95e253737a9fa5b283733ca774c7dff88b186bfeecf4fc3057c7ca75b18f8daea325ad9c9e85eac43b90f11993bf594c3f6f3c503cc62d5ac92383c1fe1ee7f4e61c3e051a5032131eb6cbab29abbbbaea278ddeb4c93c035e63b8cfb75a6bbc70f8b5419d3e3636f1d44dff49df064c2903dda21822502a20b3781e611c87ed5c07ef7bc77905d6db60c550adaeface479f23dd20f840640c8055736d68c581ca559f56036ee98de2f21d9e5a3fff6da1e6214f5a7c96a70baf7b6baa2f8814a17ac7a8c5d39073d959e46680c7c6d6851599bd2feb206ce1452b9d457fb1aaf82e31cbb4dbba6a73fb567ddc23d91a647b2a659163a96dc9368140287a45871762cb7fc02bf40cf43c617f6c48e19d7d29342313ace1c13925e2e816377e9404e829283ee053e61ddc00f0cd1e6ffa79210014119196c91926e86cfb6bb0eb77c1cf7ecead144da0e59260f7e0342c007f8f18f5800a8e023d421252f99141953f234dea0e35997cb1d05a46ff23ca8cf2caf2dd2763fb7fda93b06aba425949cfd42093de5ebb45fbd4959b393568fd5f7ed96066b51c00295f187a3ad555e732bf705a673d87f735de6d44fa6d2eec507f7fee69bad3204fed429e9d7f8cf5dc8b651ed1a1e491b7f9d5fa7d9cc1b0c8ba00480a33365512259692e4426ec5c4bdb4f703965d8198cfc1d5008e4b3da627f6584e25af9d671cf48ef6b853396efc40420db9c208e92641f4803e46b6fee4feebedb0223a9ffbe3e97fe5c0fa206432909520ebeefbda53d5bf72babe1bc84eb423913eb6e5a9c3c83688cc26295692b77e4dead4c8f023459b8194dd1df5da77c1fff58d2ef7da2b051aca1e53f309a89b328e014ee4b6da32e22c59f12e1032e64e9d61373781e9d4adc6e02a9f5988b7fbaf8c70f4376fc3f681b8761000f6c13927dec9bdd2a4832e1b753b649939a279c3c2dbc478b435f5cf8d75016449966a8bebaff595c7b0b6de17a1a21cbe24a0aca76e3f3721a4d99890d37ea3877efbc2a809c65af2725ae8c9903471795dd10ea72a72d3459da28a0de991debd4777a2ede71c2d3a9a924890cd0c2b5531cc1891ab0577348e545a395abe46bce8a4c5717444d0718ca4dfb18e97bac27c61898c1ef68cabb0567ad693dd941dc10212310a992fd3975a6ad8efe78d1a7e9e053a0d6375f79140ed47408ef7f660dc17115609189d9b229907a88dc5f67bcef431ee9e64131c9287f3527716a68a6c7ba3f4370afe58c6f70483195d0086dc5c796237f49049cf26f7f03ea0fb1f7114d674edffa310af7e5387f4eeae1b0eda1d713ab5b2e8af3e9b04445a1934208c0114fe177255778afea0b2fb728f3fe74dcc0a4c94fb7b33d0e2a47f34121010874b1e99e1740e135875040281e62a41be8c9f618427db58484879a4e83e79e137f632ed0e1ae399ccbd69fc35fadf7ed8bc44612797c97e99104cea950014ec688efd9404a41b5a36c4cfdd185edd367d6b5a4f5e1e5e65a87b8eefb4f5b2b6abb1a59970ee2f1c3f8448d4a7b41e93aaf0dc6e2051e28810f0e63fcb401e3b7c5701e27caff48a5c3380d0f5a032e50047980da8dbd1e997ec9769a3b6adf9943dd287d408ed9cb8578517bbd7764b678e481cba61037512dcc1dd8091c583321336003b1915e5405e82e62f48fa45ddc698238b24b58c9c59527ca0ae009bf9154b65baddb2cd828e0decf55bc221caf5cbc84a6471d18c2cc0e5e1c12c912e854df42132b26b5e604c2d273fb19c917b827e5de7f5b6997875fac3bb1df90b7c5f43e4b2435093ace1a34761f24cccfc6ef71303ea710ece21a392a076bb1ede421c11de75e1204b2cfb0f35bccc4a97b62f48de3cac3db578574c1411753043c65cb1b8f71805dcfd084d960459d11e84eb3723782d05d162f61c1f56fc7ac72e0708b2aa73551d2c4b718768afe671ce3660d10a3de51a7a4dc9aa75a4695518198a4dbb83682f9769e605302a089aba8e383a73b43095fb92e8bdf9a755f0ae1ba414dbdc64fa59ec4c2e96ff9095992da17c065d35df4679570b600babe6ef35bebdcdbd252a1f58e87fa2328a97796e725d55a6100994b47761c77625f1f0ca11115b86549589c17cbe1d96035689ee3df069ba5b9d11373ca84488017f6b259f0d56594e9e672405d2952b6a3622123c93e0de64d8070ae767ee0351bb13e15c9a9ed921c1c99432c287c477292ad7079d1246c3c4ba611d1f5634076931a7a346f1951131c7fa3d6655d001dfb55a849d014f607f71d536b7773c4013fb93062abd34da7fdda8e0eb9e3fb8cf2855aec23133939207b15b8673c13ee415c2da8c2b30f2a4e7929c96d0f31fb3947627d8b3540ef71f4c6f98cbebebbe243b6c5756b348796a9347075194a8226ede7d86acecdd5b2a253c5a5a0346928815dd95f66280c6b04c2989e0605343f4880180a75599cc93c30f967936605d1f4d675fea1e0d9521409bfdbd3f046e0ebb2b14866e6326630a5332415fb93966b50753e5ba08de83307026fe225ea9a2f64a5489f2a2a11b17d2067e8e30b59becefef51736c62c50c56a999a8f92d836e45de6c1af5e2a7ab555f63a659c51d5c19c9f870a70fe1d1a0debbe7af89d79f8fa90d8b0d973c9bb55b6f615c5123aa0cd7fd94fc5222b93738f44438bf1b1ea6e09bcc02fc23604967a6ad0dfadb3a3414a3518ec09d16e71842ce68e5035e91073868f67afc33a6be1c1136d610562f2ef0b920fbff5cd273f29cfa70996b5ee4745c94ab7f86b2ae03cc5bd63967911809f20a0996abbca50a308504d8f8e6d7c3db7d0b0479e69f2e49b57b5d8ed5bd140f85213679d84fb081c12adb5777eb141aa3f9380a0e8595033fb289b2dff6f0eb58cd12bf38fa21e1f5526708310db11b895f57da3bd0329a194ddf51b41801bf1cc1fa03877448f915aa141e3a4595618cf1174c6e2e2fbfaaf9e7a47f9164c0b08fa4246972f5670ce3b35b4c8374440db8371e89e566cd671abf76ace5f24c2974cb426e4a76d9978e73503dfda6527d035d1a21153c45ff4c9067a935b9bd8ddc905632d13c2dd638d1e2d7465b77163931ba364d4c5a27aa8cb695929c599abe6539aa0c9e1df0ec20a4f3206e6138a2c1360459b042a0f603af860c295edc6254607240ddbc8b842bd839d25b9d9411baf232206639149ad7a3751218c680649da110c7823e0d49e1755799111306947d9612942b9c3ff55647aece9e5c941e8c8f01501a4d359e8107397ce3de3682e24f19830d78847d68349e277031e239ab71541c4085de0dc5e0e25b6dab8ba084f99a00baa95634f78b7e24539306ae41a33a2b5d242db9b502b8f5ffc7e7238a0756bac2bea06398baaf223d7d2290f8b7457817c5670a00f9cb26d894ed348c9d58dcc8b79f336b534f9f7112c5420fb3b3cace356372bae6461550bfa03587f5b5968795f2e384fbaccfb70277081ad298e224fbe40f3a0c5f931da9e0d74a1a85096dea7f14863d7ce0c56ac35b6bf86f089de8f1bc14ba8021d83c5affd2add818fdebb766ce5fecdd33da6e3128a20a84fecf2e27e978aaad7b0f317c98446f3ce8c9141da000a45842420ef5f1500a1531260cd960a53c232b330813954f2d152c76136f06221f437eedd7dd2e9ee413c3827d5d765f0c6202fd4cf6b382108265f5f12b8cabae066af2ccb22a6d394a828bc4318c7f76824ef79c4eb85038df2e8cd6b77c8509b9e15894f9d2b2f1889cc801077bd9c8504db6dc7a7b249788022103465bb501dce5e556d738141191d5ee51a351a598d500fe13ec8e7de1d38a792f4b172a77aad6013f5459e168aafd8479a63ed17f2113c4cabe2694c80fbf8c16a385d6e241ef471eac19a8550be30568e274c43b2343426e10659d1dab4e9d359223cde049ef6608eb46057f1446c4149949959648445a039feb6eff56ef1679baee8f0b470705bda6a63240fd5ad9a544b2933112c97ae4d03bf5a9ba57d22c1078f6b15581f7955c7407800ac1b80a3f4730047ae1130f92df60cf5a5ce81d44f0fb6115388351daa7d45992c0634fe2a0e444bf1961974a484cf154e6b2811a892b3e04eed31618cdc9b0531c642b67beb5f1ed8817eb7748ec460ef12135793c0a0138923ff077fbdf40d81de02ed9374e107f786195ebc0c214cc3b3c13493edfc9fc68079c559fc8993ef7b832d45dd0207772cd24c95bb09c3b599df80250ee03ac9e4655b3756c0cdfc51686179d510dcae6cc7b9b4962852db37238d445b453ac3608847dd42967ebd0b21fe08869d330f98f9b80d10b9bf6aa39b7a984e6655d4acb521e7284511452c325a3c73e2218e0e7ed07b13b4baee7d9ee3b823f83f67d8cd650c89b0e47a3499e30daf9188981dce777fa5c207de6791ec89f340d38554f442844e9e5be297b1006bdab98dc246a0fea2f0711326be480efe3554c86f12857889a5252228af39be1bfb55e6937e6e6ab67fadeecc92fd32199ddf970db6ff50a162cf019817e7ebbd8387c0425ef36b40a0c51b6de0f1bab84d5447b624513b0490a1c97580f6d9fb8a56208e3f44644b5c8a7c7cbde6faf69579a01d007b6f78c5d4938f36a9563dc194e41636ac0c0e81cf41ef0c86ce1dcaf2de3a04da3b3af5af46b0c05259a89de89649a49e512ebb60ce255000d370af004a94238e3f56249a6998b13eff67af4078912058988b33a8400a06966ab8ab980016fff93f6b016372ea450bc530fbd52d738ebad3bfde6364ce4d8ebc1fecb3307ff9ab83d7d79607741fb12685e357c518268ef3f973430c4d49325fe85b8e29fe1d200a62c60046c0c1129338314680601e5f8838e440caa04a71404e8611ad060dd436ab2e7f59094d36f1a519e58da83daf2c46ad5875cf19ec37fa7395da49787c9de9853af221a2df1bc8fc9945ddcf98f5c0d4a6f0359e919e6caf6ba40ec0a1d140e761bb42be7361e556b352229bb7effd3d25c4a5a38e3d17ddd51e08153e2cca038f501ff1fa1942fed2e965546397475c4273f971f5e546a43daf17c36af84eb84f5049a87e45b173b77777667023fb60e750027832630d47ea0a5cf77c8fef4b00a4927268103fc987466dddb9add593533ea90ed250217636988efcd59816555c2170ef4b9642bc1fc3c978b1b993919700ab0f9a4974ec382c72ce48751b3e8489397fa46ed2ca7d1c387ced9c1d1681efc45fa4cab73171ae592d846c12e8c8baff3a2d7ef0e00faacad58554db6e365dc19b39bfe4e6ed6ae29c80337be5093a0c811a5812b4015721e9771e8e5a9961b069b1dd511cc408586348219ae6f7cea06e5cad9ac196ff237d2a5750edd52e4e3ff18cffc5edc00822ec5952cd3ebedb8d8e4bc09e9e177cfb817ecd8f1efc3110acb2679746890db6906727e925b7f3f04bf1709cc5ccef5c28b654d834cb0d30a374db2a13d578f2d5e9e9d0f47686acce7025a22c004108048a10be8cefb1184186db31a8c24b4718f3a385da03fffb687aee090c803d2d4d03547624817170c3bc464307b4e757b808dd2efa2fb1e90e01f9b564ca4dca66d3a8c47e8f8fd0e95d196bcb931c32bc599d81886c34cf25d5c68c5ee53c1401434a764c97088ef74d6aa4108ea376595c2b7175aa7d72c1bfa23cac0690709079a6bef156843fe002b3a0de007541f4d9e58fa15a22c2fde90f979d2427b7ec8005dbb1971911aeab34ab6f9c0df7b3d686d047de7b843196a5e45395feb74f3306ab420ed7c7c588bf5679e890f8996a0308813f9e102c75ae00dd2359a6ac503cced95a55858fb7a1dc41d48c912d699db594778a809189ca8f7c367030e2d3260f949a1915eae64efac134167f35ce8d9f0eace1ab328485ae1b0d16aede604fe5f8d475f4e1ae1f2bb92343a8259bbca3c76d2af0b6742ffebb7f1a587bb469c47efda7e34c1c48e4c0c0c1c959551ea9691002f7e12826a1b13871d5e091ecf1bf327a0720464bfd25ece111ac1798a697bd8753253a0a8a67d907542fedeec27220b917bc36abda681ed4d8e6abb72b482ad528aeb3cd31bd167d63de12f0667e65b9c78db41a8046f752ab23fe68ce96b0d247909f8b44553a71924b8f44bd2d0979b443157d924f35317eeaca1810e54f8ff220d73cc0ae9ad1071727c59d6932a94fee7d9173093586a1c84736339c7ac8b232297937db6451b6e87e5772e3e2b77b0c914fb75084585c8935a165cd6f27a761aa84ec123d3097fd025dac9c3fbd8d5e991bcb3729c4a6160649759decc4c1e6524be5f7a87f6c5e7974f06fd49dce64929f42d33371f04164845d3b05aa765371be75e402c9c5546a14ab981b29437dbc5acf63fd808ac98317c7f5be2ee2810e50577d62192e15008ebc28092e4a106b7d123e4f31c05d0c1be9f2230ac818b5eb0fa4b5e83bab8e7035bad7fbbe85c81e99c5d94939bc7b9378d2b235df9c54417965820b53ee6e75b5669e3fc994fb439bd3f9b0caef7600ba67ab7b3b73e5512998dfa6c2f891890a66698f70f4d3771ac124dcc6e1fcb666f78bf5a739fd152f9830ec7221cd22e7cbb68c775d67d5e9d4e85b058d6f4e9e515f66e812b276a24d4e3ca79090e0e473a537ec2f2001fed4a236c902010adfeb3b4fe9020c9af8ee91cf70f653d423d0f2715379872e8cba8339add5fb2f0867f9552f572f211c79436454c3677318f7541a945ca16c7faafb81fe93e20a22587ac65bc7026b75dd79ac5fea18680f9b6ab30f91a139097ac10b3ecad1a3562a53fae4bf3f6a399159a7ac75c6d19ae69a0756e46199acd0667f4291ca38d946bccedce7ac69d0d237af29cba96d52ab4db95526e75166654694b76b86140d72edf164039e85ab75da4de0b7dd3972db21c237711fc0ba476db88c6dafbdd1343b923d23c20535313e88bad8d16334ccb152825b547e5b26eadb10718a9cb9989dfd1c17e9ab2b23467ba794d12c7ca7cb13a9fe8f45c5d87fcd2771a8a0c533039757c36be1b098a6aa4ef1c79e7311958b3d679480a32d753397b72d86719e98a5a47df3bf09f10b3a222b2c6d12ea1f7462c1a7e771a1d1a0ed8965cc40881ffc7c3fe18e7ebdda937f00f18ea661150725f5e3cda29ea11fc366348e06fb5f2c9962dd8730b1fa2d69b83ec2132ac7215e765e823d6d0249e811f9230c9f91115bc8a3d77eae992cd3aca576d0f470004c99417ccccd53c178ade2716211d9303b63763ecfc97f75a9b8fa433d17a03801d081b1c4faa79baaedd3c72c96e5eadbed5c2e656f2fa9631bdde578a830f91705425ccb0f7a7745366c4a36e70190eed79dcde3dd313eca7ee73f0257d86791175a847e24d4106a1e958c94272306878f50b8dea47e41c5b8fab2062fc2738c2b3b86a2d4746c8b4aa82e95fe063cc43b7cc418d31ae85465da1551272a10030c53dc93f24c10c79179cabe7251078614374934bfdd79307e694940e5c00c2b9c41df6320f4a495810bd17ae2b1fe0a328fdbbc346e1116163a585ef86db3a520906a41b3eba70264e746290c80f7798e987bfb81d1570d5085121b61ba266efd3423817a3098bfb6b6c7ce4bbbcbc84e04b759457ab2ac9116f10ccdc4e9c2dd9d7fb990d4be407a5c506d901185f7413abb421da2541070be6dadc79e3cce3d8708fecbef713a2e53b72c34770ce0c46e122e03bea443efa3bff583a056b6d62903332a71e9aa5193f4b2f0493c6b309d05fa5971b4c848570867b6ea5b77a64f0aff4b5d0baf7576cce741c100974e3170b7e15c2e455daedcfa4651899819b9d7ea03af2b59df0294aeef244727ecb77e00d96ef3a598bef5728985fb051659fc21b38d04ead91e2f7d437c18d0977df1780acb42965d1f7ee3106def669fb23209316705c9439cacf7f79e113198e09a5b4ced0dd32ed2fa314981e2b82075091ccd22bfe0721dc59b3b5d36654f8cb3e15b0daf99b1455d29e353e0c1ab1ca756fa653d18e11f1ced6cf95d4b9f64cd31b4be3d777f3c6f7b35b170fc56c3772845678b650a94cb0d3fd8f905711406b798f7c31ee0a424ab9c35c3a522403ae081c43651256005d0ceb3dcba2c14f9cdb3a01ba1a594d00b52284b0cece16200a2f41ca19c0f849e4da0c648d4d5b47a2ff5c0278d5bee74173bd905daabfd7f3159a264b1a8e4c4fbd7406135e69db51c4279aa401e04eb8656b65f827136a2d4ead8113a25531d96900d8a55ce37a1a0f453bde58b255f3fb709440b1d20c5ec76568d3e8bb57dea4c322be263cb062419bc6ba458eed42107a11d8475738ca85db59f4df9916c825008f6f06aaac9fa46533d4abb5eab5c4789d3a62fefd4d500a331a483bf3fdbe25d125187d8dbc40b7b53533a7d155a209e7edb0aa5811c5cc0a25ec5667cfb2d2bfe94d1bff9fa9c74dcea1cb02cc86546f73a949680e731b779d4a872706668fd12a9d999805a3471c767176cd295b776b957acce89a271e196fef502601cd81f8c47a72380a3f6058d600abd4c3d8a6e04d0dcd48069a12fef7a448723eb241c9d73ecd9003dd59c9107709d6864528e168b391ac82706eccb3d35d0f535c2c2e7fc886b901489b32169428d0907f107b4da60ce83feaba3c834b1736721404e57767cd402221bbcb43c1b85fcce74e44be4ba4eceb64f739b6d3807ddf9682f8dd502754dfa9c034d5e436c1bf27d561e50ed8b5d56ff302c5c7a39a1287517215198a7f99f189601512366cfaccb48fdc583900a42cad5beef003175b36c51375f7566f26f2a2fef7558f6affddde64b749eed8c1bb97de7f9b0b8eb89fecb9683ed75f18e97cb69be31d155c34729a82e512f93e5984c53e78304d9ccf203151d25de8248dfe860d36d7138128cd47550bfd069e82e5b0f212b17fc24368fe018d6946c772cbf10939fef2358afc93edeaecd5bc57426c1f10d416c1c410dbb2b8406cd6842a8915f0e40231d80cfaec85f880e85312b5031eee1daa9cd3adb8a8fdafe79bfd2302322268ba2fa45280373fb065bc4806d5c20df81d40fd51a3282706b112ff9b4b972248d34b0c7b2fe0ca54a38d3ae3d73b16002ab0007aced888f2c52aabd16b882d9795931ba223e715e9470f5a6d48c07a0501cdef62a61908ab423fe357917ded4537d548ad5acd3020e5024ca7ce906c5780005d4d6b51e67e8d26ef7c7a3585c153213d172c572c14bf231c870ec7e71ad38215a7b2f072cf49f60eba08e65985ff96a71de1fc3a7fbde0982472539e96d653d8b69470fb8ca055c0a462cd158df626b2dca75ae567b9e2fa694b8050f568c55c17318772e288f373c8ed85ddfd62492fa6567f90ea83e4ad9a687626f5dfc3d0d1656ece02b048abe8b5aee3a1e6518d10ab85e0f439fa8ae4d75ab4511afbf98b915dc7439dbf75588defa8843d4622561534c4a9771fdfa37e98a67594ff697c43a6a9dbad4ecf5187f00ba67f3b2b4e10cbb0c8dd7f672f1c72be9fab9a889309e137380af2caae2ef12046fc5012adbe5af5f4004979aa3b11ebbcebbace260d82220fdab537228c05622b7f5562425c4417cbee7039a5441dcf9858a4934230a6d6c606489321993524e1d79801e1fffc0116fbe741fdba1c0da4ccc4ba2d05486b517260ef9f7a01ce9e74a4b89ff07359cd484824404f7e5bde2de2d02b1b7eba0e412699865c68a5bd39eb6fdf0c5470b14c0dc8a2312dd37abc927a7178a467c568827aaac14f99a81e9d1b35dd52655c85a609ae0b772eb5f55f4f8eae14ccb87705fb942ed65cf9dc179fd7667e33739ad02b947951f66a484e11d50e55a19b3da198f5a4529ae84d91fa55f24c27822ebff3c260661db63352e8e3e71e6b9854daa279613edb78cf5fed18ca49a1acf452f9a0602ce94d87e9b1b5c5d551b7070fd4b5415d5abef7e835fe06d7d6d59d15990e5d92058cdb7fd0311ad536dce68a41a53d61b5553b6446c72946801dc560a5dbf2134a36afc70ab80af8974346ef4ee37b9751357a056204fa35794063cf08be2fe6595eaed1f223f1e6f1d6f427c49e75c54faeff5b0a0c82379369316dbd984e3373793f4f8312df7f13caa74ac7d1888ab3d30163a06c7db32425a5f0b6ecfe6fe66ffbf753afa6d8ef15a2565a7c6b210514ecb83bf6d9937c869b717f37148fdbb5bf282ed15ee960cc770ea9191a575f58b367f46854af30358fdb3c017bcb487aac2e736fb4b04ee7dadaa8b9614417f407c0738469c812a592efcf89c4158ff664b8db7e76918d4f6c69bb778018b12683aa4fc6fa9a8ec8c6e6b3534de7d2ffbe61548994b0a374145c67210e693884c806cdf0fccb9e145c5db95e27fc0160efb40740b8608e9b00901ec4dd225a4686b274b902f0eca78cb0898a0557544cf0482b7f971c4544059ae184b39201d8b411144e6819a2e0572ddd18bc356d9843929d3aa3590da9b1c49f56dd73255b114131730ed0861fa1f93881ed863f7097cb90b5a4d9049686958020eecd0e5b14b4875422f0a6276dd69699eac6ff2307bcd3477583a1cdad34f7cb9fba3d05a11f073b25df9aacda3fb0da36fdc21beb3de97d1cbc6498b80a760d4105636707b75450c22a1cc49dd478a430800a0d53574f21a9368089ab8e73ee60111f6c1e049041fcaa15182f87fe24c986830974958f4e1c9c35bc7a6fec57a5e8d02091b8b756c5cc42d234181ed7872c1f7bd7a0eaa50f5863f2ef0ec71a9cf364c0b0ccccd19a6a0d72fe0a407ef1c66fd23048784a9e54a7f3a76175cad760164c25263632477df1e2699ea94f16b91eed4884422f239ee6997a98d30a7a618a990c9a59c6813366d31a57a0816a27a9c5221bf93c6b9623dcfef0dcb4193ecba98609d08afb1e2978559f53b007481bad2d06d8893b24d79a5f22750c6f3a65fe7e11b9558f08fce33b6add460f13337c452421e6aa499a31f792014964fac0d38f9b9a672030e21a996ef7746d37756f5e6b66fb29a14fbf1ae840e3d535a4e6b58f4e28c525bd1bfb2ab5886e3bd6ce943cd5ef2b5d668c16c8a1187c28ef366168fdd3fd5cd1c587b6615822fe537c4f05186c0704b41dacdcd1801b9f10173c5b35547d120df6d2be988b302cf9d9899c4b336317a969eca971d097b2fce38c700f62d51d2d7eda5ab4b3b2ba5fd4ad89afcaf2eaf2063ec0bfb7a85f4de6e416753efab1a342e723f6fb068bd27a5d13eb12371fce6773292c7da3b46e308796d50c2d583db09d787ad20b7d8bbbf1b17967a740622f03471407421910cfce41553092ee052eb82c3b2131dcc2b9810b5c6cae8cb2aea7cab1aab9246e44bd769730c730594c3b3013eecf947b589f10514f4034d778a0199fe6416b828a13e5bf89fbcfc8ad95a1823baad458bca398d6b3bc66e36a50f2e65542ab3177edab780bcec60a40cbd792e8064e34ca745ad61a9051e589d00db3b26d96556b339355ea9613d941f22581021025ac736e8b7cde8b0dabb975469cf8ac5f8907de19ee37ed882fc8f1eade4b571abc61890bce2c0f1ad9a7deb6b26aac82dae19d64d0659735cd262e5d9846d3c7db1597decb84976eb49251be4e93fe6b5c933719e5757c3492bc61b3a82e4413869e890fd17360d55be5220343523221b9a0d237f3c0d59922cbcdbc863ac060f66954007078df89777fb79b36b592cc75cf43ead1dd90156fdd06485c1bd262f98060b6a302c6eb1d484d07e43d2d9b4df1526f9b4c5d79ad3d07f3d9a72e5d18bf90ec6eeabec35a17c00abdf16610c2c6ce6cee55cca94a2ec52e38f5688627869c1f8222456907f1d2dd10f7d2c711b4660eb2064b726c8ef8c78210e9d2f5b3c69a8e8f8bd5d2f43a43195637b50c51f2aca441f44819a6d43adf0b24732e2d44b40909855404468192f35a6436411dda86dfbb78d0d0615e401ed559000f19e6b5c0d77a4b436a02ffedb3e5f3df0770dd2348a6a5558740ea398eb0e844d62f824d588d25ae7f65e3843fd130f7130e8872b6909e54263fe6c6f60c8206672a8202e6bbd7af619c8d643e9a0e47da7fc94f7b3a72cc6ea3be863d317536c2d33efd08fd5e7cd2f622c5ffd03093812745c2d06b04abbac0c7d9ffaaa9473fb2dbd7329ccf98b0741c0b2bb04f2cd700e62d01d8b3e212440b2bffce38ca43d21ac99ce27f57f1e986d8e229d6dae50d334049529ea53321f6bbe09c4e2fb0d4b74e023b22eb1c9898adc38c7c5d099986247a5f547368a5bc7eb42a9071bfeac96050a8e7a26aa9ba9021b665eb0bc8ccbfc7cf8f94d01e247b0998a900b578b091700d6e6aa06f12027c6bbe6b32bd3c9066fb538d459f8401fde982674d82fdbbbe46425edaddedd2e5de49f022e00dba2ad0bceea06a443edb4a8d92801edcb481c16a3632ece2417388e76393cbfaf79a1c78fdcdcf34d437f66523efb93b5de6d9ef151e1cf24274a88e087ddcc8a4794d801aee86ae510a0366df1c80f8b933b5b6e9cdce041a1c11645a2977a6acbccbbf9b666d0a46db8cb6a870e7716efc8b4033a9ad8ab0cecc34080e2ea3f869a2524c5e4a35a2ab5523673b9bb04617347fd6f23b0633e97bda4f82206ff3ab7bd85fe310723fdc10a53bfdf60870d34db97c437353ade4d4fd67301cd92f2d09f3166798d2b008a7ddec871b5aeef520c77167ad2f2c5dd0ba6d66c43ab6ece279ed6377e132ec5f516231cd3bcc2c3cde47b788a8ea49b2f5e459fa373fbff65ff92315bce8f758fc6744d6e9173f7ee4f370435d9ea3119bab7d06fe882d62a1cb94730bc7aa7387f15a499cd261d56fd300cdbcf8ba3bd57ca4bcec73f48c3f7655f85671036cfd5427f02a11319efc0f80d21aee224b0a79eda503bf49c219ed29a4950a26ae17db84ab7a8d58847b2127f3d138d0e9d491284a26ec997f47aee76833c7f233f2f6eb4d2bbce5c82f254281103572ebe8a48e716e90a12be02aa7ba1505ee92b319f26df7a2807b1498c40f2b9df01b4d7c3ce4130a49972fdbc04eaf437c2d9f31495ae666019c51f4ffee61c4d9df72b2e9ca6ba44193d60aa36e690fb89bf06b321e123ce20fdd8685fc15b4bf68bc6b0bc7e1b61b70a046ed74076d14da34a5df235a87e8a798ca92ddb5deaf5d4408300196b0e6cf03b51194ce67374c1251242d986e959bcd523aa685782358eecaae96ea03ddc552a56284cfbad24c9312ff92789aba46db0a4433cb3c5f5d5d104435ba44f1ee7d9c69c500f638bfdd8a98ba598580a4084cda1be608831e01bba78f9304a9c18238f06cc8093f461db44a63981db6888465cbd9aaa870803c70c3a3e194fa75d31dbbf0d21a48d9bb0535873a92466815adf8abd4211742ecdc81990ab47e40067af5de55f71ab6c3be53ae431f9599cad9894b0f6e0fa025ad6fed53500863e8b03f35810d19fd46be5eaa0072e8b17ac835b992427b92eb729ba201cda8ca6fc096f83bf1d55494aa511438b503c4fce3ba4121ec32024164c2a8427781ebbe0053759dbe867d49db238ae09be1be407b6240c11c37e1b979255ed475510f7930da2bd961d774bb2087ea530630bc0d1a2e1b7f096dc830fd0d36c228911a3ffe20012cc2955bb4a1e73d5cf9c3d6e1fdefc753a407c45b4a81874286e8327f9ccfd5d3808c1b1f6c05446204da09a48306ad55824504b2b27126d79c99e5feea6e124abe056de46470edc51323e67563efc6df0465535398ba3936746450453f528da60acf3f2e71880c165338e9713e6ec71736e0ff47fc088a9aec9eed48b231bd0301a202a700ea8b9a491837893b314f6b03f902a1c53fbd3aa19ec8ec12725abf70e53ebcddd083449238bd5333cfb2963c1d12d0d18e741e724c2390bd3259949e09c1438acfb91e5413d3d0adfec53a679df93033958f3f222fc7b8e3e9cb4079b8285ceb87378bc6853e860f2cffd098da83efc6e879a07e86e102fa8e257883d3927e001057beaac039e4d2dbd5dfcc2fe953f4a38dfe43b8d79bf382ae2e8af02a257f7829f5e812b584ba43454df6e96ad5ce02ef483fca3cbf1717c65837ded827b244e9c191d374f0431e395eaa0b627e28aa2b32b701a172ef28e0cd07b432ddfc5313bec7286cad1f4b48862918d0eac5f11b00c024cb22719b36d0467cfea3925fa09841652343048bec558381ee837ab4cc2094befb45452c1369a3eda417d75c6a5f7109a466d4be567bd6c3d21b3e66db37c2e23f38590225b9a0e2d0d1248fd183a40c16fd1a0841c7a44e3f7ea378130926b80c940fe38fd25464d4a78edda60217e3aa8ffead8c1dcc1c93aae89d98f53480e4ff2cf758e1a5fd7f2e30db113ea43373d4bd4bb011aa96250740b862df40868e4a48487984564969b4778f9419e001f952fe3443ca567ca9934ade4caf46e79be66ed62cb7157ba48b6da855e578fbd746dd3296cfc6000fc524e9171262bc137320444b0be3f5c0046565f725069de39f52a68c94c4dc1f8d6f7395aaa6f998096ce52ed91244284cf01a532feac9d95e291ef0c9155b2fb124b9373d3237640db126d69a5ae16643046879ef547b345f351bfb27cf07413cd21092deb3d15ee3b95264514b05e243934a8d3e70ac636da710195c9aa02accd9af1abe228144c93ec71b4379a6f530593f126c215e4137c55f4e83cb6706a9d74c0847a0d0dfbd02495d0cf30ac9617b7be23b3df1e418cedf8d84fec8ce40bcb4e9938ad7d4310716d04e2b7bd9afd709c6c6f324672c390d72d1225f79ad59f6bec639a7baed3cb984cd828ed9952a826a1324757d9b035eb6b581a95b6b73e758d47c59fec1d502ab2aa3688e1fe58ca7c1e2ac90e65ef624072bcd49b4a7e3544addde29d72200c51784eef19f0599697dbd5c8e425ca23315b28d19e64fdf5292ea1778f075ef772897ed72e1f61e8ad900a737a71bea757095bd5f9efd3fab20e105fe138815d8f2ec01d53d8fe5cf59f7207e6e3f01e89d6a2bf0b834ae4b4d634bded508ddf06fc99943bd2c7a476c1345d459551b2c9ec5583a6fe5255fa71b1ca38653e8b8f2716f7eddf6419b89515547a47b58c533d0c51607d856b3a51d7d2a3d1ae4893e67df99f2c08e489daf91d4ee3958ee749c5aea8d17fa02fd8effb8670fc8dfd745f706f87af008d6a9e437b99ab8d750da1629b222b3779e9409749a926c305ca2f0d79c3685160d07e02ebc0d851455b0c87fcec8486be85860e6e92ec88a8a409581b1444bfd344cd721181b75cb2b843e824c7d5238b0655932ed28795958915718879ea5c4db8ec16e56230cbf4d28a7b2a7cb1d20fd85142a57fb66e6696655c1b4f4f454a1bed4a540ca04baaddf0b9f44a1258076439f29eb535ddb0ad19268e0c287de36173c99f7f3f99705baf94a787653a77993774395702ba577703bab3ed86f04a4125f7bd8a25f0087f9b2ac40fe99105f6ab0390106efba0039b308a9426595245170eac15d343123de92ac6391eb3c6b2ef46b03b5549c582b919b43bc2a56344bd0378dc65e5cab3e4ca0ee347347a9a7799149f2f7c5ca5b9387a52e14feb5808822337a2ff13f1571418441202890d4ec2135d2edd34fd19a6856c89f1f5f0cbf8d2fe6a1a9acd9ba32dbb7f30236ec07c46dd190434daa5dc3acced7655d35d2f4463bdf3edaf1fcb28c6ef77a31358d933358ce2762b5a6b7983462df039a260a794e1f6e1236a01a7998593f227fe8bbc7519f1c4f9cd09a94de1a934dc2c1d1868d96738d87fb78a8c0252ab84d902d1fe76b123ef33ddb4087012cb810db2e6f7ff59c4b34dfca987e738ff5aa1062f3fe7b51fc89dee03c36bde3177fe92e7802ef7d143c3a7b4d578da2f8702055e3af4d940abd224fc8ede9475fa1034dc01ed1e361a055f180691bd17140ff669b667f50ce0aad2aa72fd00ca8feef2e1ca2c82b969f619b600be1ba0c22bab53d17f36e690ebf64121289cdc832b9da6a8eb1527f9abc178040db8c9e5ec5269ce8c678efa3e0b2addbc0c9bc1b13b15f16b8e12d63d41ff66046660966aa7d86a26c2bd1dbc988e91174f47221643990c87d23e82b25758fe0905b2764810f2931d8a9bea7b8615eb5959d7c09a100c74d1cbaa07e1f1d07e716db08a6f5aef9ffd6ef14e49073174e84f0a979bbe6501ca6b84ad6a5d5a65da7feb1dc3b2319c6665f0290f684cf8cc3254eda4f513cf8a91920f829239151c73426a6a9c471d5ddea4ea6951b4dd525b3ba350a2849dd46435f03f7aac61c9552eac6f498cdebc45963ad4b94d9ef7dcff3c0ccc808ea77074a70b6fe1930302f675937e024fc5cd85559a81addc591061b8d0d8c027159173cfbab2305fd4ef4ecbcadbd8fbf2b097e0125ffd3baa70fd86e8642ecfb3561a72c54cef721136a7135bc5db446dc834cb0fb794e0b6efbf68188dde7a6939b41532d5dda193a15d96e429a0c8eabbcf582937c4e1effff67e6f1a0f5caeb858378da942951c7cc7973ce0ed267906a650e31cbebef5c6400db9b3bdad92eb1e101971cd20ec8b626370cef4f2e44096df19e4e0a092cbb98d7d6b47139348895b2bb702d28cbf595278616b2cc14e8a5f192ce01bbf504f6e888204208495b724a2f4deb62ffee015a622a1fb4ff85468cef3821c7395d73b5e55418b3880f9e3367e4034d6f737a0433b0b6843c63812960f334d723579f4077afe3146971049fc4f5726b7899863bd2e13b500563c46f4b6400ef449ea5f00a6ddc61928cb9d402b668ef8c1850c7d511b96c4bf37c5456fbeec72dbc595053c8f07c727312be5c5b852fc57b1ea146c5f5eb050ca9f0b74f6063d702588338ad28cdd11b57b1aa23cd19ab9e4e2d0d9e89cc43cb39643b887fea1b73e79d352d259b58bdce391e383c324555cabb5911ee4705009dba9a803e56f34ad78a70adb7cc423c3493671e2eaa64541019e70ff649d2e3205e240a25c2b637ff46285d63cf76b556c51eaaa518870dabec97822028f76e3002bd469c6053a967bd30b236b66d4a5bfc628595d9c5eb29aee90f2a7f129aa094c83770d662be4dc96560b95f9d6d6bba4cf254fc0b49fe4904f975c10eb82799bb02caa82f32ce80642cce71936467cc0a1180a6323f659a88c859a0cb062a0578dc95d6af7fd91d8fde0c306396743352603c2ef68515814088c55d44d7cccac93a112635d0f81c2d59374ef242084513bd3cbf58c3bef640c86c53c75f1c8da17dde6429840cd47fea89cf3deaf78e2322a983448ca993eae974021e957eb9b25c339b2e3be7538930c881d24663bb087499686cdca92a248d3c538937bed80fb53d2e99cc3b11baeccad1df566c0ae24d5bed8f3fbbcd450ab4f429dbb398810a8a017c97e93728625b5edae86fd72f8f45552679d074ac8fd08acfcb4bea3a7c9ec2856ec300635a385f07a84d5c04e5503ccc07d5d3e0182cce48436efe784ebe59f0f23276695701cf1c70f246d79665ba96308d30ba73d1cdf6e9e147043be8b9f3a5f55afea17bd1a0593991e98c2a054a29840cde465248a3f4bfd52687475f7695d59d3133ad3ece496781b04ba589bfbc0cdb0d68a94ca2c6b153b924ac815dfeb3c9642d2a0ed081331f340a6d6a7c7a4bd1e63946d5c2ba4f4e8a11f9c74faded0d6ceb65e6753143db05377bf9064ced2e198f1bdd8e7c471afa78d8706ab55fd1d74d4b1d6ed0e958fbdcced8cce7f938a044a90ead08ca97836237776176ccf0fa6a961db1f814d1c0cd3ccf574743325906a9506f78930a675dd648900df44122644c22c7045eb3086916f316a578ba0059a41b4227f661663ab81674cb4e0e2143e79383af188d992d574557aceeca08998ff92d5c83bf8d63f6c953fdedbdf2e13a3f1852d643dc9a05aea51d54de6a19108e7c40fdf1d95a529cb387e2e96d87a5ffa60faefcd77b7342a974deea86a6f4abe6e5e312947af3c4bc8e4c70f7cbda4ca11a92cb6539cadeb0b3994c81bdcdf5050a86abfbc9e10cea5597dbbfe269ba6c36eda1beb640e05c553f3d962248babe31fc1d05265da1da0e691a7750ce1e2f86c16ad83728313429bba09a3391126c8b6e9ad6da30f86cd9bc69233a13e6f99486fdba3ce58c041b0ab7ea6e6cb4a320a1c72e04586b0b3e9adc7321888ba6c333ab7ef0c64315392828ce5eb7c55a85dc6e683597b0cf51c73396db2b7371be22e8bec218374620989318e648117f4747a988132ec3dd30e4173c53e85ae19d33b34ed2b91d3334729a4dc37c0a0a544d10b07b6c9b0d782db83892781836b9acf2e739972ea4996bc2f19a45ee4314fe173b85c57444dbfb48318876112ce93ccaa8fa358a0539cef6f4c999d126926196f74df3be84a61e87ee0d9f6e4e3eac702815cf2b366e626612022b0daf1c1c04290615b77621e260613351070415b3ac58bab01d6de6d9667310ad70e4d0da7a8f74c8763ff7e31fcdc4427193af9a92a53444bd62a8aba2927a0fd69148e3010fb4043539f11877934044d1e5e6fbb70eaa0d5ea7e85cb45b9eff1707edde3e14577130f8750b0f66096c26a643eed84b270e64a8c89a67884fe9c88c3c45b64af64989ae032182fdaef3fa0984191866c4d2861b20634d1de5b447d374979b11151b591b377594fe89f6430e69074589d77e734086222e01dcbdca402d2b133d9f400be9f2978d16e92dd99d5b92874482db1d1133a5f3d1b181937da0a8ca3eafb38987e2f7b1e82f08a2340ce64e310cfc98dbd97478a10e8c0bbf4c3075da8ab282b31957cfedc7f1d10d4e08f38fac48bf3c551c791755ef47ece73848274c8f7cabaa57d1325d6d5e8b87ac4fa45a537939c93474cd9bb9478c2a5b866c86412f130a845b850c246c1d7eeaa1c74094509a692ebe99ebfb0303d1f400ed6c5bd75d1102d40529bd1eadc948b6754c98a56aa425a543072bd8a204eeb5b28c1f6b3e5521bda19c26d36d032a0fe320825d94b8bb0be16a53972abb5b471cbf2fedb4a60cd66ea6615b0b0710169bd7683082435043e3a65f40c8eac76f7b11983dd507b9c8f93d502f887305e9d555d6963c8285a0735efaad10d5052a9a7356a85e054ad257ba1c6330a153e79cf7bcf6cdfa8d3575543902f6711da6b99d980a10f991bd1b2926c2b56c4f27bf61a9571c1edc496a33b644e5fb65348945109d9b279d4e018d670c3129b1e1425cd684b66a914caacc3e83e0fd2e938d9808d82f485122725d09f786289a83ac3ba1779d7560a66db009c378398303a7dd081a827cd98fe1fae30f28c78e5ccb9d79b9be367775f4a29a91ff8833d82b3db2c8ad4dc3e3698588bf784ca783f9f7398213e9f7c437a162b82c501439c3e765bc4ead205e4c363c398e267259f11a1dd7d6115a58655dcd6948e935346e0d1850b59d42c64d5fdd0594b7b31296898630f66f7f3208d305dc6bde2940e02edf84995e05735f7758f42139fd6bef7cf961d8b14268b80c01ffe7d84c750cb840d83e339f7bcf6ba7376c0dc6977e2810e8803317a399c8f376efe07f7cc6ff6d9349b3abe322881d43908882b9c7546231c1312b7f0f9320d4bcd9e3e08105e65e77ae1c797ba36e6280c73b5fa08a30d4b1a3c102310e68b943c6ae750e5ebe6480e5455e6e6f810711813d02aff09c346f9ef5e0e5c142dfe6511fb5a94b1a15640617b9d351f12629abc7e8227ea6fc91e1c2817f12dd04d9d3d3040a3b264c9ca8358cd05c1d803706f1db8a5847f0256d6bca3a4739401b82275fb64cf17ae8d8f56f82227c7b22919faa70f6b27304db3285dd69287f0a736d759eb5f4b496282d10de3fb672ef95ee1c71627c643d5459f6ddb31e73bf8c710a2b1f6aae17d597a11f29571cf707eed84c64e8c31b8e7773222ebc6022336d31b90665f5e04a0c10d0f9f87be9f5da54c29d959a15cf541f422d353e28a5a31d2d1e0cc0371c1373392c06518610b170d84dfca458f4e391dda4a654e3ae7de4fd488441de4350dc2b57c11e2582ee6dd6b7a5da736d3eaf9214a4770286c5c657c09e276c0cecf77e5cdd73f9983252027fcfc08ff552b27601e5e223483f55803b56c634e30434ee891a633d74577f4fbbb2b3b20d5ea34cda2f85c9ba1aa9b89272ca7cfefd4db52d466207a9def2fd3006afb1604eea122cb47bf36669cae833cf5fc0c8be9c1b562890cba1f7676cc848189e9dfc54b240f7d2c2f3dfa1f3e71ebb116da2a62d19fc9caa31e6622448e730cf723e0d0eec82aff63c3c5cd564c59e506e54c4c2ff245117e54603cb3f475c556f8c14f3d6c6645a1346ba7392222ef82b42b3869b2156681601829a168fd5718974db7f3b1bee29c285be2919163ae7e860b30d74ec1252aa45ec1d1e211484e5e6eaa52ecea10e94ffa56d445aff8e2f406127af6844ff85308d1ac9f26f68877bfc8a9f318a5ddd88c367f8de377e9c7ede65d47476b95e97efdfb110086a05e5353347325e29ebe965ddfe103399076bcd02cde13116f6bcca9a54c6d26962efd31ef7fd3cb3175f883e07556ab5c91a124c1352ee17cb4e9c398f206131835a3daee86b02749eb601928314e4b0d41accb0cfc12ee9c4df59fa3bd734287d27ecfd665a082ec181acbf15b3d009b4d1b02f7b57b53195e6bd5397e7ca6982f4223dfb7e3ec4855ad4c9bff3dd8482705a44ba49b5fa382fb81ceff66f7342122066951ed0e2e9203c91f4c497bb192a93f4d64812e6189ad22311ec31b96f6b92e1c9e51e45cfec0ef27304115e8106c7d49daab896d8e9c242f2ee70bee24e928e5cdd90ea92a25dab278a397b7bfab51880f0b79b0f5e510164ad373c522e5c831c395815274395286402ee4bcad2109cf46557d11849c01d83c893a0d7a6fdd1a744e3c7dcbd148b387c32ef565a5e3fec7bf6d4f57962080dd7d560088b802421f576265710cec79055654445c838b6b94ba876cc1df5bd5536d6e20f7757a6d0558ad8f46e97ec7d06443325caed0a43c861a20db48edcb5c5753058aef3dce3f74b1b9b50cef112e7b893282f0f88669c39d0cbfcb7ad11c8826b80e7329b3c9d1cb9c9da23af3bab07cd25e84f3a5331b902c94b447589358409e926297087764e4f22657036e8b04c901e343e82061b0cf38bd3a74e49df6970da960a9eab01f4cbdd836d546511d69bf195c52dafb345a6ec253c742afd0bb2f05779e0247f2a8a10cd777a179f951f9d153bd16f2e9c026b1350a3497887d432a5773f5ba563fcd0cda714687356b2f138dead49ec3468f859d7ee8d97e4ba6b42e4fd6176c9c45db8d15ad6454671eed6e1649898bed4ce36f08fd798cf6b398afb8ff90775846021ebf3dd88dfde4dcc7a2588117c8195bf08ecb34f7fa71308d9d4f7708b890185f29632207b3e5a7aeb072fc21f066a379a5e1174293bed65cdf7f36900d896cd8f3ab1f68956864da8026c6b76d18923d46f767fc374e502e5a5946b508a94660a6a29593f38eb9955a4c83ca7d435efc9081ea319df8440622a0034ef924e609d57321753ebe134eac4e850fc2ceb95a04d5ac49528ae11fc6a3c70a62ec728c73138c2b824dd844c503847653324e2e099664948f48b3ff6f5c68d746bee6a05c3a75ac718dafa8a14da043c4ce693009a02d92238f183b73b7adad6d70b5604ff68b70350b5105b75ee1901d922beca36081d71a8a03b5a0dadf0bdd618535f5482c5e48a4d5a17efe550e88dce304f7fbc7139a7753bae116a6be9493eba3a3158e63ec6017138c650ee5580f2638df06e179083c9ea9f0d0c95e87627390f2ab386c87ef4262c87439befcce68c8ad47198d888ddede48857f7346b4011004165caa2e93fc20d297df61d5e4f2342c02fae9997d7df7639ac1358433504d0ebffc74641fe93d8d8b64a15ab8f060daf2fc482e4d313d01751f50ac6070f34dbe85291bb10fd5c5fabf5836f7a1b9e5066bcdc914b0704d3c6769687a89529c949a2e96728b9b20d00c371003f95a85fa300dba1aee5992526ced019d043f775bbe97523cec6a156feb081b30c47da3ffc646a03a82f008fe518932296aa38d1c59d2d1ebddc1cc92c39f318e978f6a8cd1a9a273fc4997385595db94b7554b7e303242ad053e8f80daed4e1a30698b7d93da09a08f66e9a3d1ab2b349d3ce6435a4897f5abb5f37a5bb7aa6ad17b8e6c382f201f9ffa6258eb9105ffed270686d5177265548137c99d478da1a48fdb390d561c5e219a6f4a9f98f1ed431b974e0aaecf402c2e6960bbb19c28acf62e250190323b7bc8bcc31b712ac791e40cfa5a92b09227b164c82c8d693e9db6ebb4bbbd786bdf692f0bafc7017c57485c7b9a5f5b82a90bbcd007e5acc6761ad387c63726da79ae3c241f065cf60dcfcea66f6fcbce689aa818622fbbbbf7091424a41022345bb30edd794ef58ebc38902f2a4994787f47f38c74a4bc80587339f2b1e91b84eb4d1d3469095e172ff4cae0394237511b9e96387c196345c5c0f5791153c25ae978f53c2d475e037a7f5f17edc9e55aa646c5cb34ee3d5620419c671a75d39bab4b8fd285391830a0c7c4baca80d3f5c11ef9b866746ee903e423cd996f8fc6203698dd8831db784548a56a9dfab73371aeff7e2ff8a71726232278c812ea6dea1cff33bf42130fb89fa167928880759d433df582184093903f2b2687e31f8f716f37e33b72416a4fa2cd475fea51758bb1010e6c85abf4b0834a566434ddd9790da57d068c19fd1384d9d0fb2a5610170739a0c57abf4c57e8c1caef9ebcfd0c6a0fc8680e8f2caf44c89a4dc0c1310921adcd36af459647a23ffcfdf35d45e9cc845bf5dd1f45d2f507d320485ca7200c1e2a6c790d5772b4eefaedf45d25abaef003257eb668843d1cb4106390afc4ffe7e145497722801d7f265d8d04684bae4516546618a7f9ad5ef63aec60b15d78dd5371b6c8b0bf0b5495636cf4d03e58574e4d4208253e4e635400db1d9404afb672cad64b0be1d1c53944a69a469a5b52d12a5a2c45530c667dc160089623dd975aea6aade58a460bd996b3a82070009c298687172ebb96c6003dfa487310a839d42bc914e5fa2bdcdb9e7b48730ffbfba0a75e72ef1048d2550434750907e36e602fa2b5c5f342aadb612e66d2d9d3ca5512f041503063e21b5d9f30e4af70323c55d24d2de39bf98458c52ba09b392c5d95372c9cdea31dda5c58760750a69d8c41a2a49660a67dce0a4722d6555c303d31c8701a26415b5e6ab9c3c6c053c65233e13aae729861c0c43298ec63d3dc602f3ad7345a114da96ff20684b03e3bbabb10e7711b32a00fdf55704cfe7aad475dcfcef8a489eb8ed89abe0f6fd591d368b187cee634c774a8c336060cfaece4b928d9c58b41e8b3032a01418c5f2686bf67b14c86f07381f295fcb4e1b2af1c94039a4dac4e01d55a6aa9693e69b8039df5711a13de646070ccc069aaa886c10606415a2ea09579d555afba210f7a2a994f75991232c19b67eea2602607172da243b16d6594aa3d64e2a3041616c94d6d5383d2905b8a6afe7c2fa253e7546eaf963d9cd0b0e2586eaa3bb7519c4799e2412cdc2029f9810e3a32f015f524a4195a9fb81a397778f961573add8efdf5b7f014c702e80b4afc27b7cf30cf1b2f61c30de9f23b33af808564a20d10a1131074d11ed6990d4a9dcd37f051349a3197db56b9662306c0573cfc90581da419c16a2741ad9284d88235c069be5fd9b6521f1a0b0b02e8d7d83872fa05f4db312d314b5ae30a67464108924cf0d2767bedd80fabfae4e6ae6d5346592cbf0521d35cb35a5801e465424e3be8c295b80645a61ab0687633643c8d60c418601b51975112232bf3dada20709c491573e0a485c594c9a579b082fb7084c53dbd6101984f293cb4706e41f00c021304b33f4fd584813e69565cc76447f0404b8dbc7f37c37c37c8ad8c80d4b61d4ab34d3deff755303c25f37efdb683443ad483555346ce2092fbc515d9a75f34310ea8e410e5f941442be40369ea2d0b663f630b7101aff0f184ecbf8b75ac26ffdb396d364b3c11afc2f3746aa314d48796eec1dcd33c71b660e3f110087a1252ed885ad6e231854e8209f1ee9246fb80bd84b20c988ccd8ca46dc3ad0a7124d6cee2540b6c0566a66c30b4d738478c438b2b8c328bd44a2ade9af4c603dea045d3da0763f1a25557e4448fbcff005eaabd536921b7cd7401e42febdc2772946cbf0545d47a71179d6414a6de0421b129a93bfaa00c37111bba19fba318f7246677eddaf604339dd68bb646c8ab9976417dbdb6dc45469e941dcdb6cd9324b19ae9d24fc286791eaad85d2661d684713f5a2d78d63e6dee436ee68ee6ec58e36a41ebb1f897f83b8527a50279bb4b634a47d7f5516369cbd1a0b54e02e51ad05f4e94d2bb073e4cc1a267452e35b064789c23d35077771932d9bb7582a4d504ea7cba93da3673f58cf0d75cea7260b5efe0eb7e12c6f6f988368e53ed1549152c50d8b314cfa676c0c8d71c44336f1332e66ff565803d233c407a7a51a47038dd77265d240de28eb14ee45b4c02006ff86278f3c8cd18e302ea691d12f1c06a1c0a960abb40d1d98004cd07c3149a6d99609a377206c5ccfaa8cc5ae7e6976ea1fb20b6e7791be30bffa1c869f65e5151257d0fad53b88df6d76f1b8917e78138d635c3fc835ff6070b5132f25af3e9cafb0423e613989c4a9eb33746d172ce86b33bd2fe9bd23794bc1f698a57711d2128a3ec4a48c035f0f696e6f386be5f68fe8727cad6e5a83427fd7cb34ad65a1bec0a13097e8476146e2ee819e452fb17c5d912caa5a8b33e2558b92b06e80fd86dd20ed9a85706f05106b1044aa691c398c5fb640b073b246c3af73e1b21b055905c4ab5c3c097fbac876291f0596fee6b54a540a192ede630b4e41d6679f7cecc390231607e99ef943ff563c615525c81bc4ed6fa5367650bdb57af58ed4027a1bca3a2480e5d7dedc77a123439703b7cb5a6a3776c6c382a5ca4932f72daf9cc875242bcc346c1a6f468cc4797a3252b2de1004fa810723a662b1b8976913f8c3f567acaf861db37f62d5965ef60a8cf40d89d582a35015e45913c68839c78c2addcde35adedf1aeb8c281827bd8950f0299f17de596c0a63c5f928dfcffdc25b4646c11757ac602deca10d8fb7043ed3bcc99839d2f4f729590bf9d569255453eb0503893eb2224b43fa683ea5351c41fcaa5d2e4dc2e96547f6c4faef1d99b8d165fcdd7d8dcdabb3cdd58eb80fee9621752f30f823963f1b5984254d20b123ea41db7bac4c6a1a53689f26a6374885f1339a4560b8ac7f12a68c47c043347ffce15ccf3db9df45fc96df96d19910054d17349bfcf25540a0bad82486b57aa721a26e09ba8acb3a5ae4803675052202aab60254b7494a601406accb690059e1ff5af1933abfadb57781ddbf3939bd697fb974ba37865a83fba42f4d289c14306b3df632525decdb92d77d4d6249798789555fa18b9ed937621b9dfd3ccfd121eb0ecaa0adc6d30c2c577790f34d612e9b1e7cc077c861734d12503c1c56c471122e0321fe7ce02aadc62326bdc4591173c4c226f28a8418d3e9617a00c7bf4b069136508d5d3c47d47052bae16ef60c358ed45760c00d9566f86b3b2066c09fd6c96d66a24f0684b0b9aeb3d6c98e5240949c56bf9ea1f5bd03d710243d1469739bb90ab475c9078f5740f55409df84364da1c081848d7eb9de48ea9c3a9ed4a099433e0bb7badb79cfc07f137d7ab50b3bcb9cd81d86097c214c2fb361d8b225b0cdfbe3a09d49c6507801f1311c2edf5ef028099b6d63207d00b1c1b34587a3a44a6a920662c2352ef7c650e0577e9aa2b4bd05e503a714c5ceaafd0f11febbb511940da5fe1fb42695083f8f82af41fff95ba7c16d45cdd4fed0b4ec11569637bdf2de3b47c458e3614646a94ad20af7b0b6720451393e644e5cee39ff26df572f91061d660040ec011ef361b7e8da2e6f8fcc87b0f240fd4012a8b3ca4c5306962bf3c0edea466478223f6f4a8d596ef3306b99686f80ba9f17d93b1d6957441ddb08d1d9e5e015427c45307f0113c0ca06dd9ddb010e54522002fdc2b0fa331b1f5e4f20414c9f6cf0fa8ac0c049cfda4b61a1e6d6350de50d9fc4916506e6a767d94237e9721b57f266fbf7c9f5cff62ea4901fbfe04298385535b119102c2e3dd1e8d16a0a0003e24ad1b8829ed830375cf757138d1d438e8bcb97791108ac7f47c11f5e9ba50c43b01f01bcb4ce09c8ed5816122660f20e189961720a3383240b5576e4c79b84380a625581100af1e58928cf3378782099d25ae9b60ff13a03046eeff400abb1b09657c1787c3f08bb3fef44c81bdee94deed493a2e7a4df1d56af93dd59b89e436009d2556adfd71df455443b0ca6a0947903d05cbb5c90e1ad4bb40625b3d15cdc224c912e197b00559ceabddf518f5334047b85a25a21475409e5af81510f339f08f9f83fce8a8bef5be49739b7ca9d67cb2a9789a7267c9a7836a78fe3b1bbd71e26e1f9a33d57068b37e4fd492b8c3f7b656b55aecabaa47d979f173137ec3224b9f756c1ecafb26f679b4842faa01ce9a6592be2163bff07d2d0d34d9c56fbf68092a4dca5849cddda9b8fe7d4bfa588d1376d82b9fd797a91dc629e62e33f34c840c10a5b9cbf78b8a751d84d45eb4ff9f9256a7593fbfbfaf462704e717a39c97468c4be3fe80815f4b9df56aebfb8568d2d9dc306513e0f08eeb0e728cd7183d592e10076eeb3e551b25889432f7160688d18d2a5493c29ad1e7decf73dc3d5db546c0312f60e74e27a7400bf96db491bf84dba812dbb9d2ba9e06082b4ebfd55b401e9eddf150c36acd173b7f759555d0ed5fa8e4cdd463afba1da09fcb24874067ce78205f2d7c7522efb8af6f4877e36177e4638d07127fa3fc570bcae8c892c2fa5a8487f7e95e369514ae9f4d5b42a71e13afed2a0a42aa543e53aeda9e028f62d77edd5ee07deb85b3c2b8d6b87795c448ed6d4b75ca6e7da3bbbad42c6f763a16e8d892a821f0ad6b818f04de86cef383d8590e2b2b765ca9817a3d288c15591c28b430f7811a5feca4d01b2ea8d1543f5f10766a1a9c62306cdc1650b4b3766a06e67402569d0beffc23ee38e0916151bcc65a8bcfd368093b5850280738f0e5bde087fa2154f07cf521789e5dc8e6f1771d5f2759e2c24a7175843c54af0f8ea607283b90a832e5f67489ed50a832f308d62f255ef4b14e3c1c9aeb02cd5f3eee3910842d1ac46430dcd1ef3d0976e84ddba08fd7b237bd7ad3385a587a127d3d3139e40798992f98538342ed35d6709a23e2efff6f2ace043d3fd1582a4fdc096e369ea5be532bbb0557523975f72b7e0148d7dfb8074224a426f652ab6b34b0a1eb9b4a5d26419b71108a875c21e45dc252831b356f718dcd2e7a4aa599eea9ced2c2b05b215e771be0cfe6ae79190da6e23d2b5adfceac0cda467c73299d0c3db92e6997e85d88faef8c28df524d02af033b2c3ccc3fe248a7fb49854b2c494751d0a854a7c7be3bf7e27eae912fa47d90cd21253c082092b9be2ba8abe572f87dabc54e4dad45f6dd571631e075a187f7b7269e1bbfbc0eb1e21b61afa0df472b4a4be789e345532323bd8ff8b4d2b1d3e26b0ce937406e3a8636fe3aa548342ac73717be302a2f65f7df33232459f604f3830ea1c47e5729df830bd4b361eae64dbc17aaa9439a930fbeb8d334a9ddd1e658c25ff3f7df8d97ba07ee178bac7dbdf9ce71b7b16c1c0957c98fcec2b7b36b3f46b4320b8439a34c82b6a66c55acb1bab0491d11db29702268b949dcd3d8156d0599740c52bae25f4985f7f66b865f29b00da28782c452db41bb170a58b2849ce73ba3175c265f0363f63b269458252bd9a84ecee7262ec93c08238657737c4605fd2941fb6384f7d8cab9e4d47412e78012e0d83bc0628f7fe70bf5e8639747277eb98a5b47910b8d9be65c16894d55318e17e3ab4791747cb26c6739d2fa1db3f1c53c957b2a5bae75b69559abf5365c89de59b90d984e1cefb1c3a85c83aaf9612fa6af6cbaa7efc2ca2b8132949cb6f4973908457a87b6fedd89901045426e65e7c5de8595dc1ef6c16eba62fe011d278fd0c8cfcaa130ef3bf32b3c5470308cec8ae9c774846947cd00fb9cbb04d8764d868fc727d922f251ca4f45ab20e47f4e5b50ac829b7145c2b713717ed4c131557a63a5f357567504f93e43661831f33246ae7817fd47756bb8f6f3fce1c328d61427e7aebc254853fd7818735a9b4a361bfc6271d3632bb2f2591924d76763754421cb4a3271f1d75fc612a06dc74fbeecb3813dd5b91cf448af17cc2f2f8406b37ae86f715dda9d965f52b58a2170705f8ba69017bfa9fbb4b8097a4ec57baf003378f9d8ecde19332527cc1b7264a97013773840fa0261aa405321d2f7a7a726830683eb8764635122395833b775b1a6eaea60db3757dd24b5da5b2ccb51aa3ae8014325d5d2c872419cce0aea5468fe0b4f05c8dcd6386f1df2736c2e61b61bf0e1a7a8a88da0c304ef20c9a59df5a4af6e4a32add6533bb09c02c2cb8dc3e8ee606b3a6fa6efa088f9ca4133b4283407fb5ffa456e00b077fc3c3489e8a49f63b8cfe18d1638236b61334396f5345a4ecb333172cbb5a8a929d324a4b85c11446d84d98dac0786ca6e862a71dc70c8ff042a94b869e843e6263b517b6ad640b1055d7e90d0274dfb33b4b36ad39b63dadaecd367990032ee857e8f336f3f5886b970cd20e3305227344f804ceebdaa64b870d1a3a6c2eea8380f4d2d533de4317507b72806f84a0dd89b4950b131026d151210876dc07adb708e8ac1ce595cee7c5edd8ea3be17f6aff70f1e908e40b5135cf19a8b67221e37d32a93c9ae210ba39d22b88d9ae1cca19d6cce5d076588aa88966b72b921f6998bd6be3dd6fdea2af601318a60e34cf6de7027b253a16e843d89303014a90287fae768c384f104d19d90ea80612ceccb6c6dc176728e67d83c39285a1634c027660bb9e37bc32175a45623c39504ed554ab7a3f213acbdc609f61f4f641af84943475bc656d36df35b8109bc6226864c3e6d44adb084b9c902a5f4fc881d40f71477dc40e7c34b8996111bbb96794b61e019da698b3cbaf78dd3f8d2d5896c4c0cb7e4c233de75afebe1c37b06890048a5d79ceb40f0666e4bc0d41c4fa861da07cbcd5765acebdd8770ea250320cc90fbb0fb322ee4027f931e878957762071febd8bcd91c1b9afeb49cfb4be8d4aeb52458f3d3ac19943e398251938da34ed73941375838a6c0b9610fbcfc4db5b4ecd434c6fe4c1e74a052d580faf15bea823aac2d2ec3ba2b1aa125cf9a35646d092e53cd1c28f400a9a796723f07f1e5f389ace779263700e80e5c6c81e1b23e0f10ba9ae882b316ca8512d77ff46a1ef18154566db020d2801789c0eefec14c38b77fc84fb5dcfcdeea0ef0a6dd923c381c855e94d143c88aa8fbb2c20f47f733bab6c109b368e7eba08dcd16340a21e8584d1367ad0a93fd11a800059a0f8f3767e93548a32e3a043a34aabbeedb03c992041732cf2f5c3ecdc91fb694adb158d719e69bb4086d7b0ee09eb58f2a64a202e203a8bb49e734cb402b8dc7fab70f14aab4878f57a29808ff092a366c55a387f99cc216b37a0fb0c9e1d6445b3d036c4454578f0a07e1b1d7dbc499f4ce9d98e12a5cbd23e462893d11626a5c5b6b8413a5013a24effa2459ec41cc28d19fb26afebf2cd33dd2c52070105bc21bbcc06f7d5dd1a0df9a5ec587fea14b5afb7af497fac7255276ddadc8d5b4c3c805f40c8980749864ab231a9b1b7f2740fabf33a8175002f6c5dd921513659a58f30433ec877b4ec79c1d2ead260e01be57ff48ee7d3bcac33d5decc72d55196edd62877e5e33897b236f06ae41b51ea3c3bd144e928f7263e224d60add2453aeea9decef2f8e5bbf868e0d81a19aa42f08c6ab2862c06c91ce9ccaaa064a3538663fa98ab7646ac2b464586d74148cbb727d50cdf27eda4650b430af61ba4af6a31d56bd9bd87da8261cf29edc5c520ba9b041caaf164cd27ee064381dd1530479ad4c14089ce51d165b01d288d4617c473430ecc12cc513a4972f95d5267ade05e8a63e9ac8b111776516c3fdc3aaa9550df7c7b604a26a309a1bb1c5b456382f2031e2d4194bd5a55c5e98ba319f45f2a2112b5d4aafa305d0e2b4c07fdc207f4e8c4fd10b50ac9e5c5fc11d155b9de2affbad02be8c36c5f889b08ed84c10df128a31712052855850255ccb87640ae021b8f52e7f060982bd3fe5ad1301475b337554047f7c414df1157ce87f508bcb7ffc71b06356e6588230df80f981e7d9bf97a4dbcbb858425c59d0de107c2d90b3530127c20857d46c746e0783a3c4235ba2a97120a8ee80955efc9e3cbe1498b724997cbb24bc75ef2cb9238a1dbae2c396dd7eb773b7e16f8f19b7383605076ba0f4cf528419e866768f9a838b6080e1f8c86c18cf6d2ca39049dc418c1e65ff8578555e32b0c23156fd085900ae1599625f46c01c841c1865e04bca82f3c1104a8ea007fdae6ee26dc0f3169cfada16572265723aa9d75fbd3480e9517bd2da4d3b7ca4393371cecc701cef21185e422d498eb38e16959b708851ca33378bc3aa84f89672d962f6190b018f5f7a0eecbb4979b6d3a13cad484b64c463fc068eeb8ca40766422ed00638e272c8539fff6c73fd0f2ae2f3872f66ed92b7e9e722ae14e0a69ee5a62f138725e77f59902821a134b13d3bb6db0ac6231627677147aa4528e3848b0366903c10e1eba8a275965417c86abb4a8370de43d7b926818dec099deb494244ac098563fc70ac44a0e668692a15488e40c3faa4273f0dede1bfeb47466f10116d43020417383f2bccbd1140d2f668ddb4c033496a54aa5e5764117593a28b74804083b1aecefc910d24532b8515140970b4f6a56482d43f1af3184f3a85ef40f6f5825afbc757647918d7f42db5a0988892ca43b78886165619d35e211dcea0a14d464cb7f25267bdb68eae347c2835c19ed34ca0d5521c201808841969e9722f5218cb40e4d34a82debc97f4b404ae8e91234e3e10aaf38bac7f327945f0db8d37ae4f29a386fc71541f45332bf735db7bef1e99f26f8b591d50203acabff8f6b0a7d9246d729ae69bbeb4a534c28c28d378ab617da728aee756b76eaec33d8b52f1c7d5cf82d61922c7d546338b9eae7ce795e01a015f97b21e2a6181e9a4f2aedb7e57eb6269908b210be034ffa57059d14ec23bc0e6505629dc758f6c480a6df3bd6715377df534d2c8e94b83faf399f7bbf7b3d66841f1f3a5afaf0d7a70004f7a20d513c627d36f310e97b282d140c1c3d70a2d56e9e16e2636ee87e1ef759b1344659e1f78b560a36ab539d716819900cfbbb362a24c56869be2db0a939291e9d9abaf6873427d7acec331492f53d3021cbcc7ad87be5b60d12825c37afebe027f467efd20d52b22c09fdb8c5c15997872613f4aa6f65cb5b81c9eed5ee68d6e6e04015c36928706f3ebf76d3132257c3d10640186734fb62ae763928251b5fb73c50d969512e455d251a24a5ce230847fbfa6a5842e036e643be9aab235a2df1539ba297148e6cf57ad48b4bfb8d1e1a5bf5caa13d5a414807b385645ac6ac32a7aee367ca46df23720d9efb8d8b1cb668d96b55a0ec2be022b902004890de42c93f8774eaa5b2dcaf82d4e4e7aa476b93eb2f586031ab5a01ea91fc5e354e8fc1625ea03fb32312c9fcc4ca212cf0577fec3f5738a2af445f639ba279a4337dfcc5cc096f567ebabbfec4bcf8a37f67cbddaba6b8b81a800ae04383ea1bedec9741140b66fa2892681c0ae563542758af56cd516f4235c408f307cc99262517ad4c8fcf125949121e042607c22332e43c02031643f26a070ed5e16bf4a0d6661006ae6e0330b447a2f95e233a5aff41c2ec8893304555d9bd33d3f820b215a37f6ac18099363469a5b61c52691443cd174b50336c169218a17963f756791f64f185a4345c29a594942f76139be57dc30c1a38d2dc35bcc910a5e5542ba90879af953bfd821d418f19dca4eacfc1efe0e2df390295cc4ccbfa4ad2ffd19f8fc521ba85380b70f0aea9fc42969a7222714ccfc86303dc7a7c088e7c6aa95d0262aaf6cc92a5643144fc9f13d541f464aeba6349eb28aab178aa92a6c4c1f0468cb8073f29dcacc904fc320e589007595d8f6cafb322485e967ae63b023f15886eb2914d58a77978e017a66470e52a3320d3e376b3957ac3073fcfae5f31e1c1cc9e3389383e1b9f563b2268d7a925c2a1328bde2953b93ec7c9fe300e0f1a82f4a8b1be95e6e3715ed775f89452b8393bb6741431e66592b532948b0bba40fb240e2c0fba5cdd86d0d7174d7719ae3df06b329e0b68588b530ace589c2ffb9cb913e6838a002293e1e4354bb37734f103741aee7ddeb804854db487c744fcb2437b85774d9102c2c79f8696ce8cf0b9ebbbeb5bc3934cb9f7612e609d5d46a4ca202f3792aae200ec8aa78909f6c6146a3c154c6c7fd14554feff9f5b6520372dee42d73391db8660fb7f778d6f085bd978e85fa05b8806cbef8d2f6c8edf961ac0ed0def66465b27933eb05d2f306c075af1e986fa56bed843b248dd1519a72fe5a0ede60a13347f06048ba602b0488ca94ad942f1589ca9377fa653f3971159e3469744247b4ba6e4d4e494623773314a76022dd81ba77952de4292bb77d0e6884544268b2f77b1ba589c4e2eec243727114252adc6e594a6b9834217ef144ef719a0a13c1d9f2e4d69f192f62e3c5ea59c7ab4cf56fc5014b72d6c668dd7706d359a88b41221aa3b6a06f1dc88caca8fccb9e464241a6440037dec47ac54ab715f1fb8ec38e14e27d841fc82db09b1e4580214c766ac10926ffbb5b2fe3fc3007713ce89c1605f30a2ea6f1d5501190d27446d00dea681abcd7f482dffcd7c94fd206a104b36afc73124c9dfb051e2ea885111cbe0c264b50fa95aba329216fd26848feb2b9abb7757888ad279c862922f8b1691bc8cdf12acc94c96483d0193e974b6efba5c98dc45d8375a4df4a1c692f9b98d8212c68c1fd724aaeaa526c398ceaaa751fbbf20b64f28bcee97a4cafef9d9a14f37b78068b8cd2fefb9c36bb149816e4c1d20b70f912d67d99146d9d542f45b7ae5682d7e7700ad7922e5106331609740b4d3c50d4c7f24a0c98ee5826780ed47c8543ec775c131d7add8f69e8715c1eaf5f27b8e7b979a849cbfdd0f6b8810788cec1c7f7471f71e941d9868e202365b489046dd2373e9a401b4ddeef5f2878e46ae14b86a2f6ccf987d9f8475d670c3a54607419c0b39e6eb8868efc0b4b7ca4398de27ce8110847b7112211afbf3cccd4c0b3f189f21ce9cce2c49920460318098ba17b2edab09a7b7a46a621df1171d875e893a3854f222b5e9f389cf3ef5854b250bb26616f168b48ed48160ffe8aaa5043d7c065416f1ff17ac1fc90066293f7268946442641e7d44b8e503ecd6ce3dbc0b0fba7e787c620e44f43ad90af6549f5e6285c47933748d701a676fa720c93d1112d93721aa6d5b1391097b3fba06b2089f07f7f48651d329a9f2b065f882addb15a3ae560fd5ea39f135dca77f9cacffd09287afd293d97eb1a7a6afa6d9550e126b9f347c3ab9121cb15833ab5d4773498900c0156fe97877aa05a83882181aa946b7369a27495868d9fa8b27e64a852de3b78d925ce888a7adec98186a702024505c1a355fc91435e2629fdd60bc07f4cb9d60919d4640181cc5c190b03ba486cf43ac23b4dee9d863fb9899c855ddd26738226fb6b30a5e9a1a74a54c7d4ad4911768d3523de0e54d41c24c5fb4ad973738e72def269c3b0af59a21a196faf366de0ac7b1acd0ce76c078b5e0ea8558a503bb7a0f4c82fbe3f536a2d29a7795bdd2b91afa06872aa8e9826dade91436bdc4dd476e052abd395b77fedabd02305cf58f985150cd024a41e71c78eb65a9459367197a8633ba5f82fac737ab3e2d376c18f5ac691c720d228b18d357cc0ec0e4c21a8c9eeb72b3f20d06716a94f36e2ac94efaf151f864f1cdfd77498ddcda1e650f91c5d16e2ac3f07da274c51dc868544d706c5310b825788434eae4911b6ef137cec7ac176c3daa30233ee07ade6f9e146f8c3c329fab0c6fa468a5d3f29fdb29c23853c04826a1dea109f1e90b4e23abd7a674be15645d0c84744bcbe41592d9e67357dbd9190f0f589fcd4cb806d5b65a39b9a09c3c7533dbb849e89e6f85c16b1b0fedc08edd00146a25bdac9826716303d55139d87a82c8dd4cdeacae3a6ea9ce88e72a90942772eb661a8ad4b5dc5f1b24f4bd9f84b77043516772c1130cdc0935d1ee211024d884fa2027bd0fca27bf7a6e9469784f67950ec3f2b1a08d821d8483e2b4435555e56aa646e18e2f76a030f5edf2ac14b9790a9bea63b01a22239a43a8c9e950aa535e318a302e3af9cbb6064ad1428c2aa24558a4783ae827ee1efbb668cc51d942fc4f3150eb2cf1e0e35e6f9fe907789788697a9e840efee703e63748e38e88bf11ec8b293903731aa12cbbd34d87282737d4a199e08093604d21aaad7cc87da4989c28fe4bf1a3fba93a3e79f66fcc5f9498ea199872fc9b51d5665dcd266e803f182b4b933aa055f472e95828a555f23c8cf5cf07dc246e616f6cae7ec70012b2ddf514828cab89b4d529edddf4dc1f829d537201a502fc562fe958c1254d6b37b8457d88c4b9acd8ac9167d6f00e5edca023e2381f16aaba5e63cb0b4ae9df2bcc95abcc9a940a472c6d6422f03e691b276a2429fd35a05d6a5065f187d2bbaa66907afc026af026e58590e6623b10fca4c4f14aa9c12c85168845997a3868cf7dc5bd6de65243612b1d4280a0a9a651bc33f36a78cbdc5297507da55a720c8bf69344ed7fff4fe067d705455ad8159cec0bf138cbc94489cbf0ab51f0fcee44003df6e750ece77005472332b1b26136b40b1a3619b950121577e8a91aadacd97208892e07fe38cef08073cd728e145432b807755573f3153c998a37c9ae47db48db197adf82982d77d3cabb023c4bde97f388ee680003658def38fc3693a96c3ba328285cdebb9cf36b5f8c9cde9753d528cb3ff4e0c89a983b6e67eb5a331c893849549c22ebfbf436de4ed42835bdd77ad01975691cf172bd018c94dba484a6fb200089185a941b0ad51c62ca23221c28a486d90ca0c1150696b4bfe635302362d4bb72683c9b1a7f0194000f462cc12e654af004d6c743df6197d685134d989ec223e018fbd2408afd915ed47ca7765a445f10a39a938931c155f0ad3747261d392c3196804bd49c33377c934146e97877df0e3f0ae2276d13750cf4aeb16804f64727f99dae82b461f021b1351554118d972dee011e053864025532a000e05bf10ae8701420d010e71260f0e61c7de1bc990e3fd0bad825509238a7d4e806963e7a9263a93da307e6a7c895274157553b9b24f72f9103503885fa1d1daf7e21bb05df49d43b84f16313bddd97c011584026780a845b68a2b5a64ee6db13b3ecfc5dc5ff1df21a5f9bf668b45e42d818fdc503856f897e73cbfa6acd01dc679ab0684086e44c527cdd87c31dc2d654069af3d21c239affe68b4c7de03a12c26dfa00defa4b0335a80252d540a13bb7bcc8c05980756622a57b84631a7ee338f05647ca00c980191917239100aadb0c1867e2ed5e1c96d41935ad6fe563be0ba6e55e3252a0350069eeb41eb2466be55c6e6e12044c34ffff5abb632e3c2ca998fe0c967dce69f60b7ebfda6bce8d0cd194bcd32df9df107b62d70f4e35e65974c90c85f5b0d601fb5702449add89f321cc5833e276bfb58cb00054746f9a4ae08443995dc62012761daa140f72506785961178d35e11d50f292cc204b9df9c2bd21fa91137fc2f325eb7e29ac472063bdb655dc865abe1525cd18911219ae5014159a3bf2262f5dd0068d90121d70432d9a44908217d87c0e4c8e1f7394c0e9e5a3616bd1817d0dd355f74b39d128d92877069fbecbec03734962d7ac54836d7bd51d8b3159070f7c2de4f873c9b0bdd7730536ac1de86afcdd60ac731cd3de0d4d94b29f93615d5ad36bcb61125ed71f0d662081ae4156101c53a32ffdf0aa87f4f870ed68dbefc91b990e0d6b386eef70faf3111589ab7616e6d11b2f4aa46fec5535378cd7b43b3de6b51951e5ed053d74c90d8d744157163f6f34b458de968f451d191f874167dd2b28a8ac3abd777b2329b7ccc58777972dcb41052ab59907e828df32f22bc22891da82036c158c4e15f7acb0f2180c4965eb682cb0845b56dc9070609b2c7fa2466b15378f0219c6551d35125b22e62fb85f7b09ff8c038b8ee1d44a56febd4a1a579b74ba44ec5d3409b1980ba868383464fc751fe89ef4c6f87ed071d5b2d9c4b8cbc9d61349dc1d6473d93043bf22cab5064a335bc46b7b638b7145b643691f4cd9d86d4d7d4a6f56fc3f81da1212b16f7c9d392e772cfd1ae0b4f8c18b3d705dc6db79cd368d9d0fd74f8323a81f5d30fc40ea3dd36c10f79b12a71b2dbf36f17edbe0d1129eb246fea4ce7b1f122c3ce0fa1c4442f852aedc6d84133c990163d5e31a1fc587af89e0590f8ced2e000efb6345caae30e2f010473d7d63653ddab421c24401663ac7b6c04ab849431d8528e79ab8a654ad60f51cd0b798209313c3f76ecd49de9503fc6bc9563c84f99d64b9d58746436c317f3649cd0d9770af84718258fd1b18c4d2f19b4981797a65e585376776e6ee5789748b2193d651e0ac1ce8ddaef4d15d533ce5a792cb6ad6c27a29ea28e4180f8a9327104a3cb2dcc2868d60f618fbfd7b63fd43f2d18882d19ac242f0deb640e8794d6520195deb40956661958dccabe6ccc86c1aee151ca24a48f5a24408ce58de4f0f518d07c0faacfec1a0d8a2cd15737da3e89e5baa1e52a9fe1eb74141ea6002294e7add9d5f3fd13b51a928e44d1dc3a42f803c2161d69d9214be088ce2bc48d898862c0d7a23d2353b9933f40599f2b3845a36590a0ec62220669b72549e8485e63ff826e70ed4afe61b1dbaee795e27cdd79fc7d82cd5f54c8efbae1373bd212357bd92499f674d02796d240e34cdb1543b62b1a4bf272b50e533e7f7c51d5d621343fc69519ab3a58cde9b188b9c877af9c1ca1d5ca134348b8541bdee596549e936801e517c33b08df15d21e5c61d4ff29c2de6c21290ec750ad047c252aa9e1d2923f78bdfbe9024e867d8e411a59d647e5a60508e05565c863b7c58a27b35df96e0e6885d82d1bfb88c9799220e321c421e0b3e08c32d1c4c3e4e5b39c10d07db25827b9027487e1e3d816c3a143c0fda5a2a885e58584ec409a935ef4ee1afedf30ceb93c42fa1cddfdc75eff0e7e5c7184e5451a5a15c90cf06bca51062bb4bb524fadfe8b0e2ad9a1723199398126cd920f353179848c9ea18729c8ab0cf3b75bae24cab8cfc18ec0722f09a5f3366a9059f6a057de5697d7b3bb23116921616e376f338919bacfaa8427d66a07fa86ce4040a411852fdd3a7e93324b80e1d95c17c19eb12d98f81bd773485fa33869b49e3d8c2871cbf70936bb2c3a4b0a210af792b0fbc0549ddc1d31bd42408731ea93ef356958e8c61ec6415b58bff551a77493e2cfa27a9d97861f04546a0b6695b00628666e9cf331fceb97c4af4f914a4989efeec1919b7923baf3c92958aacc044be9105febef6b6ded16a2d99fb1aef80e9f3d614faaad661a1fa3d06bc804d55d13618387026ae1b85318dffb6b1c54d26028e4429a64284509daece656a07dee8ee90023487fa194c681e75afbc18f23ea4c0c13d0707ec16cc1afcf0ad4c4884515985790b985ffb99207b40d0dcd7d4a5aeb1d97f176def469b5ceb1015a999239f3d0df1993cd8639698a68f7bb8a3f05c260ddc5cf60100fc47c5e5b2a771667a1e77a2f56aa867eda7d5d03aa120eb3bf430bdb5511d06ff077246cfc6a47be4efed31a2ef307df76804ec7043f298e3741994fd88fb80bf5dc96277188d62a88f7967b7c1d74a3e7d30c4bad74413046836e128d5dbf97ed722efe6b7298b73e6e95189e4e64d59cbb98238a0035eb5ee6687dad8747edeabe45b7b6d9640505c5066f378ece7d9d3e79318aae8a2f5c0b517cfd029b75dc01db1ffde10431eca7268017c456d9589e3f7d5a7f6215cbe4fb5f4243d7867e8dfda44675a86f384cad64ce72b086bf8e00d98d01ca403275545817840e37ee7939f352e8d75f23f70d03bbc8e4201e712100ae5825a063cc72524b2d060760371d782ced04c492600164ef980b1d037cd70c7ff430e5292fa8ed5f604f7ab5440eb7f94b6aec0a571abf9679233a9051e55bdc30f361791ea95842045d0fd9fd4e8f08a850afbd157b17e20ada38ecce38aee9103903c380136defc57c18dc5087aa89399db3fc3e8ca4cdba970ba10f7c25901c6d580bdc4bb24a5b90a45dcea62c12bf698dd425042fbe08e006e23c66b94a98a90780a25c8d8f3ce2398803d42a38b215f9cb503c4d6794c64ac46e4c25a9edcfc5c288204a3b0a8d8031026b43c94390c200ba4f684c59e6b026303bf6b3e6b20abee2fa147eee1580f28892d536a1624dc734e036106b9cee325a958ec5b310bca2be5b3548c4a3d00674119eef3d4225c3ac4b13e611aeee625cf8ad9b163911d762d080265b5abaec0e509c95c50ac83db9e92dec19f3562ec251db3443a65509a148919d8be2d90842533ff56f69e73159383c25c83ec79a42f40a1a47ae130f9adb4b77f31a9fb44a2a6325ff78dbeb3db06a1776435796395332bd97ed5cf7081ae2b59d2a8882c67c798fd8dbbc57dff67aa6513b0724ab95ab6b3c4ea1cf6d74dcbe7713d5e37963d74121c231ff161ed9aa03dfc90c954f829e79e35c7d3a62caab272cb4bcf26cb79742a40e3458a1bf989fe02a3bc926f544fe2feea86938fcf09346d06f6be7f2cf17ebb8d0c55231a24d6bb3bf6bb91d84c1d1bf5919b0de38ace079f00e7a936fc9e4fc63c93f73f99f9efb6f45f16c1e52520d0abf0b8e57bd982d7b5f003f224486715d85c79ff2d6e21949ede7de9d60063c3e921200b1fb50e2d067b6a4c30ca3c94d17a4045a82ab004a294201981a0fcdb3a4ab83692cd09efeb7ba21f71f0c407411ffcae483101d1b8c57aa5755e5a20b932a10ca67f0f89ba4f04d7e2884f7b412c7b05bd9d8bad9672258a9833954db0038397f03611404733b9d54bceb0bb74a8457e799afffa31c274ce87b2485b112840e9e271cbb1a933fd9bc3b2ddf9a0ade2f844332cec33818fcd4059ab0ea800aeb1b29443df8e2f538b4ae8c0314ad99f604d09a280cd525328a781e6b5b2c52e16d8586f3b69495f1cf99bb9d0f95671773fff6a5e73c3323803f8fa78484137a7e871fd0feda89bab0ae1453c8592857e83d6ebe5db755b425d44e4454579a458d0857d4a1dcc21e8000aece701ec9226c4eea833c66f57c58d4c84588a84cedc9fd52b1755cc8323edb40d379ffb89295181b32fbf66455383030e4a3449125253e3dfd2c6c28ec6f611e235cf4c11729bebe1ebbed7f2590247d8e99fda3643c3eb2e0fd2ca718c7126b6bad143d5d02bdcafb56f97e55e503d0faa69296fc4b0139644acd7f4d4c615610c3627c9c84e27eb2f46ec5fd71a99824e8b4ec94cdafcbb4943fb1a8d4afc2f190e1fab13d563069e98d8d6174024f5b718989576d17a57da16fad66534daa1d827906fce54d4e92880616346bb3f538d77160123e9fb3b39854f4cb65254dc4002643ac1a5eb25a9924d0cdb9e09cbcbd005618eb2e0edd2945a925cb118c1f09a6893c93f8bc163f5bf947df51bf07e720fc02ce4cc8da92b6f965463dd02b0ec71b468d67f9c2f766c8e68491e84a93848e0f4f2d459692fb36879abea28d696ae484fc085787ea134ac64d769d5cb56ef573137aa08e857292433133edcba53e01fde6e73ffc0a3f2e4033d7df1e0f5998a78ad25cc9b2101b7674f144440ba65c7a7f5b1f55f0a177d6a2310361a4ee72470374db1a56e5bb4325f5a14d36af65486da569a51cb7985a2c0d039ef2c81a79b49e6a35dd242be11e5f0e06a6f5e171f11d17499ac9bc96e278d35c300687a42401086825c8dfd26f98939042b5a1e555716d76ecb050c8d100d637440b115ed55f9baa3d8f5d847b45e3b16956f75be886571ab24e78349eea7de74b5b88f7c119ec72aad54cc9e19beecf9d4e386f01c5f2b016c5da79a4d5e455b0224299ceac37f79d8121799499e4b0a4bbdc764cbeeba34ee8b05b5ce902f7e504b0718d53dcf963ad32cac6fb440e7b7f9061c1fdfedcf47beeea17f9797673f22ccafb3999b458d2726d1b73ab591ec7eb2dbfa50557"}, 0xc800) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 346.008527] FAULT_INJECTION: forcing a failure. [ 346.008527] name failslab, interval 1, probability 0, space 0, times 0 00:55:29 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x46000, 0x0) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x0, 0x3}}) 00:55:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0xff44, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080)) 00:55:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc0201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) [ 346.077433] CPU: 1 PID: 25139 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 346.085967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.095336] Call Trace: [ 346.097959] dump_stack+0x1b2/0x283 [ 346.101595] should_fail.cold+0x10a/0x154 [ 346.105750] ? mempool_free+0x1d0/0x1d0 [ 346.109724] should_failslab+0xd6/0x130 [ 346.113702] kmem_cache_alloc+0x40/0x3c0 [ 346.117768] ? mempool_free+0x1d0/0x1d0 [ 346.121741] mempool_alloc+0x10e/0x2d0 [ 346.125635] ? remove_element.isra.0+0x1b0/0x1b0 [ 346.130394] ? _find_next_bit+0xdb/0x100 [ 346.134462] ? __lock_acquire+0x5fc/0x3f20 [ 346.138702] bio_alloc_bioset+0x41b/0x830 [ 346.142852] ? __lock_acquire+0x5fc/0x3f20 [ 346.147093] ? bvec_alloc+0x2d0/0x2d0 [ 346.150900] ? trace_hardirqs_on+0x10/0x10 [ 346.155162] bio_clone_fast+0x20/0x130 [ 346.159058] bio_split+0x69/0x250 [ 346.162523] blk_queue_split+0x52d/0x19f0 [ 346.166679] ? __lock_acquire+0x5fc/0x3f20 [ 346.170925] ? blk_recount_segments+0x540/0x540 [ 346.176602] blk_mq_make_request+0x131/0x1ad0 [ 346.176615] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 346.176626] ? blk_queue_exit+0xb3/0x1d0 [ 346.176635] ? blk_exit_rl+0x70/0x70 [ 346.176645] ? lock_downgrade+0x740/0x740 [ 346.176660] generic_make_request+0x1f6/0x850 [ 346.176670] ? blk_queue_exit+0x1d0/0x1d0 [ 346.176684] submit_bio+0x234/0x390 [ 346.176694] ? generic_make_request+0x850/0x850 [ 346.176705] ? zero_fill_bio+0x390/0x390 [ 346.176715] ? iov_iter_npages+0x17b/0x7c0 00:55:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x42281) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000080)='./file0\x00', 0x8) r1 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/4096) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000001140)) readlink(&(0x7f0000001340)='./file0\x00', &(0x7f00000012c0)=""/45, 0x2d) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2013, r0, 0xd0a4e000) r2 = socket(0x28, 0x3, 0xff) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000001680)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000014c0)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000015c0)=0xe8) syz_mount_image$ext4(&(0x7f0000001300)='ext2\x00', &(0x7f0000001380)='./file0\x00', 0x0, 0x2, &(0x7f0000001480)=[{&(0x7f00000013c0)="988bbf57d3fa168b0026e5c65f1a0fb02d318fd315adb88a8a6ac55a9108efc386299a8961d344dbff65fa7c462a87a4295653883b7654ed3d8abd7d202629f23b53eb47b2f412dbdbecc2360b952517c7928f1a8de85b0495edf79316946997ccb5d48f5e69c95fb13302f2", 0x6c, 0x1}, {&(0x7f0000001440)="ae3c8c5c8237b856c15256d3cf02cda19ab3e3e040c8ab552cb069adc30f6ba44adaac9b0657e15b45fd19aa2ff915a03e6d23425650b98bddad", 0x3a, 0x3}], 0x80000, &(0x7f0000001600)={[{@data_journal='data=journal'}, {@dioread_nolock='dioread_nolock'}, {@prjquota='prjquota'}, {@data_err_abort='data_err=abort'}, {@nomblk_io_submit='nomblk_io_submit'}], [{@euid_eq={'euid', 0x3d, r4}}]}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="20000000010a0000000000000000b7440000020000000900010073797a300000"], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x40c0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000001180)={0xffff, 0xff68, 0x9, @multicast, 'ip6gretap0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) flock(r3, 0x0) [ 346.176724] ? bio_set_pages_dirty+0x8c/0x170 [ 346.176735] blkdev_direct_IO+0xb3e/0xdc0 [ 346.176754] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 346.176763] ? unwind_next_frame+0xe54/0x17d0 [ 346.176777] ? trace_hardirqs_on+0x10/0x10 [ 346.246346] ? mapping_needs_writeback+0xd4/0x110 [ 346.246359] ? filemap_check_errors+0x75/0x90 [ 346.255689] generic_file_read_iter+0x234/0x21c0 [ 346.260458] ? __might_fault+0x104/0x1b0 [ 346.264531] blkdev_read_iter+0xfe/0x160 [ 346.268613] do_iter_readv_writev+0x41d/0x5f0 [ 346.273114] ? avc_policy_seqno+0x5/0x10 00:55:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x3, 0x1, "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"}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) [ 346.277180] ? clone_verify_area+0x1e0/0x1e0 [ 346.281591] ? rw_verify_area+0xe1/0x2a0 [ 346.285658] do_iter_read+0x21d/0x5b0 [ 346.289476] vfs_readv+0xc8/0x120 [ 346.292958] ? compat_rw_copy_check_uvector+0x320/0x320 [ 346.298325] ? SyS_write+0x1b7/0x210 [ 346.302042] ? __fget+0x1fe/0x360 [ 346.305536] ? lock_acquire+0x170/0x3f0 [ 346.309545] ? lock_downgrade+0x740/0x740 [ 346.313705] ? __fget+0x225/0x360 [ 346.317167] SyS_preadv+0x15a/0x200 [ 346.320816] ? SyS_writev+0x30/0x30 [ 346.324454] ? SyS_clock_settime+0x1a0/0x1a0 [ 346.328893] ? do_syscall_64+0x4c/0x640 [ 346.332885] ? SyS_writev+0x30/0x30 [ 346.336516] do_syscall_64+0x1d5/0x640 [ 346.340417] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 346.345636] RIP: 0033:0x45d5b9 [ 346.348819] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 346.356532] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 346.363802] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 346.371077] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 00:55:29 executing program 4 (fault-call:7 fault-nth:32): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:29 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) setxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.capability\x00', &(0x7f00000004c0)=@v3={0x3000000, [{0x1, 0x2}, {0x4, 0xfffffe00}], r2}, 0x18, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r4 = fcntl$dupfd(r0, 0x406, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000080)={0x2, @pix={0x10000, 0x8000, 0x32314247, 0x7, 0x5, 0x7ff, 0x3, 0x5, 0x0, 0x6, 0x0, 0x2}}) bind$rxrpc(r4, &(0x7f00000003c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) 00:55:29 executing program 3: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) 00:55:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) r2 = timerfd_create(0x3, 0x800) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000003c0)={0x4, 0x0, {0x3, @usage=0x9, 0x0, 0x9, 0x1f, 0x3, 0x2, 0x9, 0x2a, @usage, 0x6, 0xab, [0xffffffffffffff8f, 0x3, 0x7, 0x401, 0x10000, 0x8]}, {0x100000000000000, @struct={0x3ff, 0xd5}, 0x0, 0xfffffffffffffffe, 0x1, 0x7fffffff, 0x5, 0x4, 0x40, @usage=0x100000001, 0x81, 0x2ddf, [0x11a, 0xfe21, 0x8, 0xfffffffffffffff8, 0x7ff, 0x1]}, {0x9, @usage=0x1, 0x0, 0x7, 0x4, 0x4, 0x5, 0x3ff, 0x10, @struct={0x7fffffff, 0x4}, 0x7, 0x3, [0x0, 0x6, 0x4, 0x2, 0x1, 0x3]}, {0x6, 0xb7, 0x3}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 346.378343] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 346.385613] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:30 executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') ioctl$FICLONE(r7, 0x40049409, r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0xe, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r5, 0x6}, &(0x7f0000000180)=0x8) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SNDRV_TIMER_IOCTL_START(r9, 0x54a0) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000280)={0x4, 0x2, 0x2, "e9afc661e0cfa841455b00139b70c4c5182a54522d91d4f64e8555f3a016e001", 0x50323234}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 346.449071] xt_hashlimit: overflow, try lower: 0/0 [ 346.495127] FAULT_INJECTION: forcing a failure. [ 346.495127] name failslab, interval 1, probability 0, space 0, times 0 [ 346.511584] xt_hashlimit: overflow, try lower: 0/0 [ 346.516806] CPU: 1 PID: 25196 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 346.524737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.534099] Call Trace: [ 346.536688] dump_stack+0x1b2/0x283 [ 346.540327] should_fail.cold+0x10a/0x154 [ 346.544491] ? mempool_free+0x1d0/0x1d0 [ 346.548466] should_failslab+0xd6/0x130 [ 346.552442] kmem_cache_alloc+0x40/0x3c0 [ 346.556508] ? mempool_free+0x1d0/0x1d0 [ 346.561004] mempool_alloc+0x10e/0x2d0 [ 346.564897] ? remove_element.isra.0+0x1b0/0x1b0 [ 346.569747] ? _find_next_bit+0xdb/0x100 [ 346.573816] ? __lock_acquire+0x5fc/0x3f20 [ 346.578056] bio_alloc_bioset+0x41b/0x830 [ 346.589947] ? __lock_acquire+0x5fc/0x3f20 [ 346.594203] ? bvec_alloc+0x2d0/0x2d0 [ 346.598021] ? trace_hardirqs_on+0x10/0x10 [ 346.602266] bio_clone_fast+0x20/0x130 [ 346.606153] bio_split+0x69/0x250 [ 346.609612] blk_queue_split+0x52d/0x19f0 [ 346.613764] ? __lock_acquire+0x5fc/0x3f20 [ 346.618009] ? blk_recount_segments+0x540/0x540 [ 346.622694] blk_mq_make_request+0x131/0x1ad0 [ 346.627193] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 346.632126] ? blk_queue_exit+0xb3/0x1d0 [ 346.636190] ? blk_exit_rl+0x70/0x70 [ 346.639921] ? lock_downgrade+0x740/0x740 [ 346.644084] generic_make_request+0x1f6/0x850 [ 346.648586] ? blk_queue_exit+0x1d0/0x1d0 [ 346.652761] submit_bio+0x234/0x390 [ 346.656400] ? generic_make_request+0x850/0x850 [ 346.661774] ? zero_fill_bio+0x390/0x390 [ 346.665844] ? iov_iter_npages+0x17b/0x7c0 [ 346.670089] ? bio_set_pages_dirty+0x8c/0x170 [ 346.674593] blkdev_direct_IO+0xb3e/0xdc0 [ 346.678753] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 346.683860] ? unwind_next_frame+0xe54/0x17d0 [ 346.688360] ? trace_hardirqs_on+0x10/0x10 [ 346.692622] ? mapping_needs_writeback+0xd4/0x110 [ 346.697466] ? filemap_check_errors+0x75/0x90 [ 346.702152] generic_file_read_iter+0x234/0x21c0 [ 346.706922] ? __might_fault+0x104/0x1b0 [ 346.711011] blkdev_read_iter+0xfe/0x160 [ 346.715079] do_iter_readv_writev+0x41d/0x5f0 [ 346.719577] ? avc_policy_seqno+0x5/0x10 [ 346.723644] ? clone_verify_area+0x1e0/0x1e0 [ 346.728080] ? rw_verify_area+0xe1/0x2a0 [ 346.732140] do_iter_read+0x21d/0x5b0 [ 346.735961] vfs_readv+0xc8/0x120 [ 346.739448] ? compat_rw_copy_check_uvector+0x320/0x320 00:55:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x1405, 0x4, 0x70bd2b, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40012}, 0x80) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0x8001, 0x8, [], &(0x7f0000000180)=0x7}) getuid() 00:55:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x401) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xca8, 0x0, [], {0x0, @bt={0x0, 0x101, 0x0, 0x3, 0x4, 0x2, 0x5, 0x1f, 0x7, 0x3, 0x0, 0x4fb7, 0x6fa, 0x73, 0x0, 0x1, {0x4, 0x6}, 0x81, 0x5}}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000080)=0x6) [ 346.744811] ? SyS_write+0x1b7/0x210 [ 346.748525] ? __fget+0x1fe/0x360 [ 346.752940] ? lock_acquire+0x170/0x3f0 [ 346.756921] ? lock_downgrade+0x740/0x740 [ 346.761089] ? __fget+0x225/0x360 [ 346.764547] SyS_preadv+0x15a/0x200 [ 346.768182] ? SyS_writev+0x30/0x30 [ 346.771812] ? SyS_clock_settime+0x1a0/0x1a0 [ 346.776236] ? do_syscall_64+0x4c/0x640 [ 346.780214] ? SyS_writev+0x30/0x30 [ 346.783848] do_syscall_64+0x1d5/0x640 [ 346.787744] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 346.792932] RIP: 0033:0x45d5b9 00:55:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000280)="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", 0x1000, 0x58bdc217248b54fb, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @mcast1}}, 0x24) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/125) 00:55:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x5, 0x1, 0x2d8, 0x0, 0x0, 0xa5, 0x0}) 00:55:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000180)) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000040)={0x9, 0x9, 0x9, 0x2, 0x9}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x3000, &(0x7f00000000c0), 0x0, r3}) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000003c0)={0x9, &(0x7f00000002c0)=[0x9, 0x5, 0x1, 0x0, 0xffffec89, 0x7fff, 0x3, 0x9, 0x5]}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) timerfd_gettime(r3, &(0x7f0000000080)) prctl$PR_GET_TIMERSLACK(0x1e) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000140)=0x0) timer_settime(r4, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_delete(r4) [ 346.796119] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 346.803866] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 346.811138] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 346.818409] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 346.825681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 346.832953] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x34363248}}) 00:55:30 executing program 4 (fault-call:7 fault-nth:33): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x1}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000180)={0x1, "e0"}, 0x2) 00:55:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2200, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) 00:55:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0xa002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x1, 0x1, 0x1, "14ed700de7bfa68fd4154945a848e884c3fa4975d41fcdc6e032888d5752b9c0", 0x3147504d}) 00:55:30 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x9, 0x805f, 0x800}) ioctl$CHAR_RAW_FRASET(r0, 0x1264, &(0x7f0000000300)=0x5fe2) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x40103, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000500)=""/138) r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) clock_settime(0x4, &(0x7f0000000340)={0x0, 0x989680}) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x202080, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000380)={r3, r3, 0x5, 0xbc, &(0x7f0000000440)="4a0a2904450befdcf6311ea230a5942cde67e8bb14d09d908ab81fd46d0830caf212e6b801ac7b1617d100234651f6e8f4b934f8d46fa591f546a3db69c100bce8b35e603ddfc39814e2d7f6642d8c9702fe7a0e354c406721f02f63c5eb67a926582bb518ff2e1422fee9ca67f165c14468850676610e443e45820e886e30d89bf4cdc96d31204727adb0fad1e096443abb10c2f36aa7ff40eb03ebc1515013419da6b6b81724542cdb8a54bcb6a22d05eca4cb82610bfc332637af", 0x1, 0x8, 0x7, 0x9, 0x3, 0x0, 0x7, 'syz1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0xf4, 0x2, 0x1, @remote, @ipv4={[], [], @loopback}, 0xc1b3731094801034, 0x8000, 0x60000000, 0xff}}) 00:55:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x50, 0x400040) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0xfa, 0x1, 0x1, 0x0, 0x6, 0xd0, 0x9, 0xa8, 0xf6, 0x1, 0x20, 0x9, 0x0, 0x5, 0xffff, 0x6, 0x7, 0x4, 0x9, [], 0x3, 0x4}) 00:55:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x1}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000180)={0x1, "e0"}, 0x2) 00:55:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{0x9}, {0x6, 0x9}, 0x4, 0x6, 0x1}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f00000000c0)={0x9, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300), r5}}, 0x20) [ 347.155006] FAULT_INJECTION: forcing a failure. [ 347.155006] name failslab, interval 1, probability 0, space 0, times 0 [ 347.168531] CPU: 0 PID: 25247 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 347.176424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.185868] Call Trace: [ 347.188463] dump_stack+0x1b2/0x283 [ 347.193056] should_fail.cold+0x10a/0x154 [ 347.197207] ? mempool_free+0x1d0/0x1d0 [ 347.201184] should_failslab+0xd6/0x130 [ 347.205167] kmem_cache_alloc+0x40/0x3c0 [ 347.209235] ? mempool_free+0x1d0/0x1d0 [ 347.213210] mempool_alloc+0x10e/0x2d0 [ 347.217132] ? remove_element.isra.0+0x1b0/0x1b0 [ 347.221893] ? _find_next_bit+0xdb/0x100 [ 347.225968] ? retint_kernel+0x2d/0x2d [ 347.229865] bio_alloc_bioset+0x41b/0x830 [ 347.234025] ? bvec_alloc+0x2d0/0x2d0 [ 347.237834] bio_clone_fast+0x20/0x130 [ 347.241727] bio_split+0x69/0x250 [ 347.245186] blk_queue_split+0x52d/0x19f0 [ 347.249368] ? blk_recount_segments+0x540/0x540 [ 347.254055] blk_mq_make_request+0x131/0x1ad0 [ 347.258568] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 347.263512] ? check_preemption_disabled+0x35/0x240 [ 347.268537] ? blk_exit_rl+0x70/0x70 [ 347.272263] ? generic_make_request+0x5a5/0x850 [ 347.276948] generic_make_request+0x1f6/0x850 [ 347.281498] ? blk_queue_exit+0x1d0/0x1d0 [ 347.285668] submit_bio+0x234/0x390 [ 347.289312] ? generic_make_request+0x850/0x850 [ 347.294006] ? iov_iter_npages+0x17b/0x7c0 [ 347.298257] blkdev_direct_IO+0xb3e/0xdc0 00:55:30 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x1, @sdr}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000180)) pause() 00:55:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x1}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000180)={0x1, "e0"}, 0x2) [ 347.302423] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 347.307561] ? retint_kernel+0x2d/0x2d [ 347.311491] ? generic_file_read_iter+0x1a3/0x21c0 [ 347.316438] generic_file_read_iter+0x234/0x21c0 [ 347.321245] ? blkdev_read_iter+0x13/0x160 [ 347.325522] blkdev_read_iter+0xfe/0x160 [ 347.329596] do_iter_readv_writev+0x41d/0x5f0 [ 347.334104] ? retint_kernel+0x2d/0x2d [ 347.338004] ? clone_verify_area+0x1e0/0x1e0 [ 347.342432] do_iter_read+0x21d/0x5b0 [ 347.346249] vfs_readv+0xc8/0x120 [ 347.349736] ? compat_rw_copy_check_uvector+0x320/0x320 00:55:30 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x1}) 00:55:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) [ 347.355110] ? SyS_write+0x1b7/0x210 [ 347.358854] ? __fget+0x1fe/0x360 [ 347.363121] ? lock_acquire+0x170/0x3f0 [ 347.367122] ? lock_downgrade+0x740/0x740 [ 347.371306] ? __fget+0x225/0x360 [ 347.374778] SyS_preadv+0x15a/0x200 [ 347.378420] ? SyS_writev+0x30/0x30 [ 347.382053] ? SyS_clock_settime+0x1a0/0x1a0 [ 347.386471] ? do_syscall_64+0x4c/0x640 [ 347.390461] ? SyS_writev+0x30/0x30 [ 347.394096] do_syscall_64+0x1d5/0x640 [ 347.397996] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 347.403186] RIP: 0033:0x45d5b9 [ 347.407157] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 347.414878] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 347.422149] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 347.429428] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 347.436706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 347.444067] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:31 executing program 4 (fault-call:7 fault-nth:34): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) 00:55:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@broadcast, @remote, @multicast1}, &(0x7f0000000080)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r2, 0x1, 0x1, 0x90}}, 0x20) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0)=0x4, 0x4) 00:55:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) 00:55:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x80000000]}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') write$USERIO_CMD_REGISTER(r7, &(0x7f00000002c0)={0x0, 0x80}, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r5, r4}}, 0x18) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r5, 0x1}}, 0x18) 00:55:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x400000000000006f, 0x88601) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) fcntl$dupfd(r7, 0x0, r7) 00:55:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8068, 0xc8301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000000c0)={{0xebb, 0xe8d}, 0x4a}, 0x10) [ 347.754157] FAULT_INJECTION: forcing a failure. [ 347.754157] name failslab, interval 1, probability 0, space 0, times 0 [ 347.766334] CPU: 0 PID: 25311 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 347.774257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.783639] Call Trace: [ 347.786233] dump_stack+0x1b2/0x283 [ 347.789873] should_fail.cold+0x10a/0x154 [ 347.794029] ? mempool_free+0x1d0/0x1d0 [ 347.798012] should_failslab+0xd6/0x130 [ 347.801992] kmem_cache_alloc+0x40/0x3c0 [ 347.806058] ? mempool_free+0x1d0/0x1d0 [ 347.810068] mempool_alloc+0x10e/0x2d0 [ 347.813964] ? remove_element.isra.0+0x1b0/0x1b0 [ 347.818737] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 347.823772] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 347.828551] bio_alloc_bioset+0x41b/0x830 [ 347.832713] ? bvec_alloc+0x2d0/0x2d0 [ 347.836525] bio_clone_fast+0x20/0x130 [ 347.840419] bio_split+0x69/0x250 [ 347.843899] blk_queue_split+0x52d/0x19f0 [ 347.848146] ? blk_recount_segments+0x540/0x540 [ 347.852803] blk_mq_make_request+0x131/0x1ad0 [ 347.857320] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 347.862233] ? blk_queue_exit+0xb3/0x1d0 [ 347.866278] ? blk_exit_rl+0x70/0x70 [ 347.869973] ? lock_downgrade+0x740/0x740 [ 347.874106] generic_make_request+0x1f6/0x850 [ 347.878598] ? blk_queue_exit+0x1d0/0x1d0 [ 347.882766] ? retint_kernel+0x2d/0x2d [ 347.887346] submit_bio+0x234/0x390 [ 347.890955] ? generic_make_request+0x850/0x850 [ 347.896333] ? bio_set_pages_dirty+0xeb/0x170 [ 347.900810] ? bio_set_pages_dirty+0xfd/0x170 [ 347.905296] ? iov_iter_npages+0x17b/0x7c0 [ 347.909518] ? bio_set_pages_dirty+0x8c/0x170 [ 347.914004] blkdev_direct_IO+0xb3e/0xdc0 [ 347.918151] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 347.923256] ? unwind_next_frame+0xe54/0x17d0 [ 347.927923] ? trace_hardirqs_on+0x10/0x10 [ 347.932140] ? mapping_needs_writeback+0xd4/0x110 [ 347.936963] ? filemap_check_errors+0x75/0x90 [ 347.941442] generic_file_read_iter+0x234/0x21c0 [ 347.946963] ? __might_fault+0x104/0x1b0 [ 347.951011] blkdev_read_iter+0xfe/0x160 [ 347.955053] do_iter_readv_writev+0x41d/0x5f0 [ 347.959546] ? avc_policy_seqno+0x5/0x10 [ 347.963607] ? clone_verify_area+0x1e0/0x1e0 [ 347.968004] ? rw_verify_area+0xe1/0x2a0 [ 347.972060] do_iter_read+0x21d/0x5b0 [ 347.975849] vfs_readv+0xc8/0x120 [ 347.979307] ? compat_rw_copy_check_uvector+0x320/0x320 [ 347.984651] ? SyS_write+0x1b7/0x210 [ 347.989050] ? __fget+0x1fe/0x360 [ 347.992500] ? lock_acquire+0x170/0x3f0 [ 347.996458] ? lock_downgrade+0x740/0x740 [ 348.000599] ? __fget+0x225/0x360 [ 348.004058] SyS_preadv+0x15a/0x200 [ 348.007667] ? SyS_writev+0x30/0x30 [ 348.011296] ? SyS_clock_settime+0x1a0/0x1a0 [ 348.015698] ? do_syscall_64+0x4c/0x640 [ 348.019657] ? SyS_writev+0x30/0x30 [ 348.023268] do_syscall_64+0x1d5/0x640 [ 348.027749] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 348.032927] RIP: 0033:0x45d5b9 [ 348.036105] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 348.044059] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 348.051336] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 348.058612] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 348.065884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 348.073149] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x4, 0x0, [0x9, 0x8, 0x7ff, 0x8000, 0xd18, 0x2, 0x9, 0x2, 0xffffffff, 0x8, 0xfffffe01, 0x6, 0x5f6, 0x400, 0x5, 0x10000]}, {0x11, 0x0, [0x0, 0x35e, 0x100, 0x5f2, 0x16, 0x3, 0x1, 0x0, 0x7, 0x4, 0x5, 0xe2d, 0x81, 0x3, 0x1, 0x9]}, {0x8, 0x0, [0x3ff, 0x1ff, 0x1ff, 0xfffffff7, 0x101, 0x5, 0x5c80, 0x101, 0xdd7e, 0x1, 0x721, 0x400, 0x1, 0xc010, 0x1, 0x5]}, {0x10, 0x0, [0x1, 0x80000001, 0x7ff, 0x0, 0x800, 0x5, 0x80000001, 0x2493, 0x6, 0x0, 0x0, 0x7, 0x7fffffff, 0x2, 0xfffffff9, 0x7]}, {0x23, 0x0, [0x10001, 0x200, 0x1, 0x7, 0x6, 0x7fff, 0x1ff, 0x7, 0x1, 0xffffffff, 0x1, 0x8, 0x9, 0x9, 0x5, 0x9]}, {0x20, 0x0, [0xa4df225, 0x200, 0x6, 0x80000000, 0xfffffffd, 0x3ff, 0x23d400, 0x17a, 0xff, 0xed5, 0x6, 0x9, 0xc00, 0x7f, 0x4385, 0x7f]}, {0x1, 0x0, [0x7fff, 0xffff, 0x8, 0x7a9, 0x9, 0x6, 0x8, 0x40, 0x3, 0x1, 0x7, 0x1, 0xfffffffc, 0x4, 0x6, 0x9]}], r1, 0x1, 0x1, 0x1f8}}, 0x20) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x8000050, 0xaa1, 0xffffffff, 0x5, 0x3, 0x2, 0x9, 0x1}, 0x0) flock(r0, 0xa) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) 00:55:31 executing program 5: ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000001080)=""/4110) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:31 executing program 4 (fault-call:7 fault-nth:35): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) 00:55:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) 00:55:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) read$sequencer(0xffffffffffffffff, &(0x7f0000000080)=""/248, 0xf8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x15) 00:55:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7, @private0, 0x1}, r2}}, 0x30) 00:55:31 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x10, 0x0, 0x2}, 0xeb65}}, 0x18) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000080500000000000a0000040500030011000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x854) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000280)=0x401) clock_getres(0x3, &(0x7f0000000180)) [ 348.326846] FAULT_INJECTION: forcing a failure. [ 348.326846] name failslab, interval 1, probability 0, space 0, times 0 00:55:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) [ 348.377083] CPU: 0 PID: 25352 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 348.385042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.394402] Call Trace: [ 348.397014] dump_stack+0x1b2/0x283 [ 348.400673] should_fail.cold+0x10a/0x154 [ 348.404830] ? mempool_free+0x1d0/0x1d0 [ 348.408842] should_failslab+0xd6/0x130 [ 348.412828] kmem_cache_alloc+0x40/0x3c0 [ 348.416906] ? mempool_free+0x1d0/0x1d0 [ 348.420883] mempool_alloc+0x10e/0x2d0 00:55:31 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="070006000106fe7fff0f0500ff018000"], &(0x7f0000000100)=0x14) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/118, 0x76) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f0000000140)={0x28, 0x0, r4, {{0xd, 0x72, 0x2, 0xffffffffffffffff}}}, 0x28) [ 348.424786] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 348.429551] ? remove_element.isra.0+0x1b0/0x1b0 [ 348.434341] ? _find_next_bit+0xdb/0x100 [ 348.438416] ? retint_kernel+0x2d/0x2d [ 348.442330] bio_alloc_bioset+0x41b/0x830 [ 348.446489] ? bvec_alloc+0x2d0/0x2d0 [ 348.450312] bio_clone_fast+0x20/0x130 [ 348.454202] bio_split+0x69/0x250 [ 348.457664] blk_queue_split+0x52d/0x19f0 [ 348.461816] ? __lock_acquire+0x5fc/0x3f20 [ 348.466120] ? blk_recount_segments+0x540/0x540 [ 348.470808] blk_mq_make_request+0x131/0x1ad0 [ 348.475319] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 348.480284] ? blk_queue_exit+0xb3/0x1d0 [ 348.484359] ? blk_exit_rl+0x70/0x70 [ 348.488081] ? lock_downgrade+0x740/0x740 [ 348.492605] generic_make_request+0x1f6/0x850 [ 348.497117] ? blk_queue_exit+0x1d0/0x1d0 [ 348.501285] submit_bio+0x234/0x390 [ 348.504927] ? generic_make_request+0x850/0x850 [ 348.514740] ? blkdev_direct_IO+0xb36/0xdc0 [ 348.519182] blkdev_direct_IO+0xb3e/0xdc0 00:55:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x4e22, @multicast1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 348.524107] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 348.529230] ? unwind_next_frame+0xe54/0x17d0 [ 348.534356] ? trace_hardirqs_on+0x10/0x10 [ 348.538603] ? mapping_needs_writeback+0xd4/0x110 [ 348.543467] ? filemap_check_errors+0x75/0x90 [ 348.547980] generic_file_read_iter+0x234/0x21c0 [ 348.552749] ? __might_fault+0x104/0x1b0 [ 348.556830] blkdev_read_iter+0xfe/0x160 [ 348.560903] do_iter_readv_writev+0x41d/0x5f0 [ 348.565408] ? avc_policy_seqno+0x5/0x10 [ 348.569507] ? clone_verify_area+0x1e0/0x1e0 [ 348.573940] ? rw_verify_area+0xe1/0x2a0 [ 348.578035] do_iter_read+0x21d/0x5b0 [ 348.581856] vfs_readv+0xc8/0x120 [ 348.585496] ? compat_rw_copy_check_uvector+0x320/0x320 [ 348.590954] ? SyS_write+0x1b7/0x210 [ 348.594680] ? __fget+0x1fe/0x360 [ 348.598142] ? lock_acquire+0x170/0x3f0 [ 348.602384] ? lock_downgrade+0x740/0x740 [ 348.606552] ? __fget+0x225/0x360 [ 348.610018] SyS_preadv+0x15a/0x200 [ 348.613654] ? SyS_writev+0x30/0x30 [ 348.617295] ? SyS_clock_settime+0x1a0/0x1a0 [ 348.621707] ? do_syscall_64+0x4c/0x640 00:55:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x3ff, 0x5, 0x1, "1dc9540c11f6219b9cb50248b0ab52e5a41e6f34b984034c82277f4da66f65e1", 0x3234564e}) 00:55:32 executing program 0: r0 = socket(0x18, 0x0, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) dup2(r1, r0) r2 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) [ 348.625701] ? SyS_writev+0x30/0x30 [ 348.629341] do_syscall_64+0x1d5/0x640 [ 348.633242] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 348.638440] RIP: 0033:0x45d5b9 [ 348.641636] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 348.649818] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 348.657195] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 348.664473] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 348.671755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 348.679988] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c [ 348.700926] xt_hashlimit: overflow, try lower: 0/0 00:55:32 executing program 4 (fault-call:7 fault-nth:36): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) 00:55:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0xfffffffd]}, {0x0, 0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d01]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:32 executing program 1: read$proc_mixer(0xffffffffffffffff, &(0x7f0000000040)=""/151, 0x97) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:32 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) 00:55:32 executing program 0: syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) 00:55:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r1, 0x2c3) [ 348.856574] FAULT_INJECTION: forcing a failure. [ 348.856574] name failslab, interval 1, probability 0, space 0, times 0 00:55:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x18) ioctl$IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f00000001c0)={{&(0x7f0000000140)={'Accelerator\x00', {}, {&(0x7f00000000c0)={'Accelerator1\x00'}}}}}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) mount$fuseblk(&(0x7f0000000200)='/dev/loop0\x00', &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x2004010, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x22}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other='allow_other'}], [{@subj_type={'subj_type', 0x3d, 'Accelerator\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fowner_lt={'fowner<'}}]}}) 00:55:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) openat$cgroup_int(r3, &(0x7f00000003c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x6, [0x8, 0x400, 0x4, 0x100000001, 0x4, 0x10000]}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) [ 348.948883] xt_hashlimit: overflow, try lower: 0/0 [ 348.949812] CPU: 1 PID: 25426 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 348.961742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.971097] Call Trace: [ 348.973691] dump_stack+0x1b2/0x283 [ 348.977329] should_fail.cold+0x10a/0x154 [ 348.981486] ? mempool_free+0x1d0/0x1d0 [ 348.985464] should_failslab+0xd6/0x130 [ 348.989450] kmem_cache_alloc+0x40/0x3c0 [ 348.993517] ? mempool_free+0x1d0/0x1d0 [ 348.997497] mempool_alloc+0x10e/0x2d0 [ 349.001394] ? remove_element.isra.0+0x1b0/0x1b0 [ 349.006148] ? _find_next_bit+0xdb/0x100 [ 349.010217] ? __lock_acquire+0x5fc/0x3f20 [ 349.014460] bio_alloc_bioset+0x41b/0x830 [ 349.018611] ? __lock_acquire+0x5fc/0x3f20 [ 349.018924] xt_hashlimit: overflow, try lower: 0/0 [ 349.022851] ? bvec_alloc+0x2d0/0x2d0 [ 349.022863] ? trace_hardirqs_on+0x10/0x10 [ 349.022874] bio_clone_fast+0x20/0x130 [ 349.022882] bio_split+0x69/0x250 [ 349.022892] blk_queue_split+0x52d/0x19f0 [ 349.022901] ? __lock_acquire+0x5fc/0x3f20 [ 349.022917] ? blk_recount_segments+0x540/0x540 [ 349.022934] blk_mq_make_request+0x131/0x1ad0 [ 349.061604] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 349.066537] ? blk_queue_exit+0xb3/0x1d0 [ 349.070601] ? blk_exit_rl+0x70/0x70 [ 349.074348] ? lock_downgrade+0x740/0x740 [ 349.078523] generic_make_request+0x1f6/0x850 [ 349.083022] ? blk_queue_exit+0x1d0/0x1d0 [ 349.087177] submit_bio+0x234/0x390 [ 349.090807] ? generic_make_request+0x850/0x850 [ 349.095480] ? zero_fill_bio+0x390/0x390 00:55:32 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000014c0)={0x1}, 0x8) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000280)=0x9, 0x4cd7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000004c0)={{r2}, "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"}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/157, 0x9d}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f0000000100)=""/11, 0xb}], 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r4, 0x1, 0x1, 0x90}}, 0x20) [ 349.099542] ? iov_iter_npages+0x17b/0x7c0 [ 349.106208] ? bio_set_pages_dirty+0x8c/0x170 [ 349.110715] blkdev_direct_IO+0xb3e/0xdc0 [ 349.114891] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 349.120000] ? unwind_next_frame+0xe54/0x17d0 [ 349.124500] ? trace_hardirqs_on+0x10/0x10 [ 349.128737] ? mapping_needs_writeback+0xd4/0x110 [ 349.133585] ? filemap_check_errors+0x75/0x90 [ 349.138102] generic_file_read_iter+0x234/0x21c0 [ 349.142861] ? __might_fault+0x104/0x1b0 [ 349.146932] blkdev_read_iter+0xfe/0x160 [ 349.150680] xt_hashlimit: overflow, try lower: 0/0 [ 349.151001] do_iter_readv_writev+0x41d/0x5f0 [ 349.160446] ? avc_policy_seqno+0x5/0x10 [ 349.164539] ? clone_verify_area+0x1e0/0x1e0 [ 349.168959] ? rw_verify_area+0xe1/0x2a0 [ 349.173029] do_iter_read+0x21d/0x5b0 [ 349.176836] vfs_readv+0xc8/0x120 [ 349.180300] ? compat_rw_copy_check_uvector+0x320/0x320 [ 349.185012] xt_hashlimit: overflow, try lower: 0/0 [ 349.185663] ? SyS_write+0x1b7/0x210 [ 349.194332] ? __fget+0x1fe/0x360 [ 349.198488] ? lock_acquire+0x170/0x3f0 [ 349.202467] ? lock_downgrade+0x740/0x740 [ 349.206647] ? __fget+0x225/0x360 [ 349.209519] xt_hashlimit: overflow, try lower: 0/0 [ 349.210114] SyS_preadv+0x15a/0x200 [ 349.218663] ? SyS_writev+0x30/0x30 [ 349.222374] ? SyS_clock_settime+0x1a0/0x1a0 [ 349.226875] ? do_syscall_64+0x4c/0x640 [ 349.231126] ? SyS_writev+0x30/0x30 [ 349.234755] do_syscall_64+0x1d5/0x640 [ 349.238651] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 349.243840] RIP: 0033:0x45d5b9 00:55:32 executing program 5: ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x4, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0}) write$ppp(0xffffffffffffffff, &(0x7f0000000080)="bceb3166f91218f5d817f4505bb2ea46fe44273b7843f95864613413fa34cc623eae1805d92883a4a731c5f139e3403e077fcc2c9d4635cebb0b1124c047e1b7eb6ee6e64b4726ae8be32346140dfad86b47d1f71dccbf6e578d70e35751f03bea2facc76c50c9c05480b0bc9f40bd1802", 0x71) [ 349.247027] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 349.255174] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 349.262450] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 349.269724] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 349.276997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 349.284278] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:32 executing program 4 (fault-call:7 fault-nth:37): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x0) accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x1c, 0x80000) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) 00:55:32 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x6, 0x200) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x300, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@empty, 0x47, r4}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000000c0)) r4 = gettid() migrate_pages(r4, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r5, r4}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000003c0)=[{0xa, 0x0, [0x6, 0x1, 0x7fffffff, 0x0, 0x6, 0xff, 0x80000000, 0x8000, 0x3, 0x4, 0x8, 0x3, 0xffff, 0x2, 0x8000, 0xfffffffd]}, {0x3, 0x0, [0x80000001, 0x8, 0x7, 0x9, 0x1, 0x0, 0x5, 0x2, 0x7, 0x40, 0x4, 0x0, 0x8, 0x0, 0x1, 0x8001]}, {0x15, 0x0, [0x8, 0x9, 0x4, 0xc32, 0xfffffffd, 0x1, 0x1c, 0x3ff, 0x3, 0xffff, 0x81, 0x2, 0x7, 0x8, 0x8, 0x7]}, {0x39, 0x0, [0x0, 0x0, 0x4, 0x401, 0xffffffff, 0x1, 0xf4, 0x5, 0x0, 0x0, 0x7, 0x5, 0xfffff800, 0x101, 0x668eed20, 0xc77a]}, {0x9, 0x0, [0x7, 0x41, 0x0, 0x0, 0x4, 0x7, 0x7, 0x8001, 0x0, 0x9f3, 0x0, 0x79e, 0x2, 0x7, 0x7, 0x40]}, {0x5, 0x0, [0x8, 0x317, 0x98f, 0x7f, 0x1, 0x2, 0x7, 0x401, 0x3ff, 0x7fff, 0x1000, 0xfffffffa, 0x771, 0x101, 0x3, 0x9]}, {0x13, 0x0, [0x0, 0x0, 0x8, 0x8000, 0xe547, 0x80000000, 0x7, 0x5, 0x0, 0x6, 0x8, 0xffffffc1, 0x2, 0x0, 0x6, 0x2]}, {0x4, 0x0, [0x8001, 0x4, 0x1, 0x9, 0x6, 0x80, 0x5, 0x7f, 0x4, 0x6, 0x7, 0x1, 0xda, 0x7d6, 0x1, 0x9]}, {0x21, 0x0, [0x2, 0x80, 0xa608, 0x7, 0x8001, 0x3, 0x15, 0x4, 0x1, 0x6, 0x80, 0x1212, 0x6, 0x3, 0x1, 0x1]}, {0x5, 0x0, [0x9, 0x40000, 0x800, 0x6, 0x8, 0x7, 0x328, 0x5, 0x7ff, 0x2, 0x10001, 0x2, 0x7, 0xab, 0x3, 0x800]}], r5, 0x1, 0x1, 0x2d0}}, 0x20) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="c30000000700000072471befc201c215fc2449165b2af8bee76f9ea5a54f96449b6a90e89ee4ef8f2e1ee1dd48d44cc50c7a6d9e964311e7240ea04740d36692cf9dd84594c4764b08f7c8fd020000000000000053bffaa38b85a3e4e27c57bcc775e55d887ac6efe03415458cc04ec1c1191a8bae79dccd156ff267af761612038785bab25929f9f248971496b3688b1b575f2e1ad4658057a3afe49b7a13bf455aede9368bb9d18283b32dd3748ab3a22dfe78c4274ca314b5fbb1d72e41280e29df"], 0x101000) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x800, 0x0, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) r7 = accept$inet6(r3, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, &(0x7f00000007c0)=0x1c) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000800)={{{@in=@empty, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x4e22, 0x9, 0x4e24, 0x4, 0x2, 0x80, 0xa0, 0x87, 0x0, 0xffffffffffffffff}, {0x9, 0x7ff, 0x4, 0x87, 0x2f93, 0x20, 0xb1b, 0x8}, {0x9, 0x22, 0x8001, 0x8cdc}, 0x4c17, 0x6e6bb7, 0x1, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d2, 0x32}, 0xa, @in=@remote, 0x3500, 0x2, 0x2, 0x24, 0x7, 0x8ee8, 0x8001}}, 0xe8) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x4040000) 00:55:32 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000013c0)={0x0, 0x80000, 0xffffffffffffffff}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001740)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r9, @ANYBLOB="020026bd7000fcdbdf250e000000380001801400020073797a6b616c6c657231000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c0001800800030002000000080003000100000008000300000000001400025509c6e530acacb576603345006200000000765f73", @ANYRES32=0x0, @ANYBLOB="1400020069705f767469300000000000000000000800030000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0xb8}, 0x1, 0x0, 0x0, 0xc0011}, 0x44) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) io_submit(0x0, 0x7, &(0x7f00000015c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000180)="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", 0x1000, 0x101, 0x0, 0x0, r2}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000001180), 0x0, 0x8}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x7, 0x200, r3, &(0x7f0000001200)="92da68127726a8ac15951bfb7a792d8688af1b06d0de99db4d24644437ea27e6c43f7ecff778f9c1b3e21e3df1a9359f3705de20c3c45382dd4fad3185cd88396d07085edfbd87006d7fd55ecc9d5e0dcfd2ca581611a9079c963c9e35be3471590d6f9647405ee3f64478189dc74af12547ed37415e4eceabf16c77c5dff3290ecf528de708cc8e42097db267d1a0fff44a78508e10fec3cc067a959fdd8a82077e52", 0xa3, 0x1, 0x0, 0x1}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x5, 0x2, r4, &(0x7f0000001300)="309ce8c6b2955a32150a5b19a0154f23725f630976465734764511e7993d48f61f7fc9c840bd5e5ce7e467e91ac29b939336fded4005d6d2d8c81f2d87c7b427de4313cad041fd81e5a09d1c607c03d3ac401159", 0x54, 0x6, 0x0, 0x1, r6}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x7, 0x7, r7, &(0x7f0000001400)="ae74937e94", 0x5, 0x9, 0x0, 0x1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x3ff, r8, &(0x7f0000001480)="00d4ed6c2a71bf62bf40ef5abfef8ce4227322b6538a8e950968aef51b122646d48e5dd828956fceb6e47b1d89183c15a170be2d0436e7d13692333907f324b168b884125571cc6213e74d5ef2bf006419636db037608f0f52e21867abb7676e591563b20eea5cc413e7", 0x6a, 0x1000, 0x0, 0x1}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x6, 0x7fff, r0, &(0x7f0000001540)="2036ade54e2d55967a", 0x9, 0x8000}]) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000001780)) [ 349.460742] FAULT_INJECTION: forcing a failure. [ 349.460742] name failslab, interval 1, probability 0, space 0, times 0 [ 349.476463] CPU: 1 PID: 25492 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 349.484369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.493730] Call Trace: [ 349.496333] dump_stack+0x1b2/0x283 [ 349.500318] should_fail.cold+0x10a/0x154 [ 349.504508] ? mempool_free+0x1d0/0x1d0 [ 349.508490] should_failslab+0xd6/0x130 [ 349.512472] kmem_cache_alloc+0x40/0x3c0 [ 349.516536] ? mempool_free+0x1d0/0x1d0 [ 349.520511] mempool_alloc+0x10e/0x2d0 [ 349.524404] ? remove_element.isra.0+0x1b0/0x1b0 [ 349.529161] ? _find_next_bit+0xdb/0x100 [ 349.533227] ? __lock_acquire+0x5fc/0x3f20 [ 349.537468] bio_alloc_bioset+0x41b/0x830 [ 349.541628] ? __lock_acquire+0x5fc/0x3f20 [ 349.547083] ? bvec_alloc+0x2d0/0x2d0 [ 349.550898] ? trace_hardirqs_on+0x10/0x10 [ 349.555137] bio_clone_fast+0x20/0x130 [ 349.559020] bio_split+0x69/0x250 [ 349.562473] blk_queue_split+0x52d/0x19f0 [ 349.566625] ? __lock_acquire+0x5fc/0x3f20 [ 349.570857] ? blk_recount_segments+0x540/0x540 [ 349.575529] blk_mq_make_request+0x131/0x1ad0 [ 349.577698] xt_hashlimit: overflow, try lower: 0/0 [ 349.580830] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 349.580842] ? blk_queue_exit+0xb3/0x1d0 [ 349.580855] ? blk_exit_rl+0x70/0x70 [ 349.598466] ? lock_downgrade+0x740/0x740 [ 349.602639] generic_make_request+0x1f6/0x850 [ 349.607133] ? blk_queue_exit+0x1d0/0x1d0 [ 349.611286] submit_bio+0x234/0x390 [ 349.614900] ? generic_make_request+0x850/0x850 [ 349.619569] ? zero_fill_bio+0x390/0x390 [ 349.623621] ? iov_iter_npages+0x17b/0x7c0 [ 349.627858] ? bio_set_pages_dirty+0x8c/0x170 [ 349.632339] blkdev_direct_IO+0xb3e/0xdc0 [ 349.636498] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 349.641615] ? unwind_next_frame+0xe54/0x17d0 [ 349.646128] ? trace_hardirqs_on+0x10/0x10 [ 349.650393] ? mapping_needs_writeback+0xd4/0x110 [ 349.650479] xt_hashlimit: overflow, try lower: 0/0 [ 349.655242] ? filemap_check_errors+0x75/0x90 [ 349.655255] generic_file_read_iter+0x234/0x21c0 [ 349.655269] ? __might_fault+0x104/0x1b0 [ 349.655287] blkdev_read_iter+0xfe/0x160 [ 349.655299] do_iter_readv_writev+0x41d/0x5f0 [ 349.655310] ? avc_policy_seqno+0x5/0x10 [ 349.655318] ? clone_verify_area+0x1e0/0x1e0 [ 349.655331] ? rw_verify_area+0xe1/0x2a0 [ 349.655343] do_iter_read+0x21d/0x5b0 [ 349.698406] vfs_readv+0xc8/0x120 [ 349.701863] ? compat_rw_copy_check_uvector+0x320/0x320 [ 349.707223] ? SyS_write+0x1b7/0x210 [ 349.710934] ? __fget+0x1fe/0x360 [ 349.714380] ? lock_acquire+0x170/0x3f0 [ 349.718346] ? lock_downgrade+0x740/0x740 [ 349.723448] ? __fget+0x225/0x360 [ 349.726915] SyS_preadv+0x15a/0x200 [ 349.730530] ? SyS_writev+0x30/0x30 [ 349.734152] ? SyS_clock_settime+0x1a0/0x1a0 [ 349.738559] ? do_syscall_64+0x4c/0x640 [ 349.742521] ? SyS_writev+0x30/0x30 [ 349.746143] do_syscall_64+0x1d5/0x640 [ 349.750039] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 349.755236] RIP: 0033:0x45d5b9 00:55:33 executing program 5: accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80400) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2d59, 0x0}) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000080)={0x8, 0x5, 0x8}) 00:55:33 executing program 4 (fault-call:7 fault-nth:38): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) [ 349.758424] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 349.766129] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 349.774438] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 349.781801] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 349.789059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 349.796338] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) r3 = gettid() migrate_pages(r3, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000180)='/dev/video#\x00', 0x3f, 0x2) exit_group(0xff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x1c) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr={0x3447504d}}) fgetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '/dev/video#\x00'}, &(0x7f00000001c0)=""/201, 0xc9) prctl$PR_GET_DUMPABLE(0x3) 00:55:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x49c0b12c]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x2c}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) 00:55:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:33 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000180)}, 0x20) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x60, 0xf, 0xb6, 0x9, 0xff, 0x2c, &(0x7f0000000080)="e83732b14c28e33fe2df00e6eded557f7d0fa1088772c84d6e46d391ae829c346b03a16f834225f4bd070229936a58f8eb5ddac9cc13d5feebda2b42a6802c725e1aeef23986f4f1770c82519a483b777666112af06b74921b88285cff52a121a664e4544a0a56896a7b6675a709eb506e202ba7190d90bef3ac5f1c1be90a8f09396d08280bee7ceaea46b7d327965f3a959826b35baaa9c1d734edd1607ae4383c353cc621b00273f48daa234475f033536faa94e48f740509c31a561be23d8a79963ca0062236de1bb620e95b1bc637755d5b1864496182017337df8281bcb60ff3e79297b7a6501a8fcfcce58518026657babdd12ae0536b1eecbc770a"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 349.998088] FAULT_INJECTION: forcing a failure. [ 349.998088] name failslab, interval 1, probability 0, space 0, times 0 00:55:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x1, 0x0, 0x4, 0x40, 0x1, {r1, r2/1000+60000}, {0x3, 0x2, 0x0, 0xff, 0x3, 0x7, "789fdb4d"}, 0x0, 0x4, @offset, 0x6, 0x0, r3}) 00:55:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ion\x00', 0x240900, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{0x52, 0x4}, {0x1f, 0xf7}, 0xff, 0x0, 0x40}) r3 = dup2(r2, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x9}, &(0x7f00000004c0)=0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x0, 0x1, {{0x2a, 0x4, 0x2, 0x3, 0xa8, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @loopback, {[@rr={0x7, 0x7, 0xe3, [@local]}, @timestamp_prespec={0x44, 0x2c, 0xf4, 0x3, 0x1, [{@private=0xa010100, 0x9}, {@loopback, 0x5}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0xc2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x10000}]}, @generic={0x86, 0xc, "dd11dd042e40eba62af3"}, @generic={0x7, 0x7, "d698bf89c3"}, @rr={0x7, 0x7, 0xff, [@loopback]}, @generic={0x88, 0x6, "a90a8843"}, @lsrr={0x83, 0x1f, 0xe0, [@multicast1, @empty, @remote, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @local]}, @generic={0x88, 0x3, "7f"}, @timestamp_prespec={0x44, 0x1c, 0x57, 0x3, 0x4, [{@rand_addr=0x64010102, 0x401}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xbb0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r5, 0x40, 0x1934959f50ce4ac6, 0x8000, 0x101, {{0x6, 0x4, 0x2, 0x29, 0xffffff48, 0x64, 0x0, 0x8, 0x2f, 0x0, @broadcast, @multicast2, {[@noop]}}}}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x7f]}, {0x0, 0x0, [0x0, 0x0, 0x8f35, 0xffffffff, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4]}], r6, 0x1, 0x1, 0x90}}, 0x20) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68000000000000000000000700000a08000240000000010900010000000c0004400000000000000001090001006a797a30000000000800024000000001090001007a30000000000c0004400000000000ed000308000240000000000000999e7e729042c34aa5cc834fe36383b2c05690fb5d9e234aa440e37f0ce2d82507329249d962749240aac24948fd7230f28f1e714441449a13ffc3945b162778c14fc755d55bcc516a820d2f7d268aa2a968232dbcf9d439396c"], 0x68}}, 0x4000080) [ 350.071045] CPU: 1 PID: 25532 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 350.078970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.088335] Call Trace: [ 350.090953] dump_stack+0x1b2/0x283 [ 350.094595] should_fail.cold+0x10a/0x154 [ 350.098747] ? mempool_free+0x1d0/0x1d0 [ 350.102727] should_failslab+0xd6/0x130 [ 350.106708] kmem_cache_alloc+0x40/0x3c0 [ 350.110773] ? mempool_free+0x1d0/0x1d0 [ 350.114753] mempool_alloc+0x10e/0x2d0 [ 350.119167] ? remove_element.isra.0+0x1b0/0x1b0 [ 350.123924] ? _find_next_bit+0xdb/0x100 [ 350.128005] ? __lock_acquire+0x5fc/0x3f20 [ 350.132248] bio_alloc_bioset+0x41b/0x830 [ 350.136398] ? __lock_acquire+0x5fc/0x3f20 [ 350.140643] ? bvec_alloc+0x2d0/0x2d0 [ 350.144449] ? trace_hardirqs_on+0x10/0x10 [ 350.148697] bio_clone_fast+0x20/0x130 [ 350.152595] bio_split+0x69/0x250 [ 350.156059] blk_queue_split+0x52d/0x19f0 [ 350.161048] ? __lock_acquire+0x5fc/0x3f20 [ 350.165404] ? blk_recount_segments+0x540/0x540 00:55:33 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) [ 350.170104] blk_mq_make_request+0x131/0x1ad0 [ 350.174630] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 350.180183] ? blk_queue_exit+0xb3/0x1d0 [ 350.184365] ? blk_exit_rl+0x70/0x70 [ 350.188084] ? lock_downgrade+0x740/0x740 [ 350.192245] generic_make_request+0x1f6/0x850 [ 350.196751] ? blk_queue_exit+0x1d0/0x1d0 [ 350.200916] submit_bio+0x234/0x390 [ 350.204552] ? generic_make_request+0x850/0x850 [ 350.209230] ? zero_fill_bio+0x390/0x390 [ 350.213294] ? iov_iter_npages+0x17b/0x7c0 [ 350.218318] ? bio_set_pages_dirty+0x8c/0x170 [ 350.222818] blkdev_direct_IO+0xb3e/0xdc0 [ 350.225396] xt_hashlimit: overflow, try lower: 0/0 [ 350.226986] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 350.226997] ? unwind_next_frame+0xe54/0x17d0 [ 350.227014] ? trace_hardirqs_on+0x10/0x10 [ 350.245783] ? mapping_needs_writeback+0xd4/0x110 [ 350.250978] ? filemap_check_errors+0x75/0x90 [ 350.256216] generic_file_read_iter+0x234/0x21c0 [ 350.261004] ? __might_fault+0x104/0x1b0 [ 350.265083] blkdev_read_iter+0xfe/0x160 [ 350.269145] do_iter_readv_writev+0x41d/0x5f0 [ 350.274077] ? avc_policy_seqno+0x5/0x10 [ 350.278435] ? clone_verify_area+0x1e0/0x1e0 [ 350.280138] xt_hashlimit: overflow, try lower: 0/0 [ 350.283367] ? rw_verify_area+0xe1/0x2a0 [ 350.283380] do_iter_read+0x21d/0x5b0 [ 350.283396] vfs_readv+0xc8/0x120 [ 350.283406] ? compat_rw_copy_check_uvector+0x320/0x320 [ 350.283414] ? SyS_write+0x1b7/0x210 [ 350.283424] ? __fget+0x1fe/0x360 [ 350.283437] ? lock_acquire+0x170/0x3f0 [ 350.283446] ? lock_downgrade+0x740/0x740 [ 350.283460] ? __fget+0x225/0x360 [ 350.283475] SyS_preadv+0x15a/0x200 [ 350.283484] ? SyS_writev+0x30/0x30 [ 350.283577] ? SyS_clock_settime+0x1a0/0x1a0 [ 350.283591] ? do_syscall_64+0x4c/0x640 [ 350.283600] ? SyS_writev+0x30/0x30 [ 350.283609] do_syscall_64+0x1d5/0x640 [ 350.283624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 350.283643] RIP: 0033:0x45d5b9 00:55:33 executing program 4 (fault-call:7 fault-nth:39): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0xcc0, 0x0, 0x6}, 0x8) r3 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1b7) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c0}, 0x48d0) 00:55:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) signalfd(r1, &(0x7f00000003c0)={[0xfffffffffffffffe]}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x10000, 0x1, 0x9}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r3, 0x1, 0x1, 0x90}}, 0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002780)='/dev/autofs\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000027c0), &(0x7f0000002800)=0x8) 00:55:33 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x1000, 0x0, 0x0, 0x800000]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffff258]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000080)) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 350.365276] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 350.372995] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 350.380249] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 350.387958] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 350.395246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 350.402535] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c 00:55:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) [ 350.509239] xt_hashlimit: overflow, try lower: 0/0 [ 350.522129] FAULT_INJECTION: forcing a failure. [ 350.522129] name failslab, interval 1, probability 0, space 0, times 0 [ 350.529158] xt_hashlimit: overflow, try lower: 0/0 [ 350.541743] CPU: 1 PID: 25576 Comm: syz-executor.4 Not tainted 4.14.197-syzkaller #0 [ 350.549682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.559153] Call Trace: [ 350.561844] dump_stack+0x1b2/0x283 [ 350.565513] should_fail.cold+0x10a/0x154 [ 350.569674] ? mempool_free+0x1d0/0x1d0 [ 350.573715] should_failslab+0xd6/0x130 [ 350.578306] kmem_cache_alloc+0x40/0x3c0 [ 350.582373] ? mempool_free+0x1d0/0x1d0 [ 350.586357] mempool_alloc+0x10e/0x2d0 [ 350.586585] xt_hashlimit: overflow, try lower: 0/0 [ 350.590254] ? remove_element.isra.0+0x1b0/0x1b0 [ 350.590263] ? _find_next_bit+0xdb/0x100 [ 350.590278] ? __lock_acquire+0x5fc/0x3f20 00:55:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x21, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7e, 0x2000]}], r1, 0x1, 0x1, 0x90}}, 0x20) [ 350.590294] bio_alloc_bioset+0x41b/0x830 [ 350.612541] ? __lock_acquire+0x5fc/0x3f20 [ 350.615089] xt_hashlimit: overflow, try lower: 0/0 [ 350.616787] ? bvec_alloc+0x2d0/0x2d0 [ 350.616799] ? trace_hardirqs_on+0x10/0x10 [ 350.616816] bio_clone_fast+0x20/0x130 [ 350.634737] bio_split+0x69/0x250 [ 350.638198] blk_queue_split+0x52d/0x19f0 [ 350.642647] ? __lock_acquire+0x5fc/0x3f20 [ 350.647018] ? blk_recount_segments+0x540/0x540 [ 350.651898] blk_mq_make_request+0x131/0x1ad0 [ 350.656436] ? __blk_mq_insert_request+0x6f0/0x6f0 [ 350.661462] ? blk_queue_exit+0xb3/0x1d0 [ 350.665534] ? blk_exit_rl+0x70/0x70 [ 350.669255] ? lock_downgrade+0x740/0x740 [ 350.673535] generic_make_request+0x1f6/0x850 [ 350.679184] ? blk_queue_exit+0x1d0/0x1d0 [ 350.684055] submit_bio+0x234/0x390 [ 350.688509] ? generic_make_request+0x850/0x850 [ 350.693193] ? zero_fill_bio+0x390/0x390 [ 350.698222] ? iov_iter_npages+0x17b/0x7c0 [ 350.702467] ? bio_set_pages_dirty+0x8c/0x170 [ 350.707860] blkdev_direct_IO+0xb3e/0xdc0 [ 350.712030] ? __blkdev_direct_IO_simple+0xa10/0xa10 [ 350.717160] ? unwind_next_frame+0xe54/0x17d0 [ 350.721862] ? trace_hardirqs_on+0x10/0x10 [ 350.726105] ? mapping_needs_writeback+0xd4/0x110 [ 350.732056] ? filemap_check_errors+0x75/0x90 [ 350.736593] generic_file_read_iter+0x234/0x21c0 [ 350.741446] ? __might_fault+0x104/0x1b0 [ 350.745526] blkdev_read_iter+0xfe/0x160 [ 350.749598] do_iter_readv_writev+0x41d/0x5f0 [ 350.754710] ? avc_policy_seqno+0x5/0x10 00:55:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000040)={0x1, @raw_data="6180420312670945a463c62d9d78fb6d93b1565fbc67eec4d514abbd129bbd1dcb2e4ced00d8cbc43ce30c6bf0e7cbf67ac64ef3b6d3042f0d34c7981ada75c862747b481415d7fd2771db2a028e3c5b5d677769b49967dbb7419e5f4daa29e37b02653d89273fa0d8da0f000e0c71080ec5a231d11f37a56674cf0b8e5637fa598085d41e067efc87afede4da167513036e2bf036330c7cf812cccf2aa306ecd4088b93bf15cec8d4c4bcbc83a7d4a6038ba591cbb5026e22bb91f95c4c38453b42ab7bf12cf869"}) [ 350.758775] ? clone_verify_area+0x1e0/0x1e0 [ 350.763322] ? rw_verify_area+0xe1/0x2a0 [ 350.767417] do_iter_read+0x21d/0x5b0 [ 350.771349] vfs_readv+0xc8/0x120 [ 350.774833] ? compat_rw_copy_check_uvector+0x320/0x320 [ 350.779971] xt_hashlimit: overflow, try lower: 0/0 [ 350.780201] ? SyS_write+0x1b7/0x210 [ 350.788837] ? __fget+0x1fe/0x360 [ 350.792304] ? lock_acquire+0x170/0x3f0 [ 350.796285] ? lock_downgrade+0x740/0x740 [ 350.800466] ? __fget+0x225/0x360 [ 350.803929] SyS_preadv+0x15a/0x200 00:55:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) r3 = gettid() migrate_pages(r3, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) r2 = gettid() migrate_pages(r2, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) [ 350.807556] ? SyS_writev+0x30/0x30 00:55:34 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x181080, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x5c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r5, 0x1, 0x1, 0x90}}, 0x20) 00:55:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) r3 = gettid() migrate_pages(r3, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:34 executing program 4 (fault-call:7 fault-nth:40): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) [ 350.811199] ? SyS_clock_settime+0x1a0/0x1a0 [ 350.811212] ? do_syscall_64+0x4c/0x640 [ 350.811221] ? SyS_writev+0x30/0x30 [ 350.811232] do_syscall_64+0x1d5/0x640 [ 350.811248] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 350.811256] RIP: 0033:0x45d5b9 [ 350.811261] RSP: 002b:00007fe9ec33dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 350.811272] RAX: ffffffffffffffda RBX: 0000000000025880 RCX: 000000000045d5b9 [ 350.811278] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000005 [ 350.811283] RBP: 00007fe9ec33dca0 R08: 0000000000000000 R09: 0000000000000000 [ 350.811288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 350.811294] R13: 00007ffd1f981e6f R14: 00007fe9ec33e9c0 R15: 000000000118cf4c [ 350.917802] xt_hashlimit: overflow, try lower: 0/0 [ 350.957663] xt_hashlimit: overflow, try lower: 0/0 00:55:34 executing program 0: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8340) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x1801, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000200)="092cc8664dbfbbc985c216435f21a005997835bbeb7ba87af0bcc6e20b15ef20d589b8832916e48f1c02f5cb7e83f6162ad2e96509a05150bf7b44ae4168f20df6b3149eabf82300e4fe02c6ae", 0x4d}, {&(0x7f00000003c0)="b696966283edfe5216f6a91fb8d71648449478c9d4b0cdf197f347c27022cae24b59a04734172b45cbe216c811", 0x2d}, {&(0x7f0000001580)="c3ce444839943a87aa2cd33ddd3d1ef46ad4164efca50cf921bbf3afc0", 0x1d}, {&(0x7f00000016c0)="4706774e043c40ccadb0b4b1bc86bb383371823193cb31b3f12fc124643e69b09412e33d674a84033f5dab5f29229e401cdc", 0x32}], 0x4}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002340)="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", 0x3a8}], 0x1}}], 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="0946a34bfbd88e93642baeb84e0fed51ea336689", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e20, 0x3, @empty, 0x7}}}, 0x84) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x300, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) 00:55:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) r3 = gettid() migrate_pages(r3, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:34 executing program 1: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'ip_vti0\x00', 0xffff}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:34 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0x10001}}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) socket$isdn(0x22, 0x3, 0x21) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = gettid() migrate_pages(r2, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044000) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001400)={@null=' \x00', 0x8, 'hsr0\x00'}) 00:55:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:34 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = gettid() migrate_pages(r1, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/oss_mixer\x00', 0x105000, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x101, @any, 0x2, 0x2}, 0xe) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0xffffff22, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}], r1, 0x1, 0x1, 0x67}}, 0x20) 00:55:35 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000009c0)=0xf) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe8, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000881) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f00000002c0)={0x7, &(0x7f00000003c0)=[{@none}, {@fixed}, {@none}, {}, {}, {@fixed}, {@fixed}]}) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x200, 0x70bd2a, 0x2, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb848}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x57}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xbd25ba87400f19c8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffff81}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x10) 00:55:35 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:35 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x7f, 0x40796, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x50, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = semget(0x0, 0x4, 0x61a) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000004c0)='./file0\x00', r2, r3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000340)={{0x2, 0x0, r3, r4, r5, 0x128, 0x6c77}, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r6 = syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x0, &(0x7f0000000240), 0x884402, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@quiet='quiet'}], [{@seclabel='seclabel'}]}) renameat2(r6, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:35 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000000c0)) migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x10000, 0x0) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r4 = fcntl$dupfd(r2, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000040)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r6, 0x1, 0x1, 0x90}}, 0x20) 00:55:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:35 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r0, 0x1, 0x1, 0x90}}, 0x20) 00:55:35 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x3]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92b]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:35 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) [ 352.161789] xt_hashlimit: overflow, try lower: 0/0 00:55:35 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x6, @mcast2}}, 0x0, 0x0, 0x2f, 0x0, "46c5f9f4a915017bd09fd786eb75f55a7da09ae549085b8367c5befe90190832ad770007d6646ef17ab64a62ec09a78f4b9d367010dd18038337277b03450f33f87977e1f1d90fcf165c409677bde674"}, 0xd8) r2 = gettid() migrate_pages(r2, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) [ 352.211919] xt_hashlimit: overflow, try lower: 0/0 00:55:35 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000001400)={0x104, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000011}, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)=',)&$]\x00', 0xffffffffffffffff) keyctl$get_persistent(0x16, r3, r4) tee(r0, 0xffffffffffffffff, 0x8, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) [ 352.249853] xt_hashlimit: overflow, try lower: 0/0 00:55:35 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = dup3(r0, r0, 0x80000) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x6, 0x723, 0x7f}, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:35 executing program 3: r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:35 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:35 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = gettid() migrate_pages(r2, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 00:55:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:36 executing program 3: gettid() migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r1, @ANYBLOB="200028bd7000fedbdf250101000008000500ffffffff6000028008000400631b000008000900e8000000080009000200000008000600ba70000014000100ff010000000000000000000000000006000700000006000e004e20000005000d0000000000080005000000000070000380140002006d6163766c616e310000000000000000080001000100000014000600ff02000000000000000000000000000106000400780b000008000500e00000010600040007000000cb91bf75ad9af7495b1e080005000a01010114000600fc0200000000000000000000000000000800050064010100080005000700000014000280080006000080000008000900040000001c000380080001f70000000008000500ac14142308000100010000002a0005000500000008000600000000020800050005000000ae44e631df22da9172575e039731b241e1a840dbdab2500208090d4800d8c94f7a0e136fb2826750c6a10b6db7cf69771d505432ccaeccdd002a37593c03968b8cc526bd0bbf0cea10a561086f553d15dfa24087865c43eafd39318b31cafc7322330a1082b3f2cba9913d40"], 0x13c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000002c0)={0x8, 'vlan0\x00', {'veth1_to_bridge\x00'}, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) write$evdev(r5, &(0x7f0000000080)=[{{}, 0x84f820c4785675b6, 0x4, 0x97}, {{0x0, 0xea60}, 0x0, 0x2, 0x9}, {{}, 0x17, 0x1, 0x2}, {{0x77359400}, 0x1, 0x1800}, {{0x0, 0xea60}, 0x0, 0x3, 0xffffff7a}], 0x78) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:36 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = gettid() migrate_pages(r1, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) 00:55:36 executing program 3: gettid() migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:36 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 3: gettid() migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x38, 0x1410, 0x220, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x38}}, 0x24004010) 00:55:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) 00:55:36 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200001, 0x0) r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 3: r0 = gettid() migrate_pages(r0, 0x0, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000001400)="b2ff4b2cce4452de6838a9ee1ef4de75f6ce0226900976a89ad55f2abec7b7f154ac073eb36adb80b319a3db34e6b57a24202c0ade4174bee877e9be8ccc84ad4165152380fa0b6e39a33d963284df3e40e5a8f3d98e4fbe45bce04cceb4a20a5547cac3b9fc2a496f29a9b37004ba1794b1a65f0515005c992a7f163e8f5838e1a4a5d0b8e7ba69b6fa0c36104eb9016c8e2be12b6eaec8f5ead92f46426d0fccdb75afc58185b2117dca28d5bda83c229a543eb2f6d228195f0dd7fdc02c3f6d8c1b503e789678bb3d3fbbd86b0aea7851b3e6d529599a31d0b79dc161dd27ca4e3f4d54642f6164172bd2e3c08cf5f17908c8cc8fea75a0f5db4a") accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:36 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) 00:55:36 executing program 3: r0 = gettid() migrate_pages(r0, 0x0, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) 00:55:36 executing program 5: r0 = gettid() migrate_pages(r0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 3: r0 = gettid() migrate_pages(r0, 0x0, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r0, 0x57f}}, 0x10) [ 352.993167] xt_hashlimit: overflow, try lower: 0/0 00:55:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x34, 0x66, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x16}, {0x6, 0x16}, {0xfff1, 0xc}}, [{0x8, 0xb, 0xfd}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4054}, 0x800) 00:55:36 executing program 5: gettid() migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) setuid(r4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x4400, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00f5ff000000fedbdf2505000000140006002001000000000000002200000000000106000b000600000014000500fe8000000000000000000000000000000800080064010102"], 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7500fbdbdf250200000006000b002c00000008000700e00000010800040002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x804) r7 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0xec, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0xd5, 0x3, "efcaa87667e84d93d8d511636df8a194a6f6bd4791936ae1250259d0cf9271ae2bc3a9547ec9f324dfe57685819361928616727f6d5900a3db8a9be5f7ea0cb5f58f1b0a7488000ebfb734edba39439006d33134b5cb08558ffe54ab6bbf9e6207039712392d7b606537db381982b681ab791db22ca537a8a8184c555deb22a4458b8fb63aeb6e44185a3fadf29467cbe858ed6aa8a3988e34b5d30b67d5482116ca6528b79ca3680713c19aa9a14ff2cd6667f391991e23f8953905b716eded4060b0818bf6dae08203411492b27d1717"}]}, 0xec}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 00:55:36 executing program 3: r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 5: gettid() migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) [ 353.236079] xt_hashlimit: overflow, try lower: 0/0 00:55:36 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4007f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x893, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:36 executing program 5: gettid() migrate_pages(0x0, 0x4, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:36 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r0, 0x57f}}, 0x10) 00:55:36 executing program 3: r0 = gettid() migrate_pages(r0, 0x4, 0x0, 0x0) 00:55:36 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0x14, 0x0, [0x80000001, 0x2, 0x9, 0x3f, 0x3, 0x6, 0x0, 0x7, 0x1000, 0x3, 0x6, 0x8, 0x600, 0x8, 0x4, 0x8]}, {0x34, 0x0, [0xd290, 0x9, 0x2, 0x1ff, 0x8, 0x400, 0x3, 0x7, 0x80000001, 0x1, 0xa0c, 0x0, 0x5, 0xc76, 0x0, 0xa781]}, {0x20, 0x0, [0x10001, 0x9, 0x5, 0x0, 0xc0bd, 0x32d1, 0xbb, 0x7, 0xff, 0xffff, 0x0, 0x8000, 0x4, 0x7fff, 0x0, 0x7]}, {0x10, 0x0, [0xffff, 0x770, 0x5, 0x20, 0x3, 0x3f, 0x0, 0x101, 0x9, 0x1, 0x80000001, 0x3eae, 0x9, 0x6, 0x5, 0x1]}, {0x1, 0x0, [0x2, 0x1, 0x5, 0x3, 0x800, 0xfff, 0x6, 0x7fffffff, 0x81, 0x3, 0x2, 0x63c5, 0xfffffff8, 0x9, 0x7, 0xffff]}, {0x4, 0x0, [0x80, 0x100, 0x3, 0x0, 0x8c, 0x800, 0x7, 0x1, 0x5, 0x8, 0xff, 0x7, 0xff, 0x9, 0xcb4e000, 0x6]}, {0x1c, 0x0, [0x6, 0xffff, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x81, 0xf1, 0x0, 0x7, 0x8c, 0xfffffffe, 0x43, 0xfffffff8, 0x1f, 0xe67]}, {0x22, 0x0, [0x8000, 0xff, 0x2b10, 0x9, 0x4, 0xffffffff, 0x1ff, 0x0, 0x9, 0x7, 0xa4, 0x100, 0x1f, 0x52, 0x7f, 0x1]}, {0x21, 0x0, [0x7fffffff, 0x0, 0x10001, 0x9, 0x4, 0x9, 0x5, 0x0, 0x1, 0x0, 0x7, 0x6, 0x400, 0x10001, 0xb27, 0x4]}], r1, 0x1, 0x1, 0x288}}, 0x20) 00:55:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0xa, 0xb05, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0x0, 0x4]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:36 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r0, 0x57f}}, 0x10) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x0, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:37 executing program 3: r0 = gettid() migrate_pages(r0, 0x4, 0x0, 0x0) 00:55:37 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x7ff) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) r2 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f00000000c0)=""/188) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x7, 0x0, 0x8, 0x9, 0x5, 0xffffffffffffffff}) 00:55:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0x800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r3, 0x5}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000380)={0x113, 0x10, [], 0x1, &(0x7f0000000340)=[0x0, 0x0]}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r4, r1}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) 00:55:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x0, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:37 executing program 3: r0 = gettid() migrate_pages(r0, 0x4, 0x0, 0x0) 00:55:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30f, 0x2, 0x1, 0x8, 0x1, @remote}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000080)=""/144) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x0, &(0x7f0000000100)=0x638, &(0x7f0000000140)=0x45b95b21) 00:55:37 executing program 3: r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) 00:55:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:37 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8000}, 0x4) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0xf13, 0x1, 0x2, {0x5, @sdr={0x41414770, 0x7fff}}, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xcc70]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:37 executing program 3: r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)) 00:55:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3]}, {0x5, 0x0, [0x0, 0x0, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x90}}, 0x20) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x400, 0x100, "b1c204430bb3746d0d39eb5844e28f62755c12d2a69613839728d475105ee9d4", 0x9, 0x4, 0x81, 0x9, 0x20}) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x4, 0x0, 0x0) 00:55:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:37 executing program 3: r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)) 00:55:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mlock2(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x250000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000080)={0xbe69, 0x401, 0x2, @remote, 'macvlan1\x00'}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x4, 0x0, 0x0) 00:55:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:37 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x10a98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4}, 0x400c040) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a2807b6a2c2532e9d54", 0x53}], 0x1}, 0xc180) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)="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", 0x257}], 0x1}, 0x8000) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)}, 0x80) r2 = accept(0xffffffffffffffff, &(0x7f0000000040)=@caif=@dgm, &(0x7f00000000c0)=0x80) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000100)=""/34, &(0x7f0000000140)=0x22) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30f, 0x2, 0x1, 0x8, 0x1, @remote}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000080)=""/144) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x4, 0x0, 0x0) 00:55:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) 00:55:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x38}}, 0x48d1) r1 = dup(r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000427bd7000fddbdf250f00000008000600", @ANYRES32=0x0, @ANYBLOB="000000000000000171b8d67625d51377e2cb55c782421d37e63366a0b6ffcaf01a2be19a896e0b15c6ed66ca709da54b7f22e2b9a7ad5ae298d67d68a4c9183babbaeaca14fb485dc4bc015f48"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) connect$phonet_pipe(r1, &(0x7f00000001c0)={0x23, 0x7f, 0x6, 0x1}, 0x10) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)) 00:55:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x37, 0x2]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:37 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x4b37, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x0, 0xd, 0x4, 0x0, 0xffbb, 0x0, 0x0}) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)) 00:55:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:37 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000040)=0x1e) 00:55:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:37 executing program 5: r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)) 00:55:37 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) 00:55:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3]}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:38 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x2, @sdr}) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x800) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000000)=0x6) 00:55:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) 00:55:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x20c084, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) r4 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x8000, 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000011c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000000900)={0x10, 0x3, {0x7, @usage=0x4, 0x0, 0x7, 0x100000000, 0x800, 0x0, 0x4, 0x26, @struct={0xfffffffe, 0x80000001}, 0x2, 0x5a2, [0x8, 0x1000000000000, 0x3, 0x85, 0xea, 0x57f7]}, {0x0, @usage=0x8, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x410, @usage=0x34, 0x401, 0x0, [0x4, 0x10000, 0xad, 0x3, 0x8]}, {0x7, @struct={0x1, 0x3}, r10, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xffff, 0x44, @struct={0x5}, 0xff, 0x1ff, [0xaf, 0x21f, 0x0, 0x0, 0xf564, 0xffff]}, {0xbb3a, 0x8001}}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f00000000c0)={{}, {@val={r10}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000140)={{r2}, r5, 0x14, @inherit={0x78, &(0x7f00000000c0)={0x1, 0x6, 0x80, 0x5, {0x1c, 0x2776, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0xfffffffffffffffe, 0x0, 0x20]}}, @devid=r10}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)={{r1}, {@val={r10}, @max='max'}}) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x581000, 0x0) ioctl$SNDCTL_DSP_POST(r11, 0x5008, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x20c084, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) r4 = inotify_init() ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x8000, 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f00000011c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000000900)={0x10, 0x3, {0x7, @usage=0x4, 0x0, 0x7, 0x100000000, 0x800, 0x0, 0x4, 0x26, @struct={0xfffffffe, 0x80000001}, 0x2, 0x5a2, [0x8, 0x1000000000000, 0x3, 0x85, 0xea, 0x57f7]}, {0x0, @usage=0x8, 0x0, 0x5, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x410, @usage=0x34, 0x401, 0x0, [0x4, 0x10000, 0xad, 0x3, 0x8]}, {0x7, @struct={0x1, 0x3}, r10, 0xfffffffffffffffe, 0x0, 0x8, 0x7, 0xffff, 0x44, @struct={0x5}, 0xff, 0x1ff, [0xaf, 0x21f, 0x0, 0x0, 0xf564, 0xffff]}, {0xbb3a, 0x8001}}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f00000000c0)={{}, {@val={r10}, @actul_num={@void, 0x7}}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000140)={{r2}, r5, 0x14, @inherit={0x78, &(0x7f00000000c0)={0x1, 0x6, 0x80, 0x5, {0x1c, 0x2776, 0x5, 0x3c, 0x7ff}, [0x7, 0x6, 0x4, 0xfffffffffffffffe, 0x0, 0x20]}}, @devid=r10}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)={{r1}, {@val={r10}, @max='max'}}) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x581000, 0x0) ioctl$SNDCTL_DSP_POST(r11, 0x5008, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:55:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) 00:55:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x203, 0x0, 0x0, 0x4, 0x0}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) 00:55:38 executing program 3 (fault-call:1 fault-nth:0): r0 = gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) 00:55:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@newtclass={0x2c, 0x28, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x3}, {0xd, 0x5}, {0x4, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x472541, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000001400)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r2, @ANYBLOB="270000000000000000000100000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000001480)={0x3, &(0x7f0000000180)=[0x3, 0x6, 0x1000]}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080028bd7000fedbdf25020000000800320003000000050029000000000005003500010000000600280001000000080039000000000006b61b000200000005002900010000000a0009007a718695f245095678c7ad2700000800390009000000"], 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x0, 0x0, 0xfffffffe, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="01090802c800b32463a47ea22a0c474df955c162a9cfae757200bfc8545d6c3d13d0e77e775d6493aa999562e589032e667a5d7a13d169dbdf4e23562acc12886d78fcd99d8e1710386c3e25124870a9e4537316a3c12be37cc9c1802662eb7c11ddc3d4dc0bd2b7d1e2c31818fd60ad2e7a2fe3bc80ee26f10f6962e77c756afff78403c698a76e3d7c46576b0b9fcc1c7b1c1fa2114cb9447f1b15ab24a1fa2fd80a259264c4206986c8d49be7f408f5ba08aa221542bc72acd5d6a2d88dd0760de7edcd2caa59da81b3209731f3c396669496404784c20ae5bcb766025cf6"], 0x6) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) 00:55:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000100)={0xfffffffa, 0x1, 0x2, 0x5, &(0x7f00000000c0)=[{}]}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, {0x21, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1]}], r1, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x3}}, 0x10) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x4, 0x0, 0x4, {0x1, 0x8, 0x8, 0x5}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f00000003c0)) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) signalfd4(r2, &(0x7f0000000180)={[0x9d19]}, 0x8, 0x80000) 00:55:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x203, 0x0, 0x0, 0x4, 0x0}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) 00:55:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) [ 354.971203] xt_hashlimit: overflow, try lower: 0/0 00:55:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x203, 0x0, 0x0, 0x4, 0x0}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) [ 355.009655] xt_hashlimit: overflow, try lower: 0/0 00:55:38 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000e1419012dbd7000fcdbdf2508003c000100000008003c000000000008000300020000000800030001000000080003000300000008003c000500000008003c000000000008000300020000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) r0 = gettid() r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x9e4, 0x4, 0x401, 0xfffffffa, 0x0}, &(0x7f0000000280)=0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000380)=0x1e, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x100}}, 0x65e5, 0x6, 0x6, 0xdad7, 0x4b, 0x5641, 0x6}, 0x9c) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f0000000200)={0x4, 0x1}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000180)={0x518e, 0x1, 0x251, {0x80, 0x7}, 0x2, 0x8}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/vmstat\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000400)={0x6, 0x0, 0x3f, 0x8, 0x1}, 0xc) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) 00:55:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$CHAR_RAW_ROTATIONAL(r3, 0x127e, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) 00:55:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x57f}}, 0x10) 00:55:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) 00:55:38 executing program 5: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)=0x1) 00:55:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) 00:55:38 executing program 5: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)=0x1) 00:55:38 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:38 executing program 3: r0 = gettid() gettid() migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000400)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000003c0)=0x1c) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'wg1\x00', {0x1}, 0x1}) 00:55:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x18008, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:39 executing program 5: ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)=0x1) 00:55:39 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{}, {}], r1, 0x1, 0x1, 0x90}}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) [ 355.445985] xt_hashlimit: overflow, try lower: 0/0 00:55:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) [ 355.486100] xt_hashlimit: overflow, try lower: 0/0 00:55:39 executing program 3: r0 = gettid() r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="ff0167a20e18a716c7b400000500"], &(0x7f0000000040)=0x6) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) 00:55:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f0000000140)=[@dead_binder_done, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x9, 0x1, 0x3d}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @clear_death], 0x62, 0x0, &(0x7f0000000340)="ecdfb556abbca1db199d936af91a71f6c6bffadd35562da263e240164c63ab8fdbe23463a7c5febbb1cd317c9567702738f2e5fba18ea2ceaf68831f885742e8e0f4448695e1f0eb4d0734adf8c88e9b79718b3ed7c664c71d0665b4166783afe72a"}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:39 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) 00:55:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000080)={@any, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7fffffff, 0x80000001, 0x2}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f00000000c0)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}], r5, 0x1, 0x1, 0xfffffffffffffff5}}, 0x20) 00:55:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000001c0)={0x7fffffff, 0x1, 0x3ff, 0x8, 0x69}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$audion(&(0x7f0000001580)='/dev/audio#\x00', 0x0, 0x521900) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040)={0x81, "28f44c"}, 0x6) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r3 = gettid() write$6lowpan_control(r2, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = accept(r1, &(0x7f0000000080)=@vsock, &(0x7f0000000100)=0x80) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000180)) migrate_pages(r3, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) [ 355.673299] xt_hashlimit: overflow, try lower: 0/0 00:55:39 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) 00:55:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) [ 355.746774] xt_hashlimit: overflow, try lower: 0/0 00:55:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:39 executing program 3: r0 = gettid() ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@fixed={[], 0x12}, 0x4}) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1a8, 0x0, 0x200, 0x0, 0x0, 0x290, 0x2e8, 0x2e8, 0x290, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x148, 0x1a8, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x100000, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}, {{@ipv6={@local, @ipv4, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77b322e5ba1c66646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',access=any,nodevmap,msize=0x000000002efade9f,fowner=', @ANYRESDEC=r3, @ANYBLOB=',appraise_type=imasig,fsuuid=a9n84b35-4bd1-87dc-ea1f-5f907567,fsname=\'/,dont_hash,uid=', @ANYRESDEC=0xee01, @ANYBLOB=',fsmagic=0x0000000000000000,euid>', @ANYRESDEC=0xee01, @ANYBLOB="2c66756e633d504f4c4943595f43ebbff9602c6d6561737572652c00"]) 00:55:39 executing program 5: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) 00:55:39 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x57f}}, 0x10) 00:55:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0) 00:55:39 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0xc8201) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x1) 00:55:39 executing program 3: r0 = gettid() r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) migrate_pages(r0, 0x4, 0x0, &(0x7f0000000140)=0x45b95b21) [ 355.920474] xt_hashlimit: overflow, try lower: 0/0 [ 355.940382] xt_hashlimit: overflow, try lower: 0/0 [ 571.322759] INFO: task syz-executor.2:26132 blocked for more than 140 seconds. [ 571.331114] Not tainted 4.14.197-syzkaller #0 [ 571.336794] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.344900] syz-executor.2 D28912 26132 6370 0x00000004 [ 571.350538] Call Trace: [ 571.353230] __schedule+0x88b/0x1de0 [ 571.356955] ? trace_hardirqs_on+0x10/0x10 [ 571.361181] ? io_schedule_timeout+0x140/0x140 [ 571.365842] ? trace_hardirqs_on+0x10/0x10 [ 571.370350] ? lock_downgrade+0x740/0x740 [ 571.374610] schedule+0x8d/0x1b0 [ 571.377974] schedule_timeout+0x80a/0xe90 [ 571.382192] ? usleep_range+0x130/0x130 [ 571.386175] ? ucma_close+0x20b/0x340 [ 571.389958] ? wait_for_common+0x26a/0x430 [ 571.394309] ? lock_acquire+0x170/0x3f0 [ 571.398281] ? lock_downgrade+0x740/0x740 [ 571.402949] ? _raw_spin_unlock_irq+0x24/0x80 [ 571.407457] wait_for_common+0x272/0x430 [ 571.411504] ? out_of_line_wait_on_atomic_t+0x1a0/0x1a0 [ 571.416964] ? __mutex_unlock_slowpath+0x75/0x770 [ 571.422246] ? wake_up_q+0xd0/0xd0 [ 571.425805] ? locks_remove_file+0x2cd/0x420 [ 571.430195] ucma_close+0xfc/0x340 [ 571.433838] ? ima_file_free+0x4f/0x330 [ 571.437808] ? ucma_query_addr+0x320/0x320 [ 571.442122] __fput+0x25f/0x7a0 [ 571.445581] task_work_run+0x11f/0x190 [ 571.449468] exit_to_usermode_loop+0x1ad/0x200 [ 571.454180] do_syscall_64+0x4a3/0x640 [ 571.458106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.463894] RIP: 0033:0x416f01 [ 571.467118] RSP: 002b:00007ffe0ac2bfb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 571.474946] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000416f01 [ 571.482394] RDX: 0000000000000000 RSI: 000000000000086e RDI: 0000000000000007 [ 571.489658] RBP: 0000000000000001 R08: 00000000216a486e R09: 00000000216a4872 [ 571.497019] R10: 00007ffe0ac2c0a0 R11: 0000000000000293 R12: 0000000001191118 [ 571.504498] R13: 0000000000056df4 R14: ffffffffffffffff R15: 000000000118cf4c [ 571.512440] [ 571.512440] Showing all locks held in the system: [ 571.518847] 1 lock held by khungtaskd/1068: [ 571.523477] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 571.532608] 1 lock held by in:imklog/5952: [ 571.536857] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0x1fb/0x2b0 [ 571.545390] [ 571.547010] ============================================= [ 571.547010] [ 571.554088] NMI backtrace for cpu 0 [ 571.557724] CPU: 0 PID: 1068 Comm: khungtaskd Not tainted 4.14.197-syzkaller #0 [ 571.565157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.574613] Call Trace: [ 571.577205] dump_stack+0x1b2/0x283 [ 571.580824] nmi_cpu_backtrace.cold+0x57/0x93 [ 571.585314] ? irq_force_complete_move.cold+0x7c/0x7c [ 571.590494] nmi_trigger_cpumask_backtrace+0x13a/0x17f [ 571.595749] watchdog+0x5b9/0xb40 [ 571.599182] ? hungtask_pm_notify+0x50/0x50 [ 571.603501] kthread+0x30d/0x420 [ 571.606848] ? kthread_create_on_node+0xd0/0xd0 [ 571.611508] ret_from_fork+0x24/0x30 [ 571.615355] Sending NMI from CPU 0 to CPUs 1: [ 571.620394] NMI backtrace for cpu 1 [ 571.620399] CPU: 1 PID: 3653 Comm: systemd-journal Not tainted 4.14.197-syzkaller #0 [ 571.620403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.620406] task: ffff888093cb2380 task.stack: ffff888093cb8000 [ 571.620409] RIP: 0010:preempt_count_add+0x3f/0x170 [ 571.620412] RSP: 0018:ffff888093cbf760 EFLAGS: 00000246 [ 571.620418] RAX: 0000000000000003 RBX: ffffffff8a5a8c00 RCX: 0000000000000000 [ 571.620421] RDX: 0000000000000004 RSI: ffff888093cbf728 RDI: 0000000000000001 [ 571.620425] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 571.620429] R10: ffff888093cbff00 R11: 0000000000000001 R12: ffff888093cbf8c0 [ 571.620439] R13: ffff888093cbf870 R14: ffff8880aa50c380 R15: ffff888093cbf838 [ 571.620443] FS: 00007f8ba89528c0(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 571.620446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 571.620450] CR2: 00007f8ba5fa1000 CR3: 0000000094f55000 CR4: 00000000001406e0 [ 571.620453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 571.620457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 571.620459] Call Trace: [ 571.620462] unwind_next_frame+0xc2/0x17d0 [ 571.620464] ? do_sys_open+0x296/0x410 [ 571.620467] ? deref_stack_reg+0x1a0/0x1a0 [ 571.620469] ? do_syscall_64+0x1d5/0x640 [ 571.620472] __save_stack_trace+0x90/0x160 [ 571.620475] ? kernel_text_address+0xbd/0xf0 [ 571.620477] ? do_syscall_64+0x1d5/0x640 [ 571.620480] kasan_kmalloc+0xeb/0x160 [ 571.620482] ? kasan_kmalloc+0xeb/0x160 [ 571.620485] ? kmem_cache_alloc+0x111/0x3c0 [ 571.620488] ? selinux_file_alloc_security+0xaf/0x190 [ 571.620491] ? security_file_alloc+0x66/0xa0 [ 571.620493] ? get_empty_filp+0x15c/0x3e0 [ 571.620496] ? path_openat+0x84/0x2970 [ 571.620498] ? do_filp_open+0x179/0x3c0 [ 571.620501] ? do_sys_open+0x296/0x410 [ 571.620503] ? do_syscall_64+0x1d5/0x640 [ 571.620506] ? kasan_kmalloc+0xeb/0x160 [ 571.620509] ? kmem_cache_alloc+0x124/0x3c0 [ 571.620511] ? get_empty_filp+0x86/0x3e0 [ 571.620513] ? path_openat+0x84/0x2970 [ 571.620516] ? do_filp_open+0x179/0x3c0 [ 571.620518] ? do_sys_open+0x296/0x410 [ 571.620521] ? do_syscall_64+0x1d5/0x640 [ 571.620524] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.620527] ? trace_hardirqs_on+0x10/0x10 [ 571.620529] ? unwind_next_frame+0xe54/0x17d0 [ 571.620532] ? trace_hardirqs_on+0x10/0x10 [ 571.620534] ? is_bpf_text_address+0x91/0x150 [ 571.620537] ? lock_acquire+0x170/0x3f0 [ 571.620539] ? lock_downgrade+0x740/0x740 [ 571.620542] ? fs_reclaim_release+0xd0/0x110 [ 571.620544] ? kmem_cache_alloc+0x2c8/0x3c0 [ 571.620547] kmem_cache_alloc+0x111/0x3c0 [ 571.620550] selinux_file_alloc_security+0xaf/0x190 [ 571.620552] security_file_alloc+0x66/0xa0 [ 571.620555] ? selinux_is_enabled+0x5/0x50 [ 571.620558] get_empty_filp+0x15c/0x3e0 [ 571.620560] path_openat+0x84/0x2970 [ 571.620563] ? seccomp_run_filters+0x151/0x540 [ 571.620565] ? path_lookupat+0x780/0x780 [ 571.620568] ? trace_hardirqs_on+0x10/0x10 [ 571.620570] do_filp_open+0x179/0x3c0 [ 571.620572] ? may_open_dev+0xe0/0xe0 [ 571.620575] ? __alloc_fd+0x1be/0x490 [ 571.620577] ? lock_downgrade+0x740/0x740 [ 571.620580] ? do_raw_spin_unlock+0x164/0x220 [ 571.620583] ? _raw_spin_unlock+0x29/0x40 [ 571.620585] ? __alloc_fd+0x1be/0x490 [ 571.620587] do_sys_open+0x296/0x410 [ 571.620590] ? filp_open+0x60/0x60 [ 571.620592] ? do_syscall_64+0x4c/0x640 [ 571.620595] ? do_sys_open+0x410/0x410 [ 571.620597] do_syscall_64+0x1d5/0x640 [ 571.620600] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 571.620603] RIP: 0033:0x7f8ba7ee2840 [ 571.620605] RSP: 002b:00007ffdfb526dc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 571.620612] RAX: ffffffffffffffda RBX: 00007ffdfb5270d0 RCX: 00007f8ba7ee2840 [ 571.620615] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 0000555ef077dfc0 [ 571.620619] RBP: 000000000000000d R08: 00000000000001c0 R09: 00000000ffffffff [ 571.620623] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 571.620626] R13: 0000555ef0773060 R14: 00007ffdfb527090 R15: 0000555ef077db40 [ 571.620628] Code: 8a 48 89 da 48 c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 11 01 00 00 8b 0d 95 f5 1b 09 85 c9 75 07 <65> 8b 05 5a 57 c3 7e 48 b8 00 00 00 00 00 fc ff df 48 89 da 83 [ 571.621420] Kernel panic - not syncing: hung_task: blocked tasks [ 572.037814] CPU: 0 PID: 1068 Comm: khungtaskd Not tainted 4.14.197-syzkaller #0 [ 572.045950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.055302] Call Trace: [ 572.057897] dump_stack+0x1b2/0x283 [ 572.061514] panic+0x1f9/0x42d [ 572.064705] ? add_taint.cold+0x16/0x16 [ 572.068674] watchdog+0x5ca/0xb40 [ 572.072113] ? hungtask_pm_notify+0x50/0x50 [ 572.076442] kthread+0x30d/0x420 [ 572.079806] ? kthread_create_on_node+0xd0/0xd0 [ 572.084477] ret_from_fork+0x24/0x30 [ 572.089522] Kernel Offset: disabled [ 572.093157] Rebooting in 86400 seconds..