000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="030000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) 09:14:47 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:47 executing program 1: r0 = socket(0x0, 0x0, 0x0) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@remote, @null, @remote, @null, @netrom, @rose]}, &(0x7f0000000040)=0x40, 0x0) 09:14:47 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) 09:14:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010100000000000900000000", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653000"]) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:47 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) 09:14:47 executing program 1: r0 = socket(0x0, 0x0, 0x0) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@remote, @null, @remote, @null, @netrom, @rose]}, &(0x7f0000000040)=0x40, 0x0) 09:14:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:47 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="03000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:47 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="030000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 1: r0 = socket(0x0, 0x0, 0x0) accept4$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@remote, @null, @remote, @null, @netrom, @rose]}, &(0x7f0000000040)=0x40, 0x0) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5a, 0x80) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x4, 0xffff, {}, {}, 0x6, 0x3}) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x0, 0xfffffffe, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x2}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @phonet={0x23, 0x0, 0xfa, 0x20}, @llc={0x1a, 0x307, 0x81, 0x9, 0xfe, 0x52, @multicast}, @vsock={0x28, 0x0, 0x0, @my=0x0}, 0x9, 0x0, 0x0, 0x0, 0xd0fa, &(0x7f00000000c0)='macvtap0\x00', 0xdd, 0x8, 0x1f}) 09:14:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 1: socket(0x18, 0x0, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@remote, @null, @remote, @null, @netrom, @rose]}, &(0x7f0000000040)=0x40, 0x0) 09:14:48 executing program 1: socket(0x18, 0x0, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@remote, @null, @remote, @null, @netrom, @rose]}, &(0x7f0000000040)=0x40, 0x0) 09:14:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="03000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="03000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 1: socket(0x18, 0x0, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @remote, 0x0, [@remote, @null, @remote, @null, @netrom, @rose]}, &(0x7f0000000040)=0x40, 0x0) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="03000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="03000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:48 executing program 1: r0 = socket(0x18, 0x0, 0x0) accept4$rose(r0, 0x0, &(0x7f0000000040), 0x0) 09:14:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 1: r0 = socket(0x18, 0x0, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) 09:14:48 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="03000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) geteuid() ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) geteuid() ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="03000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) 09:14:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) 09:14:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x2, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:48 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) 09:14:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="03000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 09:14:48 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) 09:14:48 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:48 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 09:14:48 executing program 1: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) 09:14:48 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) 09:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 09:14:48 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) 09:14:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:49 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) 09:14:49 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) 09:14:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x2, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) 09:14:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) 09:14:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x3f, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 09:14:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x1, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 09:14:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0xfff, 0xc0000, 0xda, 0x800}}) 09:14:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0xc0000, 0xda, 0x800}}) 09:14:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0xda, 0x800}}) 09:14:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}) 09:14:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:50 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:14:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) 09:14:50 executing program 4: shmget(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x2) 09:14:50 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = socket(0x18, 0xa, 0xffff) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}}) 09:14:50 executing program 2: socket(0x1d, 0x1, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 09:14:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:14:50 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:14:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:50 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x8000, 0x420500) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x10001, 0x90000) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x8480) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000140)=0x145e) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) read$usbfs(r2, &(0x7f0000000180)=""/112, 0x70) 09:14:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:50 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (fail_nth: 1) 09:14:50 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) r0 = socket(0x2, 0x2, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x424, 0x3f4, 0x100, 0x70bd2b, 0x25dfdbfd, {0x3, 0x2, 0x11, [0x7, 0x100, 0x10000, 0x7, 0x3, 0x0, 0x504, 0x6, 0xfffffffd, 0x6, 0xaf, 0x8920, 0x4, 0x4, 0x3ff, 0xb2, 0x5, 0x6, 0x3, 0x0, 0x2, 0x7f, 0xa6c2, 0x9, 0x0, 0x6, 0xffffff01, 0x7ff, 0x9, 0x3fc, 0x9, 0x101, 0xffffffe1, 0x0, 0x20, 0x4, 0x1, 0x1e7, 0x2, 0x4, 0x9, 0x9, 0x81, 0x7, 0xfff, 0x5, 0xa402, 0x3, 0x0, 0x6, 0x81, 0x4, 0x4, 0x229, 0x400, 0x9, 0x9, 0x2, 0x40, 0x7, 0x800, 0x5, 0xffff, 0x4], [0x6, 0x2, 0x8131, 0xf9, 0x401, 0xcf83, 0x8, 0x4, 0x0, 0x2, 0x5dd2, 0x20, 0x3ff, 0x2, 0x0, 0x8000, 0xfffffffd, 0x4, 0x6, 0x1, 0x1ff, 0xeea, 0xfffffff7, 0x800, 0xfffffffc, 0x9, 0x7, 0x7, 0x26, 0x8001, 0x9, 0xea8, 0x0, 0x3f, 0xffffff80, 0x20, 0x3, 0x400, 0x8, 0x6, 0x4fe, 0x4, 0x10000, 0x917, 0x0, 0x120, 0x3ff, 0x2, 0xa783, 0x1ff, 0x400, 0x5, 0xffffffff, 0x9, 0xffff0001, 0x224, 0x8, 0x10001, 0x2, 0x8, 0x6, 0xfffffffa, 0x1, 0x6], [0x4, 0x1, 0x3, 0xbb8, 0x80, 0x4, 0x8, 0x9, 0x2000, 0x6, 0xffffffff, 0x80, 0xffffffff, 0x7ff, 0x1000, 0x13, 0x6, 0x3f, 0x401, 0x6d66f0b3, 0x1, 0xffffffff, 0x3, 0x0, 0x1, 0x9e, 0x0, 0x6, 0x649, 0xf31, 0x0, 0x8001, 0x0, 0x0, 0xfff, 0x7, 0x7, 0x1ff, 0x9, 0x40, 0x7, 0x5, 0x2, 0x418, 0xffffffff, 0x80, 0x0, 0x9, 0x80000000, 0x3f, 0x6, 0x9, 0x20, 0x4, 0x20, 0x1000, 0x8, 0x1000, 0x669, 0x3, 0xfffffff9, 0x7ff, 0x10000, 0x100000], [0x1, 0xfffffff7, 0x5341, 0x8000, 0xffffffe0, 0x5, 0x7, 0x59, 0x711, 0xa3, 0x7cd, 0x8, 0x3d, 0x85eb, 0x588, 0x6, 0x94, 0xbcc3000, 0x1, 0x0, 0x8000, 0x1d5b, 0xfff, 0xfffffffd, 0x1, 0xffff, 0x20, 0x5, 0x6, 0x2, 0x2, 0x80000001, 0x2, 0x7, 0x81, 0x1, 0x81, 0x8, 0x7, 0x401, 0x0, 0x1ff, 0x4, 0xffff, 0x89, 0x39, 0x3ff, 0x9, 0xff, 0x100, 0xde4f, 0x6, 0x9, 0x4, 0x3, 0x81, 0xffff, 0x7fffffff, 0x4, 0xd659, 0x20, 0x5, 0x1, 0x9], 0x2, ['\x00', '\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x200008c0) 09:14:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 4: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) (async) r0 = socket(0x2, 0x2, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x424, 0x3f4, 0x100, 0x70bd2b, 0x25dfdbfd, {0x3, 0x2, 0x11, [0x7, 0x100, 0x10000, 0x7, 0x3, 0x0, 0x504, 0x6, 0xfffffffd, 0x6, 0xaf, 0x8920, 0x4, 0x4, 0x3ff, 0xb2, 0x5, 0x6, 0x3, 0x0, 0x2, 0x7f, 0xa6c2, 0x9, 0x0, 0x6, 0xffffff01, 0x7ff, 0x9, 0x3fc, 0x9, 0x101, 0xffffffe1, 0x0, 0x20, 0x4, 0x1, 0x1e7, 0x2, 0x4, 0x9, 0x9, 0x81, 0x7, 0xfff, 0x5, 0xa402, 0x3, 0x0, 0x6, 0x81, 0x4, 0x4, 0x229, 0x400, 0x9, 0x9, 0x2, 0x40, 0x7, 0x800, 0x5, 0xffff, 0x4], [0x6, 0x2, 0x8131, 0xf9, 0x401, 0xcf83, 0x8, 0x4, 0x0, 0x2, 0x5dd2, 0x20, 0x3ff, 0x2, 0x0, 0x8000, 0xfffffffd, 0x4, 0x6, 0x1, 0x1ff, 0xeea, 0xfffffff7, 0x800, 0xfffffffc, 0x9, 0x7, 0x7, 0x26, 0x8001, 0x9, 0xea8, 0x0, 0x3f, 0xffffff80, 0x20, 0x3, 0x400, 0x8, 0x6, 0x4fe, 0x4, 0x10000, 0x917, 0x0, 0x120, 0x3ff, 0x2, 0xa783, 0x1ff, 0x400, 0x5, 0xffffffff, 0x9, 0xffff0001, 0x224, 0x8, 0x10001, 0x2, 0x8, 0x6, 0xfffffffa, 0x1, 0x6], [0x4, 0x1, 0x3, 0xbb8, 0x80, 0x4, 0x8, 0x9, 0x2000, 0x6, 0xffffffff, 0x80, 0xffffffff, 0x7ff, 0x1000, 0x13, 0x6, 0x3f, 0x401, 0x6d66f0b3, 0x1, 0xffffffff, 0x3, 0x0, 0x1, 0x9e, 0x0, 0x6, 0x649, 0xf31, 0x0, 0x8001, 0x0, 0x0, 0xfff, 0x7, 0x7, 0x1ff, 0x9, 0x40, 0x7, 0x5, 0x2, 0x418, 0xffffffff, 0x80, 0x0, 0x9, 0x80000000, 0x3f, 0x6, 0x9, 0x20, 0x4, 0x20, 0x1000, 0x8, 0x1000, 0x669, 0x3, 0xfffffff9, 0x7ff, 0x10000, 0x100000], [0x1, 0xfffffff7, 0x5341, 0x8000, 0xffffffe0, 0x5, 0x7, 0x59, 0x711, 0xa3, 0x7cd, 0x8, 0x3d, 0x85eb, 0x588, 0x6, 0x94, 0xbcc3000, 0x1, 0x0, 0x8000, 0x1d5b, 0xfff, 0xfffffffd, 0x1, 0xffff, 0x20, 0x5, 0x6, 0x2, 0x2, 0x80000001, 0x2, 0x7, 0x81, 0x1, 0x81, 0x8, 0x7, 0x401, 0x0, 0x1ff, 0x4, 0xffff, 0x89, 0x39, 0x3ff, 0x9, 0xff, 0x100, 0xde4f, 0x6, 0x9, 0x4, 0x3, 0x81, 0xffff, 0x7fffffff, 0x4, 0xd659, 0x20, 0x5, 0x1, 0x9], 0x2, ['\x00', '\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x200008c0) 09:14:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 1: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 4: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) (async) r0 = socket(0x2, 0x2, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0}}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x424, 0x3f4, 0x100, 0x70bd2b, 0x25dfdbfd, {0x3, 0x2, 0x11, [0x7, 0x100, 0x10000, 0x7, 0x3, 0x0, 0x504, 0x6, 0xfffffffd, 0x6, 0xaf, 0x8920, 0x4, 0x4, 0x3ff, 0xb2, 0x5, 0x6, 0x3, 0x0, 0x2, 0x7f, 0xa6c2, 0x9, 0x0, 0x6, 0xffffff01, 0x7ff, 0x9, 0x3fc, 0x9, 0x101, 0xffffffe1, 0x0, 0x20, 0x4, 0x1, 0x1e7, 0x2, 0x4, 0x9, 0x9, 0x81, 0x7, 0xfff, 0x5, 0xa402, 0x3, 0x0, 0x6, 0x81, 0x4, 0x4, 0x229, 0x400, 0x9, 0x9, 0x2, 0x40, 0x7, 0x800, 0x5, 0xffff, 0x4], [0x6, 0x2, 0x8131, 0xf9, 0x401, 0xcf83, 0x8, 0x4, 0x0, 0x2, 0x5dd2, 0x20, 0x3ff, 0x2, 0x0, 0x8000, 0xfffffffd, 0x4, 0x6, 0x1, 0x1ff, 0xeea, 0xfffffff7, 0x800, 0xfffffffc, 0x9, 0x7, 0x7, 0x26, 0x8001, 0x9, 0xea8, 0x0, 0x3f, 0xffffff80, 0x20, 0x3, 0x400, 0x8, 0x6, 0x4fe, 0x4, 0x10000, 0x917, 0x0, 0x120, 0x3ff, 0x2, 0xa783, 0x1ff, 0x400, 0x5, 0xffffffff, 0x9, 0xffff0001, 0x224, 0x8, 0x10001, 0x2, 0x8, 0x6, 0xfffffffa, 0x1, 0x6], [0x4, 0x1, 0x3, 0xbb8, 0x80, 0x4, 0x8, 0x9, 0x2000, 0x6, 0xffffffff, 0x80, 0xffffffff, 0x7ff, 0x1000, 0x13, 0x6, 0x3f, 0x401, 0x6d66f0b3, 0x1, 0xffffffff, 0x3, 0x0, 0x1, 0x9e, 0x0, 0x6, 0x649, 0xf31, 0x0, 0x8001, 0x0, 0x0, 0xfff, 0x7, 0x7, 0x1ff, 0x9, 0x40, 0x7, 0x5, 0x2, 0x418, 0xffffffff, 0x80, 0x0, 0x9, 0x80000000, 0x3f, 0x6, 0x9, 0x20, 0x4, 0x20, 0x1000, 0x8, 0x1000, 0x669, 0x3, 0xfffffff9, 0x7ff, 0x10000, 0x100000], [0x1, 0xfffffff7, 0x5341, 0x8000, 0xffffffe0, 0x5, 0x7, 0x59, 0x711, 0xa3, 0x7cd, 0x8, 0x3d, 0x85eb, 0x588, 0x6, 0x94, 0xbcc3000, 0x1, 0x0, 0x8000, 0x1d5b, 0xfff, 0xfffffffd, 0x1, 0xffff, 0x20, 0x5, 0x6, 0x2, 0x2, 0x80000001, 0x2, 0x7, 0x81, 0x1, 0x81, 0x8, 0x7, 0x401, 0x0, 0x1ff, 0x4, 0xffff, 0x89, 0x39, 0x3ff, 0x9, 0xff, 0x100, 0xde4f, 0x6, 0x9, 0x4, 0x3, 0x81, 0xffff, 0x7fffffff, 0x4, 0xd659, 0x20, 0x5, 0x1, 0x9], 0x2, ['\x00', '\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x80}, 0x200008c0) 09:14:50 executing program 5: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) 09:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x9, 0xe9, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x50424752, 0x5, 0xc, [{0x3ff, 0x4a95}, {0x8, 0x1}, {0x401}, {0x7, 0x4}, {0x3, 0x8}, {0x499b, 0x4}, {0xfffff000, 0x5}, {0x2, 0x3}], 0xbf, 0x7, 0x8, 0x2, 0x5}}, 0x6e}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:50 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 1: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 4: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:50 executing program 5: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) 09:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x9, 0xe9, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x50424752, 0x5, 0xc, [{0x3ff, 0x4a95}, {0x8, 0x1}, {0x401}, {0x7, 0x4}, {0x3, 0x8}, {0x499b, 0x4}, {0xfffff000, 0x5}, {0x2, 0x3}], 0xbf, 0x7, 0x8, 0x2, 0x5}}, 0x6e}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:50 executing program 5: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) 09:14:50 executing program 1: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x9, 0xe9, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x50424752, 0x5, 0xc, [{0x3ff, 0x4a95}, {0x8, 0x1}, {0x401}, {0x7, 0x4}, {0x3, 0x8}, {0x499b, 0x4}, {0xfffff000, 0x5}, {0x2, 0x3}], 0xbf, 0x7, 0x8, 0x2, 0x5}}, 0x6e}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x100000000, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x9, 0xe9, 0x2, {0x2, @pix_mp={0x0, 0x0, 0x50424752, 0x5, 0xc, [{0x3ff, 0x4a95}, {0x8, 0x1}, {0x401}, {0x7, 0x4}, {0x3, 0x8}, {0x499b, 0x4}, {0xfffff000, 0x5}, {0x2, 0x3}], 0xbf, 0x7, 0x8, 0x2, 0x5}}, 0x6e}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:50 executing program 4: r0 = socket(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:50 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 1: r0 = socket(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0xfffffffc}}) 09:14:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0xfffffffc}}) 09:14:51 executing program 4: r0 = socket(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:51 executing program 1: r0 = socket(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0xfffffffc}}) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x64737664, 0x0, @stepwise={0x3f, 0x1e2, 0xfc27, 0x3, 0x100f5, 0x9}}) 09:14:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 4: r0 = socket(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x64737664, 0x0, @stepwise={0x3f, 0x1e2, 0xfc27, 0x3, 0x100f5, 0x9}}) 09:14:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 1: r0 = socket(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x64737664, 0x0, @stepwise={0x3f, 0x1e2, 0xfc27, 0x3, 0x100f5, 0x9}}) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x773, 0x0, 0x4000}) 09:14:51 executing program 4: socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:51 executing program 1: socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:51 executing program 4: socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x773, 0x0, 0x4000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x773, 0x0, 0x4000}) (async) 09:14:51 executing program 1: socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 4: socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x1}}) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x773, 0x0, 0x4000}) 09:14:51 executing program 1: socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x50424752, 0x0, @stepwise={0x21ed, 0x0, 0x9}}) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 09:14:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:51 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x50424752, 0x0, @stepwise={0x21ed, 0x0, 0x9}}) 09:14:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 09:14:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x50424752, 0x0, @stepwise={0x21ed, 0x0, 0x9}}) 09:14:51 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffc, 0x0, 0x0, @stepwise={0x0, 0x2, 0x0, 0x0, 0x2}}) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffc, 0x0, 0x0, @stepwise={0x0, 0x2, 0x0, 0x0, 0x2}}) 09:14:51 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffc, 0x0, 0x0, @stepwise={0x0, 0x2, 0x0, 0x0, 0x2}}) 09:14:51 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x1}}) 09:14:51 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xe1) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x100010, 0x0, 0x2}}) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00'}}) 09:14:51 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xe1) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x100010, 0x0, 0x2}}) 09:14:51 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:51 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0xe1) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x100010, 0x0, 0x2}}) 09:14:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 09:14:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x9, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)=@multiplanar_userptr={0x1000, 0x3, 0x4, 0x20, 0x20, {r2, r3/1000+10000}, {0x1, 0x2, 0x20, 0x1, 0x1c, 0x9, "acf1150f"}, 0x465c, 0x2, {&(0x7f00000001c0)=[{0x4af3, 0x9, {&(0x7f0000000140)}, 0x9}, {0x2, 0x3, {&(0x7f0000000180)}, 0x20}]}, 0x1f, 0x0, r4}) 09:14:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x9, 0x1}) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)=@multiplanar_userptr={0x1000, 0x3, 0x4, 0x20, 0x20, {r2, r3/1000+10000}, {0x1, 0x2, 0x20, 0x1, 0x1c, 0x9, "acf1150f"}, 0x465c, 0x2, {&(0x7f00000001c0)=[{0x4af3, 0x9, {&(0x7f0000000140)}, 0x9}, {0x2, 0x3, {&(0x7f0000000180)}, 0x20}]}, 0x1f, 0x0, r4}) 09:14:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={0x0, 0x9, 0x1}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000240)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)=@multiplanar_userptr={0x1000, 0x3, 0x4, 0x20, 0x20, {r2, r3/1000+10000}, {0x1, 0x2, 0x20, 0x1, 0x1c, 0x9, "acf1150f"}, 0x465c, 0x2, {&(0x7f00000001c0)=[{0x4af3, 0x9, {&(0x7f0000000140)}, 0x9}, {0x2, 0x3, {&(0x7f0000000180)}, 0x20}]}, 0x1f, 0x0, r4}) 09:14:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x7f57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x3, @sliced={0x80, [0x7f, 0x4, 0x1, 0xfff, 0x1, 0xff00, 0x5, 0xaf, 0x1000, 0x6, 0x0, 0x8000, 0x0, 0x1, 0x401, 0x7, 0xa38, 0x4, 0x200, 0x4, 0x3, 0x3, 0x7, 0x40, 0x400, 0x8, 0xbe86, 0x6, 0x8, 0xffff, 0x5, 0x2, 0x862, 0x8000, 0xfffa, 0xfff9, 0x9, 0x78, 0xa8e2, 0x0, 0x2, 0xfdb, 0x7, 0x3, 0xffff, 0x7, 0xffff, 0x80], 0x4}}) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x7f57, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x3, @sliced={0x80, [0x7f, 0x4, 0x1, 0xfff, 0x1, 0xff00, 0x5, 0xaf, 0x1000, 0x6, 0x0, 0x8000, 0x0, 0x1, 0x401, 0x7, 0xa38, 0x4, 0x200, 0x4, 0x3, 0x3, 0x7, 0x40, 0x400, 0x8, 0xbe86, 0x6, 0x8, 0xffff, 0x5, 0x2, 0x862, 0x8000, 0xfffa, 0xfff9, 0x9, 0x78, 0xa8e2, 0x0, 0x2, 0xfdb, 0x7, 0x3, 0xffff, 0x7, 0xffff, 0x80], 0x4}}) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x7f57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x3, @sliced={0x80, [0x7f, 0x4, 0x1, 0xfff, 0x1, 0xff00, 0x5, 0xaf, 0x1000, 0x6, 0x0, 0x8000, 0x0, 0x1, 0x401, 0x7, 0xa38, 0x4, 0x200, 0x4, 0x3, 0x3, 0x7, 0x40, 0x400, 0x8, 0xbe86, 0x6, 0x8, 0xffff, 0x5, 0x2, 0x862, 0x8000, 0xfffa, 0xfff9, 0x9, 0x78, 0xa8e2, 0x0, 0x2, 0xfdb, 0x7, 0x3, 0xffff, 0x7, 0xffff, 0x80], 0x4}}) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x7f, 0x81}) 09:14:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x7f, 0x81}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x7f, 0x81}) (async) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x7f, 0x81}) 09:14:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x7f, 0x81}) 09:14:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x4, 0x40000, 0x8, 0x4000}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) recvfrom$rose(r1, &(0x7f00000000c0)=""/92, 0x5c, 0x20000, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null]}, 0x40) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x4, 0x40000, 0x8, 0x4000}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) recvfrom$rose(r1, &(0x7f00000000c0)=""/92, 0x5c, 0x20000, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null]}, 0x40) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async, rerun: 32) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x4, 0x40000, 0x8, 0x4000}) (rerun: 32) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) recvfrom$rose(r1, &(0x7f00000000c0)=""/92, 0x5c, 0x20000, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @default, @null]}, 0x40) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(0x0, 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x204080000000001, 0x200000) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x1000000, "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", 0x8, 0x40, 0x2, 0x1, 0x3a, 0xcf, 0x4}, r3}}, 0x128) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x3, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x204080000000001, 0x200000) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x1000000, "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", 0x8, 0x40, 0x2, 0x1, 0x3a, 0xcf, 0x4}, r3}}, 0x128) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x3, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(0x0, 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x204080000000001, 0x200000) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x1000000, "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", 0x8, 0x40, 0x2, 0x1, 0x3a, 0xcf, 0x4}, r3}}, 0x128) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x3, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x204080000000001, 0x200000) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x2, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x1000000, "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", 0x8, 0x40, 0x2, 0x1, 0x3a, 0xcf, 0x4}, r3}}, 0x128) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0x3, 0x3}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(0x0, 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x5ab0}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080010000000, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8000, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4044884) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r0]) 09:14:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x5ab0}}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080010000000, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8000, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4044884) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r0]) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x5ab0}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080010000000, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8000, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4044884) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r0]) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x5ab0}}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080010000000, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000080), 0x8000, 0x0) (async) sendmsg$AUDIT_TTY_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x400, 0x70bd26, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4044884) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r0]) (async) 09:14:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(0x0, 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:52 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xffffff73, 0xb, 0x4, 0x20, 0x39d9, {0x0, 0xea60}, {0x1, 0x2, 0x3f, 0x8, 0x0, 0x7, "1e25f8bf"}, 0x3, 0x4, {0xffffffffffffffff}, 0x6}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_fd={0x3, 0x0, 0x4, 0x1, 0x176, {}, {0x2, 0xc, 0x1, 0x6, 0x2, 0x3, "7f562c2e"}, 0xfff, 0x4, {&(0x7f0000000200)=[{0x4, 0xfffff50a, {r2}, 0x1}, {0x28, 0x2, {}, 0x3f}]}, 0x1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0xffffffe0, 0x9, 0x64737664, 0x4, 0xa89, 0x3, 0x7, 0x6, 0x0, 0x3}}) 09:14:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xffffff73, 0xb, 0x4, 0x20, 0x39d9, {0x0, 0xea60}, {0x1, 0x2, 0x3f, 0x8, 0x0, 0x7, "1e25f8bf"}, 0x3, 0x4, {0xffffffffffffffff}, 0x6}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_fd={0x3, 0x0, 0x4, 0x1, 0x176, {}, {0x2, 0xc, 0x1, 0x6, 0x2, 0x3, "7f562c2e"}, 0xfff, 0x4, {&(0x7f0000000200)=[{0x4, 0xfffff50a, {r2}, 0x1}, {0x28, 0x2, {}, 0x3f}]}, 0x1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0xffffffe0, 0x9, 0x64737664, 0x4, 0xa89, 0x3, 0x7, 0x6, 0x0, 0x3}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xffffff73, 0xb, 0x4, 0x20, 0x39d9, {0x0, 0xea60}, {0x1, 0x2, 0x3f, 0x8, 0x0, 0x7, "1e25f8bf"}, 0x3, 0x4, {}, 0x6}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_fd={0x3, 0x0, 0x4, 0x1, 0x176, {}, {0x2, 0xc, 0x1, 0x6, 0x2, 0x3, "7f562c2e"}, 0xfff, 0x4, {&(0x7f0000000200)=[{0x4, 0xfffff50a, {r2}, 0x1}, {0x28, 0x2, {}, 0x3f}]}, 0x1}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0xffffffe0, 0x9, 0x64737664, 0x4, 0xa89, 0x3, 0x7, 0x6, 0x0, 0x3}}) (async) 09:14:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xffffff73, 0xb, 0x4, 0x20, 0x39d9, {0x0, 0xea60}, {0x1, 0x2, 0x3f, 0x8, 0x0, 0x7, "1e25f8bf"}, 0x3, 0x4, {0xffffffffffffffff}, 0x6}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_fd={0x3, 0x0, 0x4, 0x1, 0x176, {}, {0x2, 0xc, 0x1, 0x6, 0x2, 0x3, "7f562c2e"}, 0xfff, 0x4, {&(0x7f0000000200)=[{0x4, 0xfffff50a, {r2}, 0x1}, {0x28, 0x2, {}, 0x3f}]}, 0x1}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0xffffffe0, 0x9, 0x64737664, 0x4, 0xa89, 0x3, 0x7, 0x6, 0x0, 0x3}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xffffff73, 0xb, 0x4, 0x20, 0x39d9, {0x0, 0xea60}, {0x1, 0x2, 0x3f, 0x8, 0x0, 0x7, "1e25f8bf"}, 0x3, 0x4, {}, 0x6}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@multiplanar_fd={0x3, 0x0, 0x4, 0x1, 0x176, {}, {0x2, 0xc, 0x1, 0x6, 0x2, 0x3, "7f562c2e"}, 0xfff, 0x4, {&(0x7f0000000200)=[{0x4, 0xfffff50a, {r2}, 0x1}, {0x28, 0x2, {}, 0x3f}]}, 0x1}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix={0xffffffe0, 0x9, 0x64737664, 0x4, 0xa89, 0x3, 0x7, 0x6, 0x0, 0x3}}) (async) 09:14:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = socket(0x18, 0x2, 0x6) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030003a949001600000000000000000034def2fb6bc36b90061ca2aa66f67c3e174979801b6458ac23a6a5593aa3ba93e3f50848e980696c9120a80f6fc239aa59157ceadab6b3c5ff"], 0x20}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r3) 09:14:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = socket(0x18, 0x2, 0x6) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030003a949001600000000000000000034def2fb6bc36b90061ca2aa66f67c3e174979801b6458ac23a6a5593aa3ba93e3f50848e980696c9120a80f6fc239aa59157ceadab6b3c5ff"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r3) 09:14:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r1 = socket(0x18, 0x2, 0x6) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030003a949001600000000000000000034def2fb6bc36b90061ca2aa66f67c3e174979801b6458ac23a6a5593aa3ba93e3f50848e980696c9120a80f6fc239aa59157ceadab6b3c5ff"], 0x20}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r3) (rerun: 32) 09:14:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:53 executing program 2: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r0}}, 0x18) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x0, 0x40}) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000080)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:53 executing program 2: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r0}}, 0x18) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x0, 0x40}) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000080)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r0}}, 0x18) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x0, 0x40}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000080)={0x6, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:53 executing program 2: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r0}}, 0x18) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x0, 0x40}) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000080)={0x6, 0x1, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000340)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r0}}, 0x18) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x0, 0x40}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000080)={0x6, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x5) 09:14:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x5) 09:14:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x5) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x5) (async) 09:14:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x8, 0x52424752, 0x0, @discrete={0x400000, 0x4ef1}}) 09:14:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x8, 0x52424752, 0x0, @discrete={0x400000, 0x4ef1}}) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x8, 0x52424752, 0x0, @discrete={0x400000, 0x4ef1}}) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x32314d54, 0x1, @stepwise={0x7ff, 0x7, 0x5, 0x7, 0x101}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x32314d54, 0x1, @stepwise={0x7ff, 0x7, 0x5, 0x7, 0x101}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (rerun: 64) 09:14:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x32314d54, 0x1, @stepwise={0x7ff, 0x7, 0x5, 0x7, 0x101}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x6, 0x3, 0x4, 0x4, 0x8, {}, {0x5, 0x0, 0x5, 0x4, 0x4, 0xf1, "73f50ef0"}, 0x2, 0x2, {&(0x7f0000000100)=[{0xfff, 0x6, {&(0x7f0000000080)}}, {0x5, 0x4, {&(0x7f00000000c0)}, 0x3}]}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 09:14:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x6, 0x3, 0x4, 0x4, 0x8, {}, {0x5, 0x0, 0x5, 0x4, 0x4, 0xf1, "73f50ef0"}, 0x2, 0x2, {&(0x7f0000000100)=[{0xfff, 0x6, {&(0x7f0000000080)}}, {0x5, 0x4, {&(0x7f00000000c0)}, 0x3}]}, 0x8}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x6, 0x3, 0x4, 0x4, 0x8, {}, {0x5, 0x0, 0x5, 0x4, 0x4, 0xf1, "73f50ef0"}, 0x2, 0x2, {&(0x7f0000000100)=[{0xfff, 0x6, {&(0x7f0000000080)}}, {0x5, 0x4, {&(0x7f00000000c0)}, 0x3}]}, 0x8}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) 09:14:53 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x6, 0x3, 0x4, 0x4, 0x8, {}, {0x5, 0x0, 0x5, 0x4, 0x4, 0xf1, "73f50ef0"}, 0x2, 0x2, {&(0x7f0000000100)=[{0xfff, 0x6, {&(0x7f0000000080)}}, {0x5, 0x4, {&(0x7f00000000c0)}, 0x3}]}, 0x8}) (async, rerun: 32) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 09:14:53 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:53 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x79495325}, 0x8) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000180)={0x2, 0x31364d59, 0x3, @stepwise={0x7, 0x7, 0x0, 0x6, 0x1, 0x38}}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7f, 0x1000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)={0x28f7, 0x1, [{0x8}]}) 09:14:53 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x79495325}, 0x8) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000180)={0x2, 0x31364d59, 0x3, @stepwise={0x7, 0x7, 0x0, 0x6, 0x1, 0x38}}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7f, 0x1000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)={0x28f7, 0x1, [{0x8}]}) 09:14:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x79495325}, 0x8) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) (async) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000180)={0x2, 0x31364d59, 0x3, @stepwise={0x7, 0x7, 0x0, 0x6, 0x1, 0x38}}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7f, 0x1000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)={0x28f7, 0x1, [{0x8}]}) 09:14:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xb304, 0x800) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7ff, 0x9, 0x800}) 09:14:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xb304, 0x800) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7ff, 0x9, 0x800}) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0xb304, 0x800) (rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7ff, 0x9, 0x800}) 09:14:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 09:14:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x4, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000071}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x2f, 0x1, 0x3, 0x4df, 0x44, @mcast1, @local, 0x40, 0x8, 0x5, 0xce65}}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000840)={0x85, 0x1, 0x3, {0x1, @sdr={0xb5315241, 0x5}}, 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000740)={0x0, @pix={0xa23c9a1e, 0x7a2, 0x56465847, 0x9, 0x0, 0x80000001, 0xc, 0x9, 0x1, 0x3, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x7, 0x4, 0x2, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x7, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x4, 0xd3, 0x5, 0x6, 0x0, @local, @local, 0x1, 0x20, 0x7, 0x94c}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x98, 0x8000, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x64, 0x0, 0x1f, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x63, 0x1, 0xa, [{@empty, 0x10000}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa1, 0x0, 0x8, [0x8, 0x101, 0x7fffffff, 0x0]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x7, [0x8, 0x9, 0x3c4, 0x4]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf25130000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="44000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e300000000000000000000800030000000000140002006772657461703000000000000000000058000180140002006261746164765f736c6176655f31000014000200766c616e30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800030003000000140002006272696467655f736c6176655f3000000800030002000000580001800800030002000000140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616376746170300000000000000000080003000000000014000200766972745f7769666930000000000000480001800800030001000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="082a00000000000000000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x1a8}, 0x1, 0x0, 0x0, 0x810}, 0x10) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:14:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x4, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000071}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x2f, 0x1, 0x3, 0x4df, 0x44, @mcast1, @local, 0x40, 0x8, 0x5, 0xce65}}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000840)={0x85, 0x1, 0x3, {0x1, @sdr={0xb5315241, 0x5}}, 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000740)={0x0, @pix={0xa23c9a1e, 0x7a2, 0x56465847, 0x9, 0x0, 0x80000001, 0xc, 0x9, 0x1, 0x3, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x7, 0x4, 0x2, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x7, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x4, 0xd3, 0x5, 0x6, 0x0, @local, @local, 0x1, 0x20, 0x7, 0x94c}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x98, 0x8000, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x64, 0x0, 0x1f, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x63, 0x1, 0xa, [{@empty, 0x10000}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa1, 0x0, 0x8, [0x8, 0x101, 0x7fffffff, 0x0]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x7, [0x8, 0x9, 0x3c4, 0x4]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf25130000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="44000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e300000000000000000000800030000000000140002006772657461703000000000000000000058000180140002006261746164765f736c6176655f31000014000200766c616e30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800030003000000140002006272696467655f736c6176655f3000000800030002000000580001800800030002000000140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616376746170300000000000000000080003000000000014000200766972745f7769666930000000000000480001800800030001000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="082a00000000000000000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x1a8}, 0x1, 0x0, 0x0, 0x810}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x4, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000071}, 0x40000) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x2f, 0x1, 0x3, 0x4df, 0x44, @mcast1, @local, 0x40, 0x8, 0x5, 0xce65}}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000840)={0x85, 0x1, 0x3, {0x1, @sdr={0xb5315241, 0x5}}, 0x7}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000740)={0x0, @pix={0xa23c9a1e, 0x7a2, 0x56465847, 0x9, 0x0, 0x80000001, 0xc, 0x9, 0x1, 0x3, 0x2, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x7, 0x4, 0x2, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x7, 0x0, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x4, 0xd3, 0x5, 0x6, 0x0, @local, @local, 0x1, 0x20, 0x7, 0x94c}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x98, 0x8000, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x64, 0x0, 0x1f, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x63, 0x1, 0xa, [{@empty, 0x10000}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa1, 0x0, 0x8, [0x8, 0x101, 0x7fffffff, 0x0]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x7, [0x8, 0x9, 0x3c4, 0x4]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf25130000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="44000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e300000000000000000000800030000000000140002006772657461703000000000000000000058000180140002006261746164765f736c6176655f31000014000200766c616e30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800030003000000140002006272696467655f736c6176655f3000000800030002000000580001800800030002000000140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616376746170300000000000000000080003000000000014000200766972745f7769666930000000000000480001800800030001000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="082a00000000000000000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x1a8}, 0x1, 0x0, 0x0, 0x810}, 0x10) (async) 09:14:54 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x4, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000071}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x2f, 0x1, 0x3, 0x4df, 0x44, @mcast1, @local, 0x40, 0x8, 0x5, 0xce65}}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000840)={0x85, 0x1, 0x3, {0x1, @sdr={0xb5315241, 0x5}}, 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000740)={0x0, @pix={0xa23c9a1e, 0x7a2, 0x56465847, 0x9, 0x0, 0x80000001, 0xc, 0x9, 0x1, 0x3, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x7, 0x4, 0x2, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x7, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x4, 0xd3, 0x5, 0x6, 0x0, @local, @local, 0x1, 0x20, 0x7, 0x94c}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x98, 0x8000, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x64, 0x0, 0x1f, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x63, 0x1, 0xa, [{@empty, 0x10000}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa1, 0x0, 0x8, [0x8, 0x101, 0x7fffffff, 0x0]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x7, [0x8, 0x9, 0x3c4, 0x4]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf25130000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="44000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e300000000000000000000800030000000000140002006772657461703000000000000000000058000180140002006261746164765f736c6176655f31000014000200766c616e30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800030003000000140002006272696467655f736c6176655f3000000800030002000000580001800800030002000000140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616376746170300000000000000000080003000000000014000200766972745f7769666930000000000000480001800800030001000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="082a00000000000000000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x1a8}, 0x1, 0x0, 0x0, 0x810}, 0x10) 09:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x4, 0x70bd27, 0x25dfdbff, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000071}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x2f, 0x1, 0x3, 0x4df, 0x44, @mcast1, @local, 0x40, 0x8, 0x5, 0xce65}}) (async) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000840)={0x85, 0x1, 0x3, {0x1, @sdr={0xb5315241, 0x5}}, 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x2}}, '.\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000740)={0x0, @pix={0xa23c9a1e, 0x7a2, 0x56465847, 0x9, 0x0, 0x80000001, 0xc, 0x9, 0x1, 0x3, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x7, 0x4, 0x2, 0x20, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x7, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x4, 0xd3, 0x5, 0x6, 0x0, @local, @local, 0x1, 0x20, 0x7, 0x94c}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x7, 0x98, 0x8000, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x64, 0x0, 0x1f, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x63, 0x1, 0xa, [{@empty, 0x10000}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0xa1, 0x0, 0x8, [0x8, 0x101, 0x7fffffff, 0x0]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x7, [0x8, 0x9, 0x3c4, 0x4]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf25130000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="44000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e300000000000000000000800030000000000140002006772657461703000000000000000000058000180140002006261746164765f736c6176655f31000014000200766c616e30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800030003000000140002006272696467655f736c6176655f3000000800030002000000580001800800030002000000140002007665746831000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d616376746170300000000000000000080003000000000014000200766972745f7769666930000000000000480001800800030001000000140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="082a00000000000000000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x1a8}, 0x1, 0x0, 0x0, 0x810}, 0x10) 09:14:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:14:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8bf) 09:14:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8bf) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8bf) (async) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x8bf) 09:14:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:14:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x51b8, 0x2, 0x4, 0x0, 0x3}) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4080000000000, 0x98001) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x5, 0xf9e5, "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", 0x5, 0x4, 0x0, 0x8, 0x80, 0x0, 0x20, 0x1}}}, 0x120) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0x6190, 0x5}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x2b, 0x9, 0x32314752, 0x2, 0x6, 0x5, 0x6, 0x8e, 0x0, 0x7, 0x0, 0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x8c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r5, r1}}, 0x18) 09:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x51b8, 0x2, 0x4, 0x0, 0x3}) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4080000000000, 0x98001) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x5, 0xf9e5, "bcd2743a55b00d0ee6d34e590f958921c070dfb4dfb77404add57626770d229578e9c6e116bba2a87304e95bff568858434f99df454e0d4a0f12ed613002c0bdb8b0754fc7a15b5fe8bc66d166e6c06da068ac4fdfe238569223722b204939373426c6a7e007f4ae7da8d2cf59b7519528dd25cc08a0aab7f65ead20f8f5f6e10e068cd13b6dde98fde3c712638405d542ac9fa4c8cdea1064401be60179b7bf9a0191c1fe448e5f39d9240db43c2d5e8648b0dfcbcd0460975459e92d9ba27e3784ce8903bb8084331d4f0a754dfab5080e791ba461d7b86f8afa04fe8072f8e060772673e6b93a0e9bee223c86296dfae7fcd78c8d4ec928d2cb3c692e05ff", 0x5, 0x4, 0x0, 0x8, 0x80, 0x0, 0x20, 0x1}}}, 0x120) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0x6190, 0x5}) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x2b, 0x9, 0x32314752, 0x2, 0x6, 0x5, 0x6, 0x8e, 0x0, 0x7, 0x0, 0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async, rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x8c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) (rerun: 64) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r5, r1}}, 0x18) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:54 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:54 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x51b8, 0x2, 0x4, 0x0, 0x3}) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4080000000000, 0x98001) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x5, 0xf9e5, "bcd2743a55b00d0ee6d34e590f958921c070dfb4dfb77404add57626770d229578e9c6e116bba2a87304e95bff568858434f99df454e0d4a0f12ed613002c0bdb8b0754fc7a15b5fe8bc66d166e6c06da068ac4fdfe238569223722b204939373426c6a7e007f4ae7da8d2cf59b7519528dd25cc08a0aab7f65ead20f8f5f6e10e068cd13b6dde98fde3c712638405d542ac9fa4c8cdea1064401be60179b7bf9a0191c1fe448e5f39d9240db43c2d5e8648b0dfcbcd0460975459e92d9ba27e3784ce8903bb8084331d4f0a754dfab5080e791ba461d7b86f8afa04fe8072f8e060772673e6b93a0e9bee223c86296dfae7fcd78c8d4ec928d2cb3c692e05ff", 0x5, 0x4, 0x0, 0x8, 0x80, 0x0, 0x20, 0x1}}}, 0x120) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0x6190, 0x5}) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x2b, 0x9, 0x32314752, 0x2, 0x6, 0x5, 0x6, 0x8e, 0x0, 0x7, 0x0, 0x5}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x60, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x8c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r5, r1}}, 0x18) 09:14:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) write$cgroup_devices(r1, &(0x7f0000000200)={'b', ' *:* ', 'rwm\x00'}, 0xa) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x4, 0x7fffffff, "e67783446d867910fe87be9b50f505b24a3f14b5ed94827ac0983becdaefad2557d69af7e8afedf4ab0903e95e6610441c02093ec4e02b2a325e863fde7fb1eb7f961a1fdf1330481d17f534175ebb0aa8b18ecdc24f273ca66c0e677d06adcbc1646bae77b42e4a678dc5be08652bd32b29d113ecbccf62e41845959189c7ea7c1110e9952443500e82b78eb090508b84bf6f9127cad20ffc33cce0bdb509b243438c7c93fdcd5dcaa566088acc1af656303f3db4472b02b0a76c2eb59d5931e43c9f4392fad011577438f80e8fb11bda36b8da5bba59952c73488568e9a79b2d6c0179aa559bc634a3c4b9df2e8913e2aa5199cb6fd417675c29c92939aafb", 0x5, 0xfb, 0x7d, 0x4, 0x9, 0x40, 0x0, 0x1}}}, 0x120) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:55 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) write$cgroup_devices(r1, &(0x7f0000000200)={'b', ' *:* ', 'rwm\x00'}, 0xa) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x4, 0x7fffffff, "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", 0x5, 0xfb, 0x7d, 0x4, 0x9, 0x40, 0x0, 0x1}}}, 0x120) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) write$cgroup_devices(r1, &(0x7f0000000200)={'b', ' *:* ', 'rwm\x00'}, 0xa) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x4, 0x7fffffff, "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", 0x5, 0xfb, 0x7d, 0x4, 0x9, 0x40, 0x0, 0x1}}}, 0x120) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) write$cgroup_devices(r1, &(0x7f0000000200)={'b', ' *:* ', 'rwm\x00'}, 0xa) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x4, 0x7fffffff, "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", 0x5, 0xfb, 0x7d, 0x4, 0x9, 0x40, 0x0, 0x1}}}, 0x120) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = socket(0x2, 0x80804, 0x400) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x60004004}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:55 executing program 2: r0 = socket(0x2, 0x80804, 0x400) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x60004004}, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = socket(0x2, 0x80804, 0x400) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x60004004}, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x30, 0x0, 0x1, @discrete={0x4c5, 0xfffffffa}}) 09:14:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x30, 0x0, 0x1, @discrete={0x4c5, 0xfffffffa}}) 09:14:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x30, 0x0, 0x1, @discrete={0x4c5, 0xfffffffa}}) 09:14:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 09:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32314d48, 0x0, @discrete={0x9, 0x80000000}}) memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) 09:14:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32314d48, 0x0, @discrete={0x9, 0x80000000}}) memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) 09:14:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32314d48, 0x0, @discrete={0x9, 0x80000000}}) memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32314d48, 0x0, @discrete={0x9, 0x80000000}}) (async) memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) (async) 09:14:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x7fffffff, 0x43353039, 0x0, @discrete={0x5, 0x2}}) 09:14:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32314d48, 0x0, @discrete={0x9, 0x80000000}}) memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) 09:14:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x7fffffff, 0x43353039, 0x0, @discrete={0x5, 0x2}}) 09:14:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x7fffffff, 0x43353039, 0x0, @discrete={0x5, 0x2}}) 09:14:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:55 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0xcb08}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000180)=0x6) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x0, 0x4, 0x10000, 0x2, {r0, r1/1000+10000}, {0x4, 0x2, 0x1f, 0x3, 0x94, 0xe7, "be85c101"}, 0x8, 0x3, {&(0x7f0000000080)=[{0x8000, 0x694f, {0xffffffff}, 0x4}, {0x7fffffff, 0x2, {}, 0x7}]}, 0x6}) 09:14:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32314d48, 0x0, @discrete={0x9, 0x80000000}}) memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) 09:14:55 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:55 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0xcb08}}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000180)=0x6) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x0, 0x4, 0x10000, 0x2, {r0, r1/1000+10000}, {0x4, 0x2, 0x1f, 0x3, 0x94, 0xe7, "be85c101"}, 0x8, 0x3, {&(0x7f0000000080)=[{0x8000, 0x694f, {0xffffffff}, 0x4}, {0x7fffffff, 0x2, {}, 0x7}]}, 0x6}) 09:14:55 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32314d48, 0x0, @discrete={0x9, 0x80000000}}) memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) 09:14:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0xcb08}}) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000180)=0x6) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x0, 0x4, 0x10000, 0x2, {r0, r1/1000+10000}, {0x4, 0x2, 0x1f, 0x3, 0x94, 0xe7, "be85c101"}, 0x8, 0x3, {&(0x7f0000000080)=[{0x8000, 0x694f, {0xffffffff}, 0x4}, {0x7fffffff, 0x2, {}, 0x7}]}, 0x6}) 09:14:56 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) 09:14:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 0: memfd_create(&(0x7f0000000080)=':#[(:-\x00', 0xf4262ca686c6f8d8) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x0, 0x2, @discrete={0x6, 0x4}}) 09:14:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x0, 0x2, @discrete={0x6, 0x4}}) 09:14:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 0: memfd_create(0x0, 0xf4262ca686c6f8d8) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x0, 0x2, @discrete={0x6, 0x4}}) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xd16, 0x59}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20363059, 0x0, @stepwise={0x4ae}}) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xd16, 0x59}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20363059, 0x0, @stepwise={0x4ae}}) 09:14:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xd16, 0x59}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20363059, 0x0, @stepwise={0x4ae}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xd16, 0x59}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20363059, 0x0, @stepwise={0x4ae}}) (async) 09:14:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 0: memfd_create(0x0, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x5, 0xbda3}) 09:14:56 executing program 0: memfd_create(0x0, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x5, 0xbda3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x5, 0xbda3}) (async) 09:14:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 0: memfd_create(0x0, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x5, 0xbda3}) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix_mp={0x800001, 0x800, 0x20363159, 0x3, 0x1, [{0x4, 0x7}, {0x3816, 0x10000}, {0x7, 0x7f}, {0x6, 0x4765}, {0x2, 0x2}, {0x5, 0x8}, {0x3ff, 0xf49e}, {0x8, 0x100}], 0x20, 0x0, 0x6, 0x2, 0x4}}) 09:14:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix_mp={0x800001, 0x800, 0x20363159, 0x3, 0x1, [{0x4, 0x7}, {0x3816, 0x10000}, {0x7, 0x7f}, {0x6, 0x4765}, {0x2, 0x2}, {0x5, 0x8}, {0x3ff, 0xf49e}, {0x8, 0x100}], 0x20, 0x0, 0x6, 0x2, 0x4}}) 09:14:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @pix_mp={0x800001, 0x800, 0x20363159, 0x3, 0x1, [{0x4, 0x7}, {0x3816, 0x10000}, {0x7, 0x7f}, {0x6, 0x4765}, {0x2, 0x2}, {0x5, 0x8}, {0x3ff, 0xf49e}, {0x8, 0x100}], 0x20, 0x0, 0x6, 0x2, 0x4}}) 09:14:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:56 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:56 executing program 2: ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:56 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async, rerun: 32) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:56 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:56 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@overlay={0x40, 0x0, 0x4, 0x20, 0x0, {0x0, 0x2710}, {0x5, 0xc, 0x6, 0x0, 0x53, 0x8, "8ec7499e"}, 0x4, 0x3, {}, 0x800}) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@overlay={0x40, 0x0, 0x4, 0x20, 0x0, {0x0, 0x2710}, {0x5, 0xc, 0x6, 0x0, 0x53, 0x8, "8ec7499e"}, 0x4, 0x3, {}, 0x800}) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)=@overlay={0x40, 0x0, 0x4, 0x20, 0x0, {0x0, 0x2710}, {0x5, 0xc, 0x6, 0x0, 0x53, 0x8, "8ec7499e"}, 0x4, 0x3, {}, 0x800}) 09:14:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x9, 0x4b}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcf1b}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '}%){'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/vim2m\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 09:14:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x9, 0x4b}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcf1b}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '}%){'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/vim2m\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x9, 0x4b}}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcf1b}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '}%){'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/vim2m\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) (async) 09:14:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x9, 0x4b}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcf1b}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '}%){'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/vim2m\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x9, 0x4b}}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcf1b}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '}%){'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/vim2m\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) (async) 09:14:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x137}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009d40)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000009d00)={&(0x7f0000009c40)={0x14, r1, 0x20, 0x70bd25}, 0x14}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r7, 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) 09:14:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x9, 0x4b}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcf1b}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '}%){'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/vim2m\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 09:14:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x137}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009d40)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000009d00)={&(0x7f0000009c40)={0x14, r1, 0x20, 0x70bd25}, 0x14}}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r7, 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x137}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009d40)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000009d00)={&(0x7f0000009c40)={0x14, r1, 0x20, 0x70bd25}, 0x14}}, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r7, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r8, 0x0, 0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) (async) 09:14:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (rerun: 64) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}}, 0x0) (async) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x137}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009d40)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000009d00)={&(0x7f0000009c40)={0x14, r1, 0x20, 0x70bd25}, 0x14}}, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) r7 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r7, 0x0, 0x0) (async) r8 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r8, 0x0, 0x0) (async) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r1, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) 09:14:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x36314d4e, 0x0, @stepwise={0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1}}) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x36314d4e, 0x0, @stepwise={0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x36314d4e, 0x0, @stepwise={0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1}}) (async) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x36314d4e, 0x0, @stepwise={0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1}}) 09:14:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:57 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:57 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:57 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xbbdb}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:57 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x79495325}, 0x8) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000180)={0x2, 0x31364d59, 0x3, @stepwise={0x7, 0x7, 0x0, 0x6, 0x1, 0x38}}) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7f, 0x1000) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f00000000c0)={0x28f7, 0x1, [{0x8}]}) 09:14:57 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xbbdb}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xbbdb}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xbbdb}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xbbdb}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xbbdb}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x32314d54, 0x1, @stepwise={0x7ff, 0x7, 0x5, 0x7, 0x101}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xffffffff, 0x3436324d, 0x0, @stepwise={0xffffffff}}) 09:14:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x32314d54, 0x1, @stepwise={0x7ff, 0x7, 0x5, 0x7, 0x101}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xffffffff, 0x3436324d, 0x0, @stepwise={0xffffffff}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xffffffff, 0x3436324d, 0x0, @stepwise={0xffffffff}}) (async) 09:14:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xffffffff, 0x3436324d, 0x0, @stepwise={0xffffffff}}) 09:14:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x32314d54, 0x1, @stepwise={0x7ff, 0x7, 0x5, 0x7, 0x101}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0xfffffff9, 0x98, 0x1, {0x1, @pix={0x80, 0x8, 0x43353039, 0x0, 0x3, 0xf8d, 0x5, 0x46f7, 0x1, 0x4, 0x1}}, 0x7fff}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 09:14:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = socket(0x18, 0x2, 0x6) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r2) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030003a949001600000000000000000034def2fb6bc36b90061ca2aa66f67c3e174979801b6458ac23a6a5593aa3ba93e3f50848e980696c9120a80f6fc239aa59157ceadab6b3c5ff"], 0x20}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r3) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0xfffffff9, 0x98, 0x1, {0x1, @pix={0x80, 0x8, 0x43353039, 0x0, 0x3, 0xf8d, 0x5, 0x46f7, 0x1, 0x4, 0x1}}, 0x7fff}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0xfffffff9, 0x98, 0x1, {0x1, @pix={0x80, 0x8, 0x43353039, 0x0, 0x3, 0xf8d, 0x5, 0x46f7, 0x1, 0x4, 0x1}}, 0x7fff}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) 09:14:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x9, 0x32314d54, 0x1, @stepwise={0x7ff, 0x7, 0x5, 0x7, 0x101}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0xfffffff9, 0x98, 0x1, {0x1, @pix={0x80, 0x8, 0x43353039, 0x0, 0x3, 0xf8d, 0x5, 0x46f7, 0x1, 0x4, 0x1}}, 0x7fff}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0xfffffff9, 0x98, 0x1, {0x1, @pix={0x80, 0x8, 0x43353039, 0x0, 0x3, 0xf8d, 0x5, 0x46f7, 0x1, 0x4, 0x1}}, 0x7fff}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x7, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) 09:14:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(0x0, 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x4, 0x70bd27, 0x25dfdbfe, {0x1, 0x1}, [""]}, 0x18}}, 0x24040000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(0x0, 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x4, 0x70bd27, 0x25dfdbfe, {0x1, 0x1}, [""]}, 0x18}}, 0x24040000) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (rerun: 32) 09:14:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x4, 0x70bd27, 0x25dfdbfe, {0x1, 0x1}, [""]}, 0x18}}, 0x24040000) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x4, 0x70bd27, 0x25dfdbfe, {0x1, 0x1}, [""]}, 0x18}}, 0x24040000) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:14:58 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) 09:14:58 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) 09:14:58 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) (async) 09:14:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 0: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ff", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000ff, 0x10000, 0x7, 0x9}, 0x2, 0x7, &(0x7f0000000100)={{0x8, 0x6, 0x4ec, 0x7fff}, &(0x7f00000000c0)={{0x1, 0xfffffff9, 0x4, 0x6}}}, 0x40, &(0x7f0000000140), 0x81}}) 09:14:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000ff, 0x10000, 0x7, 0x9}, 0x2, 0x7, &(0x7f0000000100)={{0x8, 0x6, 0x4ec, 0x7fff}, &(0x7f00000000c0)={{0x1, 0xfffffff9, 0x4, 0x6}}}, 0x40, &(0x7f0000000140), 0x81}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000ff, 0x10000, 0x7, 0x9}, 0x2, 0x7, &(0x7f0000000100)={{0x8, 0x6, 0x4ec, 0x7fff}, &(0x7f00000000c0)={{0x1, 0xfffffff9, 0x4, 0x6}}}, 0x40, &(0x7f0000000140), 0x81}}) (async) 09:14:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) 09:14:58 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000ff, 0x10000, 0x7, 0x9}, 0x2, 0x7, &(0x7f0000000100)={{0x8, 0x6, 0x4ec, 0x7fff}, &(0x7f00000000c0)={{0x1, 0xfffffff9, 0x4, 0x6}}}, 0x40, &(0x7f0000000140), 0x81}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000ff, 0x10000, 0x7, 0x9}, 0x2, 0x7, &(0x7f0000000100)={{0x8, 0x6, 0x4ec, 0x7fff}, &(0x7f00000000c0)={{0x1, 0xfffffff9, 0x4, 0x6}}}, 0x40, &(0x7f0000000140), 0x81}}) (async) 09:14:58 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000ff, 0x10000, 0x7, 0x9}, 0x2, 0x7, &(0x7f0000000100)={{0x8, 0x6, 0x4ec, 0x7fff}, &(0x7f00000000c0)={{0x1, 0xfffffff9, 0x4, 0x6}}}, 0x40, &(0x7f0000000140), 0x81}}) 09:14:58 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0x180, 0x8596}) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x511000) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000001c0)={0x0, @win={{0x1, 0x1, 0x100, 0x1}, 0x1, 0x0, &(0x7f0000000140)={{0x1, 0x1, 0x7, 0x9}, &(0x7f0000000100)={{0xfff, 0x1, 0x9, 0x7}, &(0x7f00000000c0)={{0x81, 0x5, 0xed62, 0x7}}}}, 0x2, &(0x7f0000000180)="fc360165d4084e5c5b48b793aabbe0657ee02761", 0x9}}) 09:14:58 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000ff, 0x10000, 0x7, 0x9}, 0x2, 0x7, &(0x7f0000000100)={{0x8, 0x6, 0x4ec, 0x7fff}, &(0x7f00000000c0)={{0x1, 0xfffffff9, 0x4, 0x6}}}, 0x40, &(0x7f0000000140), 0x81}}) 09:14:58 executing program 5: r0 = socket(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) 09:14:58 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x1}}) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0x180, 0x8596}) (async, rerun: 64) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x511000) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000001c0)={0x0, @win={{0x1, 0x1, 0x100, 0x1}, 0x1, 0x0, &(0x7f0000000140)={{0x1, 0x1, 0x7, 0x9}, &(0x7f0000000100)={{0xfff, 0x1, 0x9, 0x7}, &(0x7f00000000c0)={{0x81, 0x5, 0xed62, 0x7}}}}, 0x2, &(0x7f0000000180)="fc360165d4084e5c5b48b793aabbe0657ee02761", 0x9}}) 09:14:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000ff, 0x10000, 0x7, 0x9}, 0x2, 0x7, &(0x7f0000000100)={{0x8, 0x6, 0x4ec, 0x7fff}, &(0x7f00000000c0)={{0x1, 0xfffffff9, 0x4, 0x6}}}, 0x40, &(0x7f0000000140), 0x81}}) 09:14:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 09:14:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:59 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) syz_open_dev$vim2m(&(0x7f0000000080), 0x8f, 0x2) 09:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x1}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000002c0)={0x180, 0x8596}) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x511000) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000001c0)={0x0, @win={{0x1, 0x1, 0x100, 0x1}, 0x1, 0x0, &(0x7f0000000140)={{0x1, 0x1, 0x7, 0x9}, &(0x7f0000000100)={{0xfff, 0x1, 0x9, 0x7}, &(0x7f00000000c0)={{0x81, 0x5, 0xed62, 0x7}}}}, 0x2, &(0x7f0000000180)="fc360165d4084e5c5b48b793aabbe0657ee02761", 0x9}}) 09:14:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)={0x3, 0x7f, 0x10000, 0x80800}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 09:14:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) 09:14:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) 09:14:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:59 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x4000, 0x1000, {}, {0x2, 0x2, 0xf8, 0x25, 0x9, 0x4, "ea0c4218"}, 0x4, 0x4, {0xffffffffffffffff}, 0x9}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x401, 0x1, 0x4, 0x2000, 0x8, {}, {0x4, 0xc, 0x80, 0x9, 0x3f, 0x1, "8924aaa7"}, 0xa30, 0x4, {0xffffffffffffffff}, 0x6}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x8001, 0x3, 0x4, 0x20, 0x3, {0x77359400}, {0x1, 0x2, 0xe2, 0x7f, 0x1, 0x4a, "9cede436"}, 0xfffff468, 0x4, {&(0x7f0000000180)=[{0x80, 0x3bc58302, {r1}}, {0x3ff, 0xd2fd, {r2}, 0x2}]}, 0x80000001, 0x0, r3}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 09:14:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x4000, 0x1000, {}, {0x2, 0x2, 0xf8, 0x25, 0x9, 0x4, "ea0c4218"}, 0x4, 0x4, {0xffffffffffffffff}, 0x9}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x401, 0x1, 0x4, 0x2000, 0x8, {}, {0x4, 0xc, 0x80, 0x9, 0x3f, 0x1, "8924aaa7"}, 0xa30, 0x4, {0xffffffffffffffff}, 0x6}) (async, rerun: 32) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x8001, 0x3, 0x4, 0x20, 0x3, {0x77359400}, {0x1, 0x2, 0xe2, 0x7f, 0x1, 0x4a, "9cede436"}, 0xfffff468, 0x4, {&(0x7f0000000180)=[{0x80, 0x3bc58302, {r1}}, {0x3ff, 0xd2fd, {r2}, 0x2}]}, 0x80000001, 0x0, r3}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 09:14:59 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 3: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x4000, 0x1000, {}, {0x2, 0x2, 0xf8, 0x25, 0x9, 0x4, "ea0c4218"}, 0x4, 0x4, {0xffffffffffffffff}, 0x9}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x401, 0x1, 0x4, 0x2000, 0x8, {}, {0x4, 0xc, 0x80, 0x9, 0x3f, 0x1, "8924aaa7"}, 0xa30, 0x4, {0xffffffffffffffff}, 0x6}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_fd={0x8001, 0x3, 0x4, 0x20, 0x3, {0x77359400}, {0x1, 0x2, 0xe2, 0x7f, 0x1, 0x4a, "9cede436"}, 0xfffff468, 0x4, {&(0x7f0000000180)=[{0x80, 0x3bc58302, {r1}}, {0x3ff, 0xd2fd, {r2}, 0x2}]}, 0x80000001, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:14:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 09:14:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 09:14:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:14:59 executing program 2: socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x5, 0x8, 0x80000}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffa}}) 09:14:59 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:14:59 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:14:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:14:59 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 09:14:59 executing program 2: socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x5, 0x8, 0x80000}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffa}}) 09:14:59 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:14:59 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:15:00 executing program 2: socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x5, 0x8, 0x80000}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffa}}) socket$nl_audit(0x10, 0x3, 0x9) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x5, 0x8, 0x80000}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffa}}) (async) 09:15:00 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0x2, 0x5, 0x8, 0x80000}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffa}}) 09:15:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 09:15:00 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039, 0x5}}) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 09:15:00 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x3132564e}) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) 09:15:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xab, 0x564110c, 0x1, @stepwise={0x8, 0x19, 0x80000000, 0x7a, 0x8001, 0x7ff}}) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @sdr={0x43353039, 0x5}}) 09:15:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xab, 0x564110c, 0x1, @stepwise={0x8, 0x19, 0x80000000, 0x7a, 0x8001, 0x7ff}}) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @sdr={0x43353039, 0x5}}) 09:15:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xab, 0x564110c, 0x1, @stepwise={0x8, 0x19, 0x80000000, 0x7a, 0x8001, 0x7ff}}) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x0, @sdr={0x43353039, 0x5}}) 09:15:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x0, 0x5}}) 09:15:00 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x3, 0x4}}) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x0, 0x5}}) 09:15:00 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x3, 0x4}}) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x3, 0x4}}) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x0, 0x5}}) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:00 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff170000", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (rerun: 64) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4080000000000, 0x400000) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @stepwise={0x9, 0x4, 0x80000001, 0x2, 0x0, 0x5}}) socket$nl_crypto(0x10, 0x3, 0x15) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:00 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4080000000000, 0x400000) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @stepwise={0x9, 0x4, 0x80000001, 0x2, 0x0, 0x5}}) socket$nl_crypto(0x10, 0x3, 0x15) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x4080000000000, 0x400000) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x6}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @stepwise={0x9, 0x4, 0x80000001, 0x2, 0x0, 0x5}}) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) 09:15:00 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:00 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:00 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x4080000000000, 0x400000) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x6}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @stepwise={0x9, 0x4, 0x80000001, 0x2, 0x0, 0x5}}) socket$nl_crypto(0x10, 0x3, 0x15) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x4080000000000, 0x400000) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x4, 0x6}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @stepwise={0x9, 0x4, 0x80000001, 0x2, 0x0, 0x5}}) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) 09:15:01 executing program 2: getrusage(0x0, &(0x7f00000000c0)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x34324948, 0x0, @discrete={0x8, 0x401}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 09:15:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:15:01 executing program 2: getrusage(0x0, &(0x7f00000000c0)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x34324948, 0x0, @discrete={0x8, 0x401}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 09:15:01 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:15:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17", @ANYRES32=r0, @ANYBLOB="0300000000000000"]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:01 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:01 executing program 2: getrusage(0x0, &(0x7f00000000c0)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x34324948, 0x0, @discrete={0x8, 0x401}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 09:15:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:15:01 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x42) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f00000000c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 09:15:01 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0, @ANYBLOB]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 09:15:01 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x42) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f00000000c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x42) (async) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f00000000c0)) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:15:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (fail_nth: 1) 09:15:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (fail_nth: 1) 09:15:01 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (fail_nth: 1) 09:15:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:15:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 09:15:01 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x1, 0x4f424752, 0x3, @discrete={0x2, 0x325}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 907.474980] FAULT_INJECTION: forcing a failure. [ 907.474980] name failslab, interval 1, probability 0, space 0, times 0 [ 907.498137] CPU: 0 PID: 13036 Comm: syz-executor.5 Not tainted 4.14.268-syzkaller #0 [ 907.506046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.515574] Call Trace: [ 907.518174] dump_stack+0x1b2/0x281 [ 907.521899] should_fail.cold+0x10a/0x149 [ 907.526030] should_failslab+0xd6/0x130 [ 907.529987] kmem_cache_alloc_node_trace+0x25a/0x400 [ 907.535074] __kmalloc_node+0x38/0x70 [ 907.538865] kvmalloc_node+0x46/0xd0 [ 907.542568] ? video_ioctl2+0x30/0x30 [ 907.546347] video_usercopy+0x330/0xe70 [ 907.550311] ? v4l_g_ctrl+0x390/0x390 [ 907.554348] ? proc_fail_nth_write+0x7b/0x180 [ 907.558851] ? trace_hardirqs_on+0x10/0x10 [ 907.563107] ? fsnotify+0x974/0x11b0 09:15:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (fail_nth: 2) 09:15:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7, 0xfffffffa, 0x85800}) socket$nl_generic(0x10, 0x3, 0x10) 09:15:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 907.563118] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 907.563127] ? __handle_mm_fault+0x80f/0x4620 [ 907.563140] v4l2_ioctl+0x1bb/0x2f0 [ 907.563147] ? v4l2_open+0x2f0/0x2f0 [ 907.563156] do_vfs_ioctl+0x75a/0xff0 09:15:01 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x42) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f00000000c0)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) (async, rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (rerun: 32) 09:15:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:15:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x2, @vbi={0x8f, 0x7, 0x7fff, 0x32314d59, [0xd0, 0x1], [0x4, 0x9], 0x1}}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x4, 0xc000}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000200)={0x8, 0x30324c4a, 0x2, @stepwise={0x8, 0xf57, 0x7fff, 0x6, 0x7ff, 0x71fd}}) [ 907.563166] ? lock_acquire+0x170/0x3f0 [ 907.563175] ? ioctl_preallocate+0x1a0/0x1a0 [ 907.563187] ? __fget+0x2df/0x460 [ 907.563198] ? do_vfs_ioctl+0xff0/0xff0 [ 907.563209] ? security_file_ioctl+0x83/0xb0 09:15:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:15:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7, 0xfffffffa, 0x85800}) socket$nl_generic(0x10, 0x3, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7, 0xfffffffa, 0x85800}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 09:15:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 907.563221] SyS_ioctl+0x7f/0xb0 [ 907.563229] ? do_vfs_ioctl+0xff0/0xff0 [ 907.563242] do_syscall_64+0x1d5/0x640 [ 907.563258] entry_SYSCALL_64_after_hwframe+0x46/0xbb 09:15:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_fd={0x9, 0x0, 0x4, 0x8, 0x3, {0x77359400}, {0x3, 0x8, 0x9, 0x3, 0x1, 0x2, "d279f22f"}, 0xfffffffd, 0x4, {&(0x7f00000000c0)=[{0x401, 0x6, {r1}, 0x9}, {0xfffffffa, 0xd17f, {}, 0x3}]}, 0x7, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7, 0xfffffffa, 0x85800}) socket$nl_generic(0x10, 0x3, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000000c0)={0x3, 0x7, 0xfffffffa, 0x85800}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) [ 907.563281] RIP: 0033:0x7f74d64dd059 [ 907.563287] RSP: 002b:00007f74d4e52168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.563299] RAX: ffffffffffffffda RBX: 00007f74d65eff60 RCX: 00007f74d64dd059 [ 907.563305] RDX: 0000000020000280 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 907.563312] RBP: 00007f74d4e521d0 R08: 0000000000000000 R09: 0000000000000000 09:15:01 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x1, 0x4f424752, 0x3, @discrete={0x2, 0x325}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x1, 0x4f424752, 0x3, @discrete={0x2, 0x325}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) 09:15:01 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 09:15:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0x7, 0xfffffeff, {r2}, {}, 0x7fff, 0x100000001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 09:15:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 1) 09:15:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_fd={0x9, 0x0, 0x4, 0x8, 0x3, {0x77359400}, {0x3, 0x8, 0x9, 0x3, 0x1, 0x2, "d279f22f"}, 0xfffffffd, 0x4, {&(0x7f00000000c0)=[{0x401, 0x6, {r1}, 0x9}, {0xfffffffa, 0xd17f, {}, 0x3}]}, 0x7, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:01 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x2, @vbi={0x8f, 0x7, 0x7fff, 0x32314d59, [0xd0, 0x1], [0x4, 0x9], 0x1}}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x4, 0xc000}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000200)={0x8, 0x30324c4a, 0x2, @stepwise={0x8, 0xf57, 0x7fff, 0x6, 0x7ff, 0x71fd}}) [ 907.563318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.563324] R13: 00007ffeb4ae174f R14: 00007f74d4e52300 R15: 0000000000022000 09:15:01 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) (rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0x7, 0xfffffeff, {r2}, {}, 0x7fff, 0x100000001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 907.858966] FAULT_INJECTION: forcing a failure. [ 907.858966] name failslab, interval 1, probability 0, space 0, times 0 [ 907.874229] CPU: 1 PID: 13098 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 907.882128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.891791] Call Trace: [ 907.891852] dump_stack+0x1b2/0x281 09:15:01 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x1, 0x4f424752, 0x3, @discrete={0x2, 0x325}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:01 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 2) 09:15:01 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x2, @vbi={0x8f, 0x7, 0x7fff, 0x32314d59, [0xd0, 0x1], [0x4, 0x9], 0x1}}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x4, 0xc000}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000200)={0x8, 0x30324c4a, 0x2, @stepwise={0x8, 0xf57, 0x7fff, 0x6, 0x7ff, 0x71fd}}) [ 907.891864] should_fail.cold+0x10a/0x149 [ 907.891875] should_failslab+0xd6/0x130 [ 907.891885] kmem_cache_alloc_trace+0x29a/0x3d0 [ 907.891896] loop_add+0x83/0x830 [ 907.891903] ? loop_queue_rq+0x280/0x280 [ 907.891909] ? loop_queue_work+0x21e0/0x21e0 [ 907.891917] ? trace_hardirqs_on+0x10/0x10 [ 907.891926] loop_control_ioctl+0x11a/0x3f0 [ 907.891933] ? loop_lookup+0x190/0x190 [ 907.891940] ? SyS_write+0x1b7/0x210 [ 907.891949] ? loop_lookup+0x190/0x190 [ 907.891957] do_vfs_ioctl+0x75a/0xff0 [ 907.891965] ? lock_acquire+0x170/0x3f0 [ 907.891973] ? ioctl_preallocate+0x1a0/0x1a0 [ 907.891985] ? __fget+0x2df/0x460 [ 907.891993] ? do_vfs_ioctl+0xff0/0xff0 [ 907.892002] ? security_file_ioctl+0x83/0xb0 [ 907.892010] SyS_ioctl+0x7f/0xb0 [ 907.892017] ? do_vfs_ioctl+0xff0/0xff0 [ 907.892027] do_syscall_64+0x1d5/0x640 [ 907.892042] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 907.892050] RIP: 0033:0x7f8002e8f059 [ 907.892054] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.892063] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 907.892068] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 907.892072] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 907.892077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.892082] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 907.948342] FAULT_INJECTION: forcing a failure. [ 907.948342] name failslab, interval 1, probability 0, space 0, times 0 [ 907.948354] CPU: 1 PID: 13116 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 907.948360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.948364] Call Trace: [ 907.948377] dump_stack+0x1b2/0x281 [ 907.948392] should_fail.cold+0x10a/0x149 [ 907.948406] should_failslab+0xd6/0x130 [ 907.948420] kmem_cache_alloc_node_trace+0x25a/0x400 [ 907.948434] __kmalloc_node+0x38/0x70 [ 907.948446] blk_mq_alloc_tag_set+0x27c/0x910 [ 907.948464] loop_add+0x2a0/0x830 [ 907.948476] ? loop_queue_rq+0x280/0x280 [ 908.134887] ? loop_queue_work+0x21e0/0x21e0 [ 908.134902] loop_control_ioctl+0x11a/0x3f0 [ 908.143652] ? loop_lookup+0x190/0x190 [ 908.143663] ? SyS_write+0x1b7/0x210 [ 908.143674] ? loop_lookup+0x190/0x190 [ 908.143686] do_vfs_ioctl+0x75a/0xff0 09:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_fd={0x9, 0x0, 0x4, 0x8, 0x3, {0x77359400}, {0x3, 0x8, 0x9, 0x3, 0x1, 0x2, "d279f22f"}, 0xfffffffd, 0x4, {&(0x7f00000000c0)=[{0x401, 0x6, {r1}, 0x9}, {0xfffffffa, 0xd17f, {}, 0x3}]}, 0x7, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x2, @vbi={0x8f, 0x7, 0x7fff, 0x32314d59, [0xd0, 0x1], [0x4, 0x9], 0x1}}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x4, 0xc000}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000200)={0x8, 0x30324c4a, 0x2, @stepwise={0x8, 0xf57, 0x7fff, 0x6, 0x7ff, 0x71fd}}) 09:15:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 3) [ 908.143699] ? lock_acquire+0x170/0x3f0 [ 908.143708] ? ioctl_preallocate+0x1a0/0x1a0 [ 908.143721] ? __fget+0x2df/0x460 [ 908.143732] ? do_vfs_ioctl+0xff0/0xff0 [ 908.143743] ? security_file_ioctl+0x83/0xb0 [ 908.143753] SyS_ioctl+0x7f/0xb0 [ 908.143760] ? do_vfs_ioctl+0xff0/0xff0 [ 908.143771] do_syscall_64+0x1d5/0x640 09:15:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x81, 0x2, 0x1, 0x0, 0x3}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x8001, 0x4, 0x47504a50, 0x9, 0x8, 0x7f, 0x1, 0x1ade, 0x1, 0x4, 0x2, 0x4}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) [ 908.143788] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 908.143796] RIP: 0033:0x7f8002e8f059 [ 908.143801] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.143812] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 908.143816] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 908.143822] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 908.143827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 09:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) (async) 09:15:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) (rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0x7, 0xfffffeff, {r2}, {}, 0x7fff, 0x100000001}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 09:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x50323234, 0x0, @stepwise={0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}) [ 908.143833] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 908.211996] FAULT_INJECTION: forcing a failure. [ 908.211996] name failslab, interval 1, probability 0, space 0, times 0 [ 908.276194] CPU: 0 PID: 13133 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 908.276202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.293709] Call Trace: 09:15:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x2, @vbi={0x8f, 0x7, 0x7fff, 0x32314d59, [0xd0, 0x1], [0x4, 0x9], 0x1}}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x4, 0xc000}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000200)={0x8, 0x30324c4a, 0x2, @stepwise={0x8, 0xf57, 0x7fff, 0x6, 0x7ff, 0x71fd}}) 09:15:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 4) 09:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x50323234, 0x0, @stepwise={0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x50323234, 0x0, @stepwise={0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}) (async) [ 908.293726] dump_stack+0x1b2/0x281 [ 908.293742] should_fail.cold+0x10a/0x149 [ 908.293755] should_failslab+0xd6/0x130 [ 908.293769] kmem_cache_alloc_node_trace+0x25a/0x400 [ 908.293783] __kmalloc_node+0x38/0x70 09:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) (async) 09:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x50323234, 0x0, @stepwise={0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}) 09:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 908.293795] blk_mq_alloc_tag_set+0x30f/0x910 [ 908.293811] loop_add+0x2a0/0x830 [ 908.293822] ? loop_queue_rq+0x280/0x280 [ 908.293830] ? loop_queue_work+0x21e0/0x21e0 09:15:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 5) [ 908.293844] loop_control_ioctl+0x11a/0x3f0 [ 908.293854] ? loop_lookup+0x190/0x190 [ 908.293862] ? SyS_write+0x1b7/0x210 [ 908.293875] ? loop_lookup+0x190/0x190 [ 908.293886] do_vfs_ioctl+0x75a/0xff0 [ 908.293898] ? lock_acquire+0x170/0x3f0 [ 908.293907] ? ioctl_preallocate+0x1a0/0x1a0 [ 908.293921] ? __fget+0x2df/0x460 [ 908.293931] ? do_vfs_ioctl+0xff0/0xff0 [ 908.293943] ? security_file_ioctl+0x83/0xb0 [ 908.293953] SyS_ioctl+0x7f/0xb0 [ 908.293961] ? do_vfs_ioctl+0xff0/0xff0 [ 908.293973] do_syscall_64+0x1d5/0x640 [ 908.293990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 908.293998] RIP: 0033:0x7f8002e8f059 [ 908.294004] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.294016] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 908.294022] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 908.294028] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 908.294033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.294039] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 908.398334] FAULT_INJECTION: forcing a failure. [ 908.398334] name failslab, interval 1, probability 0, space 0, times 0 [ 908.398345] CPU: 0 PID: 13155 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 908.398350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.398353] Call Trace: 09:15:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x81, 0x2, 0x1, 0x0, 0x3}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x8001, 0x4, 0x47504a50, 0x9, 0x8, 0x7f, 0x1, 0x1ade, 0x1, 0x4, 0x2, 0x4}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x81, 0x2, 0x1, 0x0, 0x3}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x8001, 0x4, 0x47504a50, 0x9, 0x8, 0x7f, 0x1, 0x1ade, 0x1, 0x4, 0x2, 0x4}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) 09:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (rerun: 64) [ 908.398367] dump_stack+0x1b2/0x281 [ 908.398382] should_fail.cold+0x10a/0x149 [ 908.398396] should_failslab+0xd6/0x130 [ 908.398410] kmem_cache_alloc_node_trace+0x25a/0x400 [ 908.398425] blk_mq_init_tags+0x5e/0x280 [ 908.398436] blk_mq_alloc_rq_map+0x90/0x220 [ 908.398449] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 908.398462] blk_mq_alloc_tag_set+0x4ac/0x910 [ 908.398476] loop_add+0x2a0/0x830 [ 908.398486] ? loop_queue_rq+0x280/0x280 [ 908.398493] ? loop_queue_work+0x21e0/0x21e0 [ 908.398506] loop_control_ioctl+0x11a/0x3f0 [ 908.398514] ? loop_lookup+0x190/0x190 [ 908.398522] ? SyS_write+0x1b7/0x210 [ 908.398534] ? loop_lookup+0x190/0x190 [ 908.398543] do_vfs_ioctl+0x75a/0xff0 [ 908.398554] ? lock_acquire+0x170/0x3f0 [ 908.398563] ? ioctl_preallocate+0x1a0/0x1a0 [ 908.398576] ? __fget+0x2df/0x460 [ 908.398586] ? do_vfs_ioctl+0xff0/0xff0 [ 908.398597] ? security_file_ioctl+0x83/0xb0 [ 908.398607] SyS_ioctl+0x7f/0xb0 [ 908.398615] ? do_vfs_ioctl+0xff0/0xff0 [ 908.398625] do_syscall_64+0x1d5/0x640 [ 908.398640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 908.398648] RIP: 0033:0x7f8002e8f059 [ 908.398653] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.398662] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 908.398668] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 908.398673] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 908.398678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.398683] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 908.398805] blk-mq: reduced tag depth (128 -> 64) [ 908.562126] FAULT_INJECTION: forcing a failure. [ 908.562126] name failslab, interval 1, probability 0, space 0, times 0 [ 908.758939] CPU: 1 PID: 13174 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 908.766824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.776258] Call Trace: [ 908.778846] dump_stack+0x1b2/0x281 [ 908.782475] should_fail.cold+0x10a/0x149 [ 908.786630] should_failslab+0xd6/0x130 [ 908.790619] kmem_cache_alloc_node_trace+0x25a/0x400 [ 908.795725] __kmalloc_node+0x38/0x70 [ 908.799526] sbitmap_init_node+0x10c/0x3d0 [ 908.803765] sbitmap_queue_init_node+0x37/0x5d0 [ 908.808434] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 908.813447] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 908.818756] blk_mq_init_tags+0xf4/0x280 [ 908.818770] blk_mq_alloc_rq_map+0x90/0x220 [ 908.818782] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 908.818796] blk_mq_alloc_tag_set+0x4ac/0x910 [ 908.818814] loop_add+0x2a0/0x830 [ 908.818824] ? loop_queue_rq+0x280/0x280 [ 908.818832] ? loop_queue_work+0x21e0/0x21e0 [ 908.818846] loop_control_ioctl+0x11a/0x3f0 [ 908.818855] ? loop_lookup+0x190/0x190 [ 908.818864] ? SyS_write+0x1b7/0x210 [ 908.818877] ? loop_lookup+0x190/0x190 [ 908.818887] do_vfs_ioctl+0x75a/0xff0 [ 908.818899] ? lock_acquire+0x170/0x3f0 [ 908.818909] ? ioctl_preallocate+0x1a0/0x1a0 [ 908.818922] ? __fget+0x2df/0x460 [ 908.818933] ? do_vfs_ioctl+0xff0/0xff0 [ 908.818945] ? security_file_ioctl+0x83/0xb0 [ 908.818956] SyS_ioctl+0x7f/0xb0 09:15:02 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)="bdcb2711f13a898071616d7c9e65b5e6a6a4bd446c563c8962fe90a6f53c02b00eff7594c30335bba5974a815b6556799f344d6b55588f50457c2aca8db787d684669c8d9f1cb45f806777dfc3e1b63d77079bf2bea2e314ca48c716e207fe490a90129eca6602f887fc27287e20cdf7037414f0e91952e38fe1cf3b88fb99229315fe8872dd350868c987df75d905bc047a455ea4b751a836cc86263eb5a17a2a933a742f4045262b7b5aea599fd543b4680cb92dc86fa0b7b8dc2e768b756be27ba4eb2e4b871bf4eb809812f9d55e7c925222", 0xd4}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="997380a72503094eb6cc5edabcae8ad3c1aac21139cfd8e12c763bd4639b2c0f232531f01032fa1cb6c7fe29c2e5089b4144d795181f4b730df89dd722792fb86c4f28352e88b68e1fb025bd619acc7b3d4ac361d79ac3e1d0fd2d98330f168dd6730eb78e0a3da36f9b124b7beb1ac0e20df3f8799641f268c414a44e8bcfaa48e2bac1c2fa9f779d0424d418cf978dc454683cee9a9f1b4d2ec10971aa9b6e87d7231dd98c1c5d17", 0xa9}, {&(0x7f0000001300)="b3e851cdaf2264d2b636506fad95933730c362416d6985b77a970352eccca66f0c05b4922e1c78ed1405f13018a644745a20e1004d5cb509a210070d6bb057009047a03c3030a2ea7be6003e4a5feca4f3fe7112da43fbe01dfbb116016a9a3ccf3700209d765c30b0c4f3b3102ba5531ab13f18dd8e69e04cfe6456e86993aa077cdc1da337c6ae18a8432f275441e47a7447f89e5671ecd972e438a386", 0x9e}, {&(0x7f0000000040)="9e5403c637451b4fc51e612ae21b30d0ccbceb10b003c56942c64dc18e8409fac47420b5cd7410ab08bbe92b38824f73148da5ee7f98", 0x36}, {&(0x7f00000013c0)="8d7bd37a6b848766e68af1804be27dac42d92531832bbe6fe82b208ce67ca42f83402f307aedf4ef8e3f37364cf5f4", 0x2f}, {&(0x7f0000001400)="62f3b734669d3dd6fac5d1bcf65b54916392acc3bd748c8f3125538beff5aa88b973335144c6adb501b0b10125dae929218f2af2e9e7ddeea237c3fd6249b6b98cd8623f700524d343dcb84f43523ec9c8d4f0f4398d32393fdc0882d51dca1d2db19be1e4cc04445867ab4e89d465edebdab7294d23cae63200b6c94ecb128b0bc734a148f3bc1d59aeedc009ebc45ea239060f415d677a1b4a71a37236bd27829070d929f348ee7747de6a1e5813d42d88bcd8df5ba07e96d2c13d954223f3c3fc63e7a426d49745e6be8542a52571b1296145357bb0cee9c614b1eb72a29a7371528efeb71f52da1ab67a6a", 0xed}, {&(0x7f0000001500)="894befe4c58aea2575e4edbe166711543d5cc9aefd0a7c64b345eddbff3169e489743f331f815d1fe3edbd4b53374ebc557737fa4e8d1ed471ebe615858e6c478cdd484b20dc54720a6aec9f9bc5f63658e3989b9c855665c5c5559d897ea7cddd", 0x61}], 0x8}}, {{&(0x7f0000001600)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x33, 0x40, "5f3260d155c0537a057e942f4f124a2f241743e80959da55d97d3c62c7c5e8e930ec4dfc9868a70a290ebe8fdef90db26f42bd162a8e9f244dbf921ccd3f10", 0x24}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001680)="dcd78a1f737e0dffb30d3bf9980c5d57a66a64814378ce0b95d62e85d54cc6f20ddcb97c744e255bb2ee23d0ab452031e0892d52bae68a1f35053f89956544a57cbfb18276fad579a95700ddb4d3e2c265c373712b3232275599e4bb1b941c0bc4b347ac274c9e7cbae47ae0b32137c1fcbf6134171055bdcd64c1c8689279100906ba080775fef0e691cf1f052567d3d18d8b2bc48d9b12ba4964fe6c09c19482ddb36597cd99c765a5cbda25247e0b1eca95432b00c5f6518478c46129291d25656e944e60e312d27a9b3da4270ebe2139", 0xd2}, {&(0x7f0000001780)="c64f07e56ba3900e65559ea137ca0cbc73c9064bdcbae5d4f2e3ae831886", 0x1e}], 0x2, &(0x7f0000001800)=[{0x40, 0x10f, 0x0, "feb10c156e6c4d1022016494fef7feb8fc2afb5405a67ec4c902d94d85a4d392f8ef5d219f9d27bccc9ec1f2e478"}, {0x38, 0x110, 0x7fffffff, "25e1f82dd6900b097d7641322d698a535e535ec2ed007d5b1a51000ccd97b63f9a24d178"}, {0x100, 0x114, 0x0, "ad983e092dccbd7e50f92ef77a1112b32ea6561d7b26938a50fa768187f22a0b373898fc2af1dd68f4ce91a52e7d59ecaefdf8e17343823081cf98088f78d389edba7bcee2f57d01c7a25f11857bba5613b8dd19977b9cb6066d57b3179debac0bd713e50ced0772694641c20659cad0b16e3f9174fd0ba75abebe4f8de48ba4a56eea4a5eebb4ccb4c9f99de0b31c7775d1707cd1334defd03ab455df8f74b349b3d81c1f2b4e90d6e54a6b48cf3ea2d0767b691393274dca465a1f6c498e881da458b3cbc1069b57e1d88e0dec99c02573a9ea00a20764c60f00a963b4a6c3259e4872a08b49a3d01c33915ca506a5"}], 0x178}}, {{&(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)="7e4d316712115f1176c12d616e975a27a55007a0", 0x14}, {&(0x7f0000001a40)="43ae", 0x2}, {&(0x7f0000001a80)="5605e8f3f441c33ac2a02922d1769662fe0041b40f4e865d24f8753a8e99903bcf3c987568a26fc46d5bb910cd9f7b7785fd1078234e49370449b161818d45b7dbd0dc34e5e982dd28f746ee096c5754208037a9682f906b7a7b811c40ac96a0503f6cb9657de055a585c637c1773946494874f6457999cb2be1101d6cb3209021514986c36e78e5bb5073f3c1356719215fa8d222ee9502d6f3e59ce0597ddde3518a7c4d4eec58817a40c3d1078aed10b94854", 0xb4}], 0x3, &(0x7f0000001b80)=[{0x88, 0x111, 0x3, "1790f5d35c80344dd1d6837f3fbed704c1c8660e2f2acae794494c88cd028cdcc1c019942a6c32df366be9c7326f30392c637c91f48e63957b9bb26fca20ef4f6f14b541f651136e9bad42ddd3ad25849caff2dc3c4a3453b24dc161dba362207c513be306c99770d8261b91ab15b6ce5a8d93ebe9"}, {0xa0, 0x10b, 0x0, "f0f8af596201893a0b51accced79fbb0b1e50169d74f4cd12248d90979b50c25d08e39f95a43113d0746da1119957e4151919d4aa783274ebbb1ba380880f396fb937f5cfe281d9bc9ab074413fb5c7160f6e2de0b9453cded1472cbc0ce481e4e68b70d5c2ab12bd321c531a22e7bcd34c3f39cee27b63ca1902d9f4779713d4c879f22c660f789c3e1d74ff2c8c9c3"}, {0xc0, 0x107, 0xfffffffc, "3e9c3d1764a7b9bcf673cda4934087d01a3e8d21d9a35c09323ad3fa7adcfd7faf2350346a3a745417d9417f8419471d30d0c65f20ef409f7b1003dcf5fa4cbe7e09fc22b1017928df75319721ebd75ab0864c6904357a7792940eb10e426e0be01d513c724d8a09b4d62b3804af159730116980bd9334a78b0716578f22ff46ed90273b9bdad3b777ff3a4d4d13d757288fd7d9059b0b1cd38995134ed57dae7c80dd03d9fa625f3c"}], 0x1e8}}], 0x3, 0x40100) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) (async) 09:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000000c0)) (rerun: 32) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0x2, @vbi={0x8f, 0x7, 0x7fff, 0x32314d59, [0xd0, 0x1], [0x4, 0x9], 0x1}}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x4, 0xc000}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000200)={0x8, 0x30324c4a, 0x2, @stepwise={0x8, 0xf57, 0x7fff, 0x6, 0x7ff, 0x71fd}}) 09:15:02 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x81, 0x2, 0x1, 0x0, 0x3}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async, rerun: 64) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000000)=0x1) (rerun: 64) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x8001, 0x4, 0x47504a50, 0x9, 0x8, 0x7f, 0x1, 0x1ade, 0x1, 0x4, 0x2, 0x4}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:02 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)="bdcb2711f13a898071616d7c9e65b5e6a6a4bd446c563c8962fe90a6f53c02b00eff7594c30335bba5974a815b6556799f344d6b55588f50457c2aca8db787d684669c8d9f1cb45f806777dfc3e1b63d77079bf2bea2e314ca48c716e207fe490a90129eca6602f887fc27287e20cdf7037414f0e91952e38fe1cf3b88fb99229315fe8872dd350868c987df75d905bc047a455ea4b751a836cc86263eb5a17a2a933a742f4045262b7b5aea599fd543b4680cb92dc86fa0b7b8dc2e768b756be27ba4eb2e4b871bf4eb809812f9d55e7c925222", 0xd4}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="997380a72503094eb6cc5edabcae8ad3c1aac21139cfd8e12c763bd4639b2c0f232531f01032fa1cb6c7fe29c2e5089b4144d795181f4b730df89dd722792fb86c4f28352e88b68e1fb025bd619acc7b3d4ac361d79ac3e1d0fd2d98330f168dd6730eb78e0a3da36f9b124b7beb1ac0e20df3f8799641f268c414a44e8bcfaa48e2bac1c2fa9f779d0424d418cf978dc454683cee9a9f1b4d2ec10971aa9b6e87d7231dd98c1c5d17", 0xa9}, {&(0x7f0000001300)="b3e851cdaf2264d2b636506fad95933730c362416d6985b77a970352eccca66f0c05b4922e1c78ed1405f13018a644745a20e1004d5cb509a210070d6bb057009047a03c3030a2ea7be6003e4a5feca4f3fe7112da43fbe01dfbb116016a9a3ccf3700209d765c30b0c4f3b3102ba5531ab13f18dd8e69e04cfe6456e86993aa077cdc1da337c6ae18a8432f275441e47a7447f89e5671ecd972e438a386", 0x9e}, {&(0x7f0000000040)="9e5403c637451b4fc51e612ae21b30d0ccbceb10b003c56942c64dc18e8409fac47420b5cd7410ab08bbe92b38824f73148da5ee7f98", 0x36}, {&(0x7f00000013c0)="8d7bd37a6b848766e68af1804be27dac42d92531832bbe6fe82b208ce67ca42f83402f307aedf4ef8e3f37364cf5f4", 0x2f}, {&(0x7f0000001400)="62f3b734669d3dd6fac5d1bcf65b54916392acc3bd748c8f3125538beff5aa88b973335144c6adb501b0b10125dae929218f2af2e9e7ddeea237c3fd6249b6b98cd8623f700524d343dcb84f43523ec9c8d4f0f4398d32393fdc0882d51dca1d2db19be1e4cc04445867ab4e89d465edebdab7294d23cae63200b6c94ecb128b0bc734a148f3bc1d59aeedc009ebc45ea239060f415d677a1b4a71a37236bd27829070d929f348ee7747de6a1e5813d42d88bcd8df5ba07e96d2c13d954223f3c3fc63e7a426d49745e6be8542a52571b1296145357bb0cee9c614b1eb72a29a7371528efeb71f52da1ab67a6a", 0xed}, {&(0x7f0000001500)="894befe4c58aea2575e4edbe166711543d5cc9aefd0a7c64b345eddbff3169e489743f331f815d1fe3edbd4b53374ebc557737fa4e8d1ed471ebe615858e6c478cdd484b20dc54720a6aec9f9bc5f63658e3989b9c855665c5c5559d897ea7cddd", 0x61}], 0x8}}, {{&(0x7f0000001600)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x33, 0x40, "5f3260d155c0537a057e942f4f124a2f241743e80959da55d97d3c62c7c5e8e930ec4dfc9868a70a290ebe8fdef90db26f42bd162a8e9f244dbf921ccd3f10", 0x24}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001680)="dcd78a1f737e0dffb30d3bf9980c5d57a66a64814378ce0b95d62e85d54cc6f20ddcb97c744e255bb2ee23d0ab452031e0892d52bae68a1f35053f89956544a57cbfb18276fad579a95700ddb4d3e2c265c373712b3232275599e4bb1b941c0bc4b347ac274c9e7cbae47ae0b32137c1fcbf6134171055bdcd64c1c8689279100906ba080775fef0e691cf1f052567d3d18d8b2bc48d9b12ba4964fe6c09c19482ddb36597cd99c765a5cbda25247e0b1eca95432b00c5f6518478c46129291d25656e944e60e312d27a9b3da4270ebe2139", 0xd2}, {&(0x7f0000001780)="c64f07e56ba3900e65559ea137ca0cbc73c9064bdcbae5d4f2e3ae831886", 0x1e}], 0x2, &(0x7f0000001800)=[{0x40, 0x10f, 0x0, "feb10c156e6c4d1022016494fef7feb8fc2afb5405a67ec4c902d94d85a4d392f8ef5d219f9d27bccc9ec1f2e478"}, {0x38, 0x110, 0x7fffffff, "25e1f82dd6900b097d7641322d698a535e535ec2ed007d5b1a51000ccd97b63f9a24d178"}, {0x100, 0x114, 0x0, "ad983e092dccbd7e50f92ef77a1112b32ea6561d7b26938a50fa768187f22a0b373898fc2af1dd68f4ce91a52e7d59ecaefdf8e17343823081cf98088f78d389edba7bcee2f57d01c7a25f11857bba5613b8dd19977b9cb6066d57b3179debac0bd713e50ced0772694641c20659cad0b16e3f9174fd0ba75abebe4f8de48ba4a56eea4a5eebb4ccb4c9f99de0b31c7775d1707cd1334defd03ab455df8f74b349b3d81c1f2b4e90d6e54a6b48cf3ea2d0767b691393274dca465a1f6c498e881da458b3cbc1069b57e1d88e0dec99c02573a9ea00a20764c60f00a963b4a6c3259e4872a08b49a3d01c33915ca506a5"}], 0x178}}, {{&(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)="7e4d316712115f1176c12d616e975a27a55007a0", 0x14}, {&(0x7f0000001a40)="43ae", 0x2}, {&(0x7f0000001a80)="5605e8f3f441c33ac2a02922d1769662fe0041b40f4e865d24f8753a8e99903bcf3c987568a26fc46d5bb910cd9f7b7785fd1078234e49370449b161818d45b7dbd0dc34e5e982dd28f746ee096c5754208037a9682f906b7a7b811c40ac96a0503f6cb9657de055a585c637c1773946494874f6457999cb2be1101d6cb3209021514986c36e78e5bb5073f3c1356719215fa8d222ee9502d6f3e59ce0597ddde3518a7c4d4eec58817a40c3d1078aed10b94854", 0xb4}], 0x3, &(0x7f0000001b80)=[{0x88, 0x111, 0x3, "1790f5d35c80344dd1d6837f3fbed704c1c8660e2f2acae794494c88cd028cdcc1c019942a6c32df366be9c7326f30392c637c91f48e63957b9bb26fca20ef4f6f14b541f651136e9bad42ddd3ad25849caff2dc3c4a3453b24dc161dba362207c513be306c99770d8261b91ab15b6ce5a8d93ebe9"}, {0xa0, 0x10b, 0x0, "f0f8af596201893a0b51accced79fbb0b1e50169d74f4cd12248d90979b50c25d08e39f95a43113d0746da1119957e4151919d4aa783274ebbb1ba380880f396fb937f5cfe281d9bc9ab074413fb5c7160f6e2de0b9453cded1472cbc0ce481e4e68b70d5c2ab12bd321c531a22e7bcd34c3f39cee27b63ca1902d9f4779713d4c879f22c660f789c3e1d74ff2c8c9c3"}, {0xc0, 0x107, 0xfffffffc, "3e9c3d1764a7b9bcf673cda4934087d01a3e8d21d9a35c09323ad3fa7adcfd7faf2350346a3a745417d9417f8419471d30d0c65f20ef409f7b1003dcf5fa4cbe7e09fc22b1017928df75319721ebd75ab0864c6904357a7792940eb10e426e0be01d513c724d8a09b4d62b3804af159730116980bd9334a78b0716578f22ff46ed90273b9bdad3b777ff3a4d4d13d757288fd7d9059b0b1cd38995134ed57dae7c80dd03d9fa625f3c"}], 0x1e8}}], 0x3, 0x40100) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:02 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)="bdcb2711f13a898071616d7c9e65b5e6a6a4bd446c563c8962fe90a6f53c02b00eff7594c30335bba5974a815b6556799f344d6b55588f50457c2aca8db787d684669c8d9f1cb45f806777dfc3e1b63d77079bf2bea2e314ca48c716e207fe490a90129eca6602f887fc27287e20cdf7037414f0e91952e38fe1cf3b88fb99229315fe8872dd350868c987df75d905bc047a455ea4b751a836cc86263eb5a17a2a933a742f4045262b7b5aea599fd543b4680cb92dc86fa0b7b8dc2e768b756be27ba4eb2e4b871bf4eb809812f9d55e7c925222", 0xd4}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="997380a72503094eb6cc5edabcae8ad3c1aac21139cfd8e12c763bd4639b2c0f232531f01032fa1cb6c7fe29c2e5089b4144d795181f4b730df89dd722792fb86c4f28352e88b68e1fb025bd619acc7b3d4ac361d79ac3e1d0fd2d98330f168dd6730eb78e0a3da36f9b124b7beb1ac0e20df3f8799641f268c414a44e8bcfaa48e2bac1c2fa9f779d0424d418cf978dc454683cee9a9f1b4d2ec10971aa9b6e87d7231dd98c1c5d17", 0xa9}, {&(0x7f0000001300)="b3e851cdaf2264d2b636506fad95933730c362416d6985b77a970352eccca66f0c05b4922e1c78ed1405f13018a644745a20e1004d5cb509a210070d6bb057009047a03c3030a2ea7be6003e4a5feca4f3fe7112da43fbe01dfbb116016a9a3ccf3700209d765c30b0c4f3b3102ba5531ab13f18dd8e69e04cfe6456e86993aa077cdc1da337c6ae18a8432f275441e47a7447f89e5671ecd972e438a386", 0x9e}, {&(0x7f0000000040)="9e5403c637451b4fc51e612ae21b30d0ccbceb10b003c56942c64dc18e8409fac47420b5cd7410ab08bbe92b38824f73148da5ee7f98", 0x36}, {&(0x7f00000013c0)="8d7bd37a6b848766e68af1804be27dac42d92531832bbe6fe82b208ce67ca42f83402f307aedf4ef8e3f37364cf5f4", 0x2f}, {&(0x7f0000001400)="62f3b734669d3dd6fac5d1bcf65b54916392acc3bd748c8f3125538beff5aa88b973335144c6adb501b0b10125dae929218f2af2e9e7ddeea237c3fd6249b6b98cd8623f700524d343dcb84f43523ec9c8d4f0f4398d32393fdc0882d51dca1d2db19be1e4cc04445867ab4e89d465edebdab7294d23cae63200b6c94ecb128b0bc734a148f3bc1d59aeedc009ebc45ea239060f415d677a1b4a71a37236bd27829070d929f348ee7747de6a1e5813d42d88bcd8df5ba07e96d2c13d954223f3c3fc63e7a426d49745e6be8542a52571b1296145357bb0cee9c614b1eb72a29a7371528efeb71f52da1ab67a6a", 0xed}, {&(0x7f0000001500)="894befe4c58aea2575e4edbe166711543d5cc9aefd0a7c64b345eddbff3169e489743f331f815d1fe3edbd4b53374ebc557737fa4e8d1ed471ebe615858e6c478cdd484b20dc54720a6aec9f9bc5f63658e3989b9c855665c5c5559d897ea7cddd", 0x61}], 0x8}}, {{&(0x7f0000001600)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x33, 0x40, "5f3260d155c0537a057e942f4f124a2f241743e80959da55d97d3c62c7c5e8e930ec4dfc9868a70a290ebe8fdef90db26f42bd162a8e9f244dbf921ccd3f10", 0x24}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001680)="dcd78a1f737e0dffb30d3bf9980c5d57a66a64814378ce0b95d62e85d54cc6f20ddcb97c744e255bb2ee23d0ab452031e0892d52bae68a1f35053f89956544a57cbfb18276fad579a95700ddb4d3e2c265c373712b3232275599e4bb1b941c0bc4b347ac274c9e7cbae47ae0b32137c1fcbf6134171055bdcd64c1c8689279100906ba080775fef0e691cf1f052567d3d18d8b2bc48d9b12ba4964fe6c09c19482ddb36597cd99c765a5cbda25247e0b1eca95432b00c5f6518478c46129291d25656e944e60e312d27a9b3da4270ebe2139", 0xd2}, {&(0x7f0000001780)="c64f07e56ba3900e65559ea137ca0cbc73c9064bdcbae5d4f2e3ae831886", 0x1e}], 0x2, &(0x7f0000001800)=[{0x40, 0x10f, 0x0, "feb10c156e6c4d1022016494fef7feb8fc2afb5405a67ec4c902d94d85a4d392f8ef5d219f9d27bccc9ec1f2e478"}, {0x38, 0x110, 0x7fffffff, "25e1f82dd6900b097d7641322d698a535e535ec2ed007d5b1a51000ccd97b63f9a24d178"}, {0x100, 0x114, 0x0, "ad983e092dccbd7e50f92ef77a1112b32ea6561d7b26938a50fa768187f22a0b373898fc2af1dd68f4ce91a52e7d59ecaefdf8e17343823081cf98088f78d389edba7bcee2f57d01c7a25f11857bba5613b8dd19977b9cb6066d57b3179debac0bd713e50ced0772694641c20659cad0b16e3f9174fd0ba75abebe4f8de48ba4a56eea4a5eebb4ccb4c9f99de0b31c7775d1707cd1334defd03ab455df8f74b349b3d81c1f2b4e90d6e54a6b48cf3ea2d0767b691393274dca465a1f6c498e881da458b3cbc1069b57e1d88e0dec99c02573a9ea00a20764c60f00a963b4a6c3259e4872a08b49a3d01c33915ca506a5"}], 0x178}}, {{&(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)="7e4d316712115f1176c12d616e975a27a55007a0", 0x14}, {&(0x7f0000001a40)="43ae", 0x2}, {&(0x7f0000001a80)="5605e8f3f441c33ac2a02922d1769662fe0041b40f4e865d24f8753a8e99903bcf3c987568a26fc46d5bb910cd9f7b7785fd1078234e49370449b161818d45b7dbd0dc34e5e982dd28f746ee096c5754208037a9682f906b7a7b811c40ac96a0503f6cb9657de055a585c637c1773946494874f6457999cb2be1101d6cb3209021514986c36e78e5bb5073f3c1356719215fa8d222ee9502d6f3e59ce0597ddde3518a7c4d4eec58817a40c3d1078aed10b94854", 0xb4}], 0x3, &(0x7f0000001b80)=[{0x88, 0x111, 0x3, "1790f5d35c80344dd1d6837f3fbed704c1c8660e2f2acae794494c88cd028cdcc1c019942a6c32df366be9c7326f30392c637c91f48e63957b9bb26fca20ef4f6f14b541f651136e9bad42ddd3ad25849caff2dc3c4a3453b24dc161dba362207c513be306c99770d8261b91ab15b6ce5a8d93ebe9"}, {0xa0, 0x10b, 0x0, "f0f8af596201893a0b51accced79fbb0b1e50169d74f4cd12248d90979b50c25d08e39f95a43113d0746da1119957e4151919d4aa783274ebbb1ba380880f396fb937f5cfe281d9bc9ab074413fb5c7160f6e2de0b9453cded1472cbc0ce481e4e68b70d5c2ab12bd321c531a22e7bcd34c3f39cee27b63ca1902d9f4779713d4c879f22c660f789c3e1d74ff2c8c9c3"}, {0xc0, 0x107, 0xfffffffc, "3e9c3d1764a7b9bcf673cda4934087d01a3e8d21d9a35c09323ad3fa7adcfd7faf2350346a3a745417d9417f8419471d30d0c65f20ef409f7b1003dcf5fa4cbe7e09fc22b1017928df75319721ebd75ab0864c6904357a7792940eb10e426e0be01d513c724d8a09b4d62b3804af159730116980bd9334a78b0716578f22ff46ed90273b9bdad3b777ff3a4d4d13d757288fd7d9059b0b1cd38995134ed57dae7c80dd03d9fa625f3c"}], 0x1e8}}], 0x3, 0x40100) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000001580)=[{&(0x7f0000000140)="bdcb2711f13a898071616d7c9e65b5e6a6a4bd446c563c8962fe90a6f53c02b00eff7594c30335bba5974a815b6556799f344d6b55588f50457c2aca8db787d684669c8d9f1cb45f806777dfc3e1b63d77079bf2bea2e314ca48c716e207fe490a90129eca6602f887fc27287e20cdf7037414f0e91952e38fe1cf3b88fb99229315fe8872dd350868c987df75d905bc047a455ea4b751a836cc86263eb5a17a2a933a742f4045262b7b5aea599fd543b4680cb92dc86fa0b7b8dc2e768b756be27ba4eb2e4b871bf4eb809812f9d55e7c925222", 0xd4}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="997380a72503094eb6cc5edabcae8ad3c1aac21139cfd8e12c763bd4639b2c0f232531f01032fa1cb6c7fe29c2e5089b4144d795181f4b730df89dd722792fb86c4f28352e88b68e1fb025bd619acc7b3d4ac361d79ac3e1d0fd2d98330f168dd6730eb78e0a3da36f9b124b7beb1ac0e20df3f8799641f268c414a44e8bcfaa48e2bac1c2fa9f779d0424d418cf978dc454683cee9a9f1b4d2ec10971aa9b6e87d7231dd98c1c5d17", 0xa9}, {&(0x7f0000001300)="b3e851cdaf2264d2b636506fad95933730c362416d6985b77a970352eccca66f0c05b4922e1c78ed1405f13018a644745a20e1004d5cb509a210070d6bb057009047a03c3030a2ea7be6003e4a5feca4f3fe7112da43fbe01dfbb116016a9a3ccf3700209d765c30b0c4f3b3102ba5531ab13f18dd8e69e04cfe6456e86993aa077cdc1da337c6ae18a8432f275441e47a7447f89e5671ecd972e438a386", 0x9e}, {&(0x7f0000000040)="9e5403c637451b4fc51e612ae21b30d0ccbceb10b003c56942c64dc18e8409fac47420b5cd7410ab08bbe92b38824f73148da5ee7f98", 0x36}, {&(0x7f00000013c0)="8d7bd37a6b848766e68af1804be27dac42d92531832bbe6fe82b208ce67ca42f83402f307aedf4ef8e3f37364cf5f4", 0x2f}, {&(0x7f0000001400)="62f3b734669d3dd6fac5d1bcf65b54916392acc3bd748c8f3125538beff5aa88b973335144c6adb501b0b10125dae929218f2af2e9e7ddeea237c3fd6249b6b98cd8623f700524d343dcb84f43523ec9c8d4f0f4398d32393fdc0882d51dca1d2db19be1e4cc04445867ab4e89d465edebdab7294d23cae63200b6c94ecb128b0bc734a148f3bc1d59aeedc009ebc45ea239060f415d677a1b4a71a37236bd27829070d929f348ee7747de6a1e5813d42d88bcd8df5ba07e96d2c13d954223f3c3fc63e7a426d49745e6be8542a52571b1296145357bb0cee9c614b1eb72a29a7371528efeb71f52da1ab67a6a", 0xed}, {&(0x7f0000001500)="894befe4c58aea2575e4edbe166711543d5cc9aefd0a7c64b345eddbff3169e489743f331f815d1fe3edbd4b53374ebc557737fa4e8d1ed471ebe615858e6c478cdd484b20dc54720a6aec9f9bc5f63658e3989b9c855665c5c5559d897ea7cddd", 0x61}], 0x8}}, {{&(0x7f0000001600)=@nfc_llcp={0x27, 0x0, 0x1, 0x1, 0x33, 0x40, "5f3260d155c0537a057e942f4f124a2f241743e80959da55d97d3c62c7c5e8e930ec4dfc9868a70a290ebe8fdef90db26f42bd162a8e9f244dbf921ccd3f10", 0x24}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001680)="dcd78a1f737e0dffb30d3bf9980c5d57a66a64814378ce0b95d62e85d54cc6f20ddcb97c744e255bb2ee23d0ab452031e0892d52bae68a1f35053f89956544a57cbfb18276fad579a95700ddb4d3e2c265c373712b3232275599e4bb1b941c0bc4b347ac274c9e7cbae47ae0b32137c1fcbf6134171055bdcd64c1c8689279100906ba080775fef0e691cf1f052567d3d18d8b2bc48d9b12ba4964fe6c09c19482ddb36597cd99c765a5cbda25247e0b1eca95432b00c5f6518478c46129291d25656e944e60e312d27a9b3da4270ebe2139", 0xd2}, {&(0x7f0000001780)="c64f07e56ba3900e65559ea137ca0cbc73c9064bdcbae5d4f2e3ae831886", 0x1e}], 0x2, &(0x7f0000001800)=[{0x40, 0x10f, 0x0, "feb10c156e6c4d1022016494fef7feb8fc2afb5405a67ec4c902d94d85a4d392f8ef5d219f9d27bccc9ec1f2e478"}, {0x38, 0x110, 0x7fffffff, "25e1f82dd6900b097d7641322d698a535e535ec2ed007d5b1a51000ccd97b63f9a24d178"}, {0x100, 0x114, 0x0, "ad983e092dccbd7e50f92ef77a1112b32ea6561d7b26938a50fa768187f22a0b373898fc2af1dd68f4ce91a52e7d59ecaefdf8e17343823081cf98088f78d389edba7bcee2f57d01c7a25f11857bba5613b8dd19977b9cb6066d57b3179debac0bd713e50ced0772694641c20659cad0b16e3f9174fd0ba75abebe4f8de48ba4a56eea4a5eebb4ccb4c9f99de0b31c7775d1707cd1334defd03ab455df8f74b349b3d81c1f2b4e90d6e54a6b48cf3ea2d0767b691393274dca465a1f6c498e881da458b3cbc1069b57e1d88e0dec99c02573a9ea00a20764c60f00a963b4a6c3259e4872a08b49a3d01c33915ca506a5"}], 0x178}}, {{&(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x1, 0x4}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)="7e4d316712115f1176c12d616e975a27a55007a0", 0x14}, {&(0x7f0000001a40)="43ae", 0x2}, {&(0x7f0000001a80)="5605e8f3f441c33ac2a02922d1769662fe0041b40f4e865d24f8753a8e99903bcf3c987568a26fc46d5bb910cd9f7b7785fd1078234e49370449b161818d45b7dbd0dc34e5e982dd28f746ee096c5754208037a9682f906b7a7b811c40ac96a0503f6cb9657de055a585c637c1773946494874f6457999cb2be1101d6cb3209021514986c36e78e5bb5073f3c1356719215fa8d222ee9502d6f3e59ce0597ddde3518a7c4d4eec58817a40c3d1078aed10b94854", 0xb4}], 0x3, &(0x7f0000001b80)=[{0x88, 0x111, 0x3, "1790f5d35c80344dd1d6837f3fbed704c1c8660e2f2acae794494c88cd028cdcc1c019942a6c32df366be9c7326f30392c637c91f48e63957b9bb26fca20ef4f6f14b541f651136e9bad42ddd3ad25849caff2dc3c4a3453b24dc161dba362207c513be306c99770d8261b91ab15b6ce5a8d93ebe9"}, {0xa0, 0x10b, 0x0, "f0f8af596201893a0b51accced79fbb0b1e50169d74f4cd12248d90979b50c25d08e39f95a43113d0746da1119957e4151919d4aa783274ebbb1ba380880f396fb937f5cfe281d9bc9ab074413fb5c7160f6e2de0b9453cded1472cbc0ce481e4e68b70d5c2ab12bd321c531a22e7bcd34c3f39cee27b63ca1902d9f4779713d4c879f22c660f789c3e1d74ff2c8c9c3"}, {0xc0, 0x107, 0xfffffffc, "3e9c3d1764a7b9bcf673cda4934087d01a3e8d21d9a35c09323ad3fa7adcfd7faf2350346a3a745417d9417f8419471d30d0c65f20ef409f7b1003dcf5fa4cbe7e09fc22b1017928df75319721ebd75ab0864c6904357a7792940eb10e426e0be01d513c724d8a09b4d62b3804af159730116980bd9334a78b0716578f22ff46ed90273b9bdad3b777ff3a4d4d13d757288fd7d9059b0b1cd38995134ed57dae7c80dd03d9fa625f3c"}], 0x1e8}}], 0x3, 0x40100) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) 09:15:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) setsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)="5fb4d305977ca15c2b48c49f6aa963a3fc7bf0978d864312f7d401946c856bd63471feb098d5a73913a4524e69f35343578248d249", 0x35) [ 908.818963] ? do_vfs_ioctl+0xff0/0xff0 [ 908.818976] do_syscall_64+0x1d5/0x640 [ 908.818992] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 908.904204] RIP: 0033:0x7f8002e8f059 [ 908.904210] RSP: 002b:00007f80017e3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.904221] RAX: ffffffffffffffda RBX: 00007f8002fa2030 RCX: 00007f8002e8f059 [ 908.904227] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 908.904231] RBP: 00007f80017e31d0 R08: 0000000000000000 R09: 0000000000000000 09:15:02 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 6) 09:15:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) setsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)="5fb4d305977ca15c2b48c49f6aa963a3fc7bf0978d864312f7d401946c856bd63471feb098d5a73913a4524e69f35343578248d249", 0x35) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) (async) setsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)="5fb4d305977ca15c2b48c49f6aa963a3fc7bf0978d864312f7d401946c856bd63471feb098d5a73913a4524e69f35343578248d249", 0x35) (async) 09:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x1, 0x0, "57bf2f0800000100000000dbd3f70086b0549a76001e000d00", 0x79647211}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002500)) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000400)=@multiplanar_overlay={0x1, 0x0, 0x4, 0x4000, 0x5, {0x77359400}, {0x1, 0x8, 0x8, 0x9, 0x81, 0x6, "3d964ba9"}, 0x556, 0x3, {&(0x7f0000000380)=[{0xb52, 0x7ff, {0x2}, 0x5}, {0x7fffffff, 0x9, {}, 0x200}]}, 0x4, 0x0, r3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3f, 0x7ff, 0x4, {0x1, @vbi={0x7, 0x3, 0x0, 0x34424752, [0x1, 0x6], [0x7, 0xfffff001], 0x1}}, 0x31e}) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r5, 0x89e5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002540), &(0x7f0000002580)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x480040, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000300)=0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0)) 09:15:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) setsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)="5fb4d305977ca15c2b48c49f6aa963a3fc7bf0978d864312f7d401946c856bd63471feb098d5a73913a4524e69f35343578248d249", 0x35) 09:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:02 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xea29f164d6c1f3e1, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x9, 0x3, 0x2, 0x0, 0x4}) [ 908.904236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.904242] R13: 00007ffc84c8294f R14: 00007f80017e3300 R15: 0000000000022000 [ 908.970797] blk-mq: reduced tag depth (128 -> 64) 09:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (rerun: 32) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x1, 0x0, "57bf2f0800000100000000dbd3f70086b0549a76001e000d00", 0x79647211}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002500)) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000400)=@multiplanar_overlay={0x1, 0x0, 0x4, 0x4000, 0x5, {0x77359400}, {0x1, 0x8, 0x8, 0x9, 0x81, 0x6, "3d964ba9"}, 0x556, 0x3, {&(0x7f0000000380)=[{0xb52, 0x7ff, {0x2}, 0x5}, {0x7fffffff, 0x9, {}, 0x200}]}, 0x4, 0x0, r3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3f, 0x7ff, 0x4, {0x1, @vbi={0x7, 0x3, 0x0, 0x34424752, [0x1, 0x6], [0x7, 0xfffff001], 0x1}}, 0x31e}) (async, rerun: 64) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) (async, rerun: 32) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r5, 0x89e5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002540), &(0x7f0000002580)=0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x480040, 0x0) (async) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000300)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0)) 09:15:02 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xea29f164d6c1f3e1, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x9, 0x3, 0x2, 0x0, 0x4}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xea29f164d6c1f3e1, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x9, 0x3, 0x2, 0x0, 0x4}) (async) 09:15:02 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:02 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) (async) setsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)="5fb4d305977ca15c2b48c49f6aa963a3fc7bf0978d864312f7d401946c856bd63471feb098d5a73913a4524e69f35343578248d249", 0x35) 09:15:02 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x1, @stepwise={0xffffffff}}) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)=0xfffffff8) [ 909.063821] FAULT_INJECTION: forcing a failure. [ 909.063821] name failslab, interval 1, probability 0, space 0, times 0 [ 909.100848] CPU: 1 PID: 13233 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 09:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) [ 909.108772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.108777] Call Trace: [ 909.108794] dump_stack+0x1b2/0x281 09:15:03 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 7) 09:15:03 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xea29f164d6c1f3e1, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x9, 0x3, 0x2, 0x0, 0x4}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xea29f164d6c1f3e1, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x9, 0x3, 0x2, 0x0, 0x4}) (async) 09:15:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x1, 0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:03 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x1, @stepwise={0xffffffff}}) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)=0xfffffff8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x1, @stepwise={0xffffffff}}) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)=0xfffffff8) (async) [ 909.108810] should_fail.cold+0x10a/0x149 09:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) [ 909.108825] should_failslab+0xd6/0x130 [ 909.108839] kmem_cache_alloc_node_trace+0x25a/0x400 [ 909.108854] sbitmap_queue_init_node+0x27f/0x5d0 09:15:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) [ 909.108867] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 909.108880] blk_mq_init_tags+0xf4/0x280 [ 909.108893] blk_mq_alloc_rq_map+0x90/0x220 [ 909.108906] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 909.108920] blk_mq_alloc_tag_set+0x4ac/0x910 [ 909.108938] loop_add+0x2a0/0x830 [ 909.108948] ? loop_queue_rq+0x280/0x280 [ 909.108956] ? loop_queue_work+0x21e0/0x21e0 [ 909.108970] loop_control_ioctl+0x11a/0x3f0 [ 909.108979] ? loop_lookup+0x190/0x190 [ 909.108987] ? SyS_write+0x1b7/0x210 [ 909.109000] ? loop_lookup+0x190/0x190 [ 909.109011] do_vfs_ioctl+0x75a/0xff0 [ 909.109023] ? lock_acquire+0x170/0x3f0 [ 909.109037] ? ioctl_preallocate+0x1a0/0x1a0 [ 909.109051] ? __fget+0x2df/0x460 [ 909.109062] ? do_vfs_ioctl+0xff0/0xff0 [ 909.109073] ? security_file_ioctl+0x83/0xb0 [ 909.109084] SyS_ioctl+0x7f/0xb0 [ 909.109092] ? do_vfs_ioctl+0xff0/0xff0 [ 909.109104] do_syscall_64+0x1d5/0x640 [ 909.109120] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 909.109129] RIP: 0033:0x7f8002e8f059 [ 909.109134] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.109145] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 909.109151] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 909.109156] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 909.109162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.109167] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 909.138008] blk-mq: reduced tag depth (128 -> 64) [ 909.275452] FAULT_INJECTION: forcing a failure. [ 909.275452] name failslab, interval 1, probability 0, space 0, times 0 [ 909.409363] CPU: 0 PID: 13277 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 909.409371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.426794] Call Trace: [ 909.426811] dump_stack+0x1b2/0x281 [ 909.426825] should_fail.cold+0x10a/0x149 [ 909.437194] should_failslab+0xd6/0x130 [ 909.437207] kmem_cache_alloc_node_trace+0x25a/0x400 [ 909.437221] sbitmap_queue_init_node+0x27f/0x5d0 [ 909.451025] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 909.451042] blk_mq_init_tags+0x14b/0x280 [ 909.460455] blk_mq_alloc_rq_map+0x90/0x220 [ 909.460470] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 909.469280] blk_mq_alloc_tag_set+0x4ac/0x910 [ 909.469296] loop_add+0x2a0/0x830 [ 909.477220] ? loop_queue_rq+0x280/0x280 [ 909.477228] ? loop_queue_work+0x21e0/0x21e0 [ 909.477240] loop_control_ioctl+0x11a/0x3f0 [ 909.490003] ? loop_lookup+0x190/0x190 [ 909.490013] ? SyS_write+0x1b7/0x210 [ 909.490024] ? loop_lookup+0x190/0x190 [ 909.501455] do_vfs_ioctl+0x75a/0xff0 [ 909.501466] ? lock_acquire+0x170/0x3f0 [ 909.501475] ? ioctl_preallocate+0x1a0/0x1a0 [ 909.513627] ? __fget+0x2df/0x460 [ 909.513639] ? do_vfs_ioctl+0xff0/0xff0 [ 909.521056] ? security_file_ioctl+0x83/0xb0 [ 909.521066] SyS_ioctl+0x7f/0xb0 [ 909.521075] ? do_vfs_ioctl+0xff0/0xff0 [ 909.533114] do_syscall_64+0x1d5/0x640 [ 909.533130] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 909.542175] RIP: 0033:0x7f8002e8f059 [ 909.542180] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.542192] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 909.560869] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 909.560875] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 909.560879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.560884] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x1, 0x0, "57bf2f0800000100000000dbd3f70086b0549a76001e000d00", 0x79647211}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002500)) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000400)=@multiplanar_overlay={0x1, 0x0, 0x4, 0x4000, 0x5, {0x77359400}, {0x1, 0x8, 0x8, 0x9, 0x81, 0x6, "3d964ba9"}, 0x556, 0x3, {&(0x7f0000000380)=[{0xb52, 0x7ff, {0x2}, 0x5}, {0x7fffffff, 0x9, {}, 0x200}]}, 0x4, 0x0, r3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3f, 0x7ff, 0x4, {0x1, @vbi={0x7, 0x3, 0x0, 0x34424752, [0x1, 0x6], [0x7, 0xfffff001], 0x1}}, 0x31e}) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r5, 0x89e5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002540), &(0x7f0000002580)=0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x480040, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000300)=0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x6, 0x1, 0x0, "57bf2f0800000100000000dbd3f70086b0549a76001e000d00", 0x79647211}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002500)) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000400)=@multiplanar_overlay={0x1, 0x0, 0x4, 0x4000, 0x5, {0x77359400}, {0x1, 0x8, 0x8, 0x9, 0x81, 0x6, "3d964ba9"}, 0x556, 0x3, {&(0x7f0000000380)=[{0xb52, 0x7ff, {0x2}, 0x5}, {0x7fffffff, 0x9, {}, 0x200}]}, 0x4, 0x0, r3}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3f, 0x7ff, 0x4, {0x1, @vbi={0x7, 0x3, 0x0, 0x34424752, [0x1, 0x6], [0x7, 0xfffff001], 0x1}}, 0x31e}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSGL2CALL(r5, 0x89e5, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002540), &(0x7f0000002580)=0xc) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x480040, 0x0) (async) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000300)=0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000000c0)) (async) 09:15:03 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x1, @stepwise={0xffffffff}}) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)=0xfffffff8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x1, @stepwise={0xffffffff}}) (async) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)=0xfffffff8) (async) 09:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x1, 0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:03 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 8) [ 909.565263] blk-mq: reduced tag depth (128 -> 64) 09:15:03 executing program 4: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:03 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x8616}, 0x8) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x1, 0x0, 0x4}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x1, 0x0, 0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) 09:15:03 executing program 4: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @pix={0x1, 0x7, 0x4c314356, 0x8, 0x1, 0x0, 0x5, 0x10001, 0x1, 0x3, 0x0, 0x1}}) 09:15:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x1, 0x5326f14abba4560c, 0x4, 0xe004, 0xfffffffe, {r1, r2/1000+60000}, {0x4, 0x0, 0x9, 0x4, 0xff, 0x9, "a3298c4e"}, 0x9, 0x2, {&(0x7f00000001c0)=[{0x40, 0x3f, {&(0x7f0000000140)}, 0x6}, {0x8000, 0x3, {&(0x7f0000000180)}, 0x7fff}]}, 0xad, 0x0, r3}) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000300)=@overlay={0x8000, 0x1, 0x4, 0x20, 0x1f, {}, {0x3, 0x0, 0x1, 0x3, 0x1f, 0x4, "2f3bc0f7"}, 0x43365f35, 0x3, {}, 0x3, 0x0, r4}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000000c0)={0x0, 0x2618, 0xdfb6, 0x4000}) 09:15:03 executing program 4: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:03 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x8616}, 0x8) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x1, 0x5326f14abba4560c, 0x4, 0xe004, 0xfffffffe, {r1, r2/1000+60000}, {0x4, 0x0, 0x9, 0x4, 0xff, 0x9, "a3298c4e"}, 0x9, 0x2, {&(0x7f00000001c0)=[{0x40, 0x3f, {&(0x7f0000000140)}, 0x6}, {0x8000, 0x3, {&(0x7f0000000180)}, 0x7fff}]}, 0xad, 0x0, r3}) (async) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000300)=@overlay={0x8000, 0x1, 0x4, 0x20, 0x1f, {}, {0x3, 0x0, 0x1, 0x3, 0x1f, 0x4, "2f3bc0f7"}, 0x43365f35, 0x3, {}, 0x3, 0x0, r4}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000000c0)={0x0, 0x2618, 0xdfb6, 0x4000}) 09:15:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @pix={0x1, 0x7, 0x4c314356, 0x8, 0x1, 0x0, 0x5, 0x10001, 0x1, 0x3, 0x0, 0x1}}) [ 909.730565] FAULT_INJECTION: forcing a failure. [ 909.730565] name failslab, interval 1, probability 0, space 0, times 0 [ 909.782856] CPU: 1 PID: 13314 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 909.790780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.800149] Call Trace: [ 909.800165] dump_stack+0x1b2/0x281 [ 909.806358] should_fail.cold+0x10a/0x149 [ 909.810529] should_failslab+0xd6/0x130 [ 909.810542] kmem_cache_alloc_node_trace+0x25a/0x400 [ 909.819597] __kmalloc_node+0x38/0x70 [ 909.823405] blk_mq_alloc_rq_map+0xd2/0x220 [ 909.827735] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 909.832240] blk_mq_alloc_tag_set+0x4ac/0x910 [ 909.836748] loop_add+0x2a0/0x830 [ 909.840207] ? loop_queue_rq+0x280/0x280 [ 909.844269] ? loop_queue_work+0x21e0/0x21e0 [ 909.848678] loop_control_ioctl+0x11a/0x3f0 [ 909.852985] ? loop_lookup+0x190/0x190 [ 909.856851] ? SyS_write+0x1b7/0x210 [ 909.860564] ? loop_lookup+0x190/0x190 [ 909.864428] do_vfs_ioctl+0x75a/0xff0 [ 909.868224] ? lock_acquire+0x170/0x3f0 [ 909.872175] ? ioctl_preallocate+0x1a0/0x1a0 [ 909.876562] ? __fget+0x2df/0x460 [ 909.879993] ? do_vfs_ioctl+0xff0/0xff0 [ 909.883943] ? security_file_ioctl+0x83/0xb0 [ 909.888345] SyS_ioctl+0x7f/0xb0 [ 909.891688] ? do_vfs_ioctl+0xff0/0xff0 [ 909.895643] do_syscall_64+0x1d5/0x640 [ 909.899532] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 909.904702] RIP: 0033:0x7f8002e8f059 [ 909.908389] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.916078] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 909.923332] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 09:15:03 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 9) 09:15:03 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @pix={0x1, 0x7, 0x4c314356, 0x8, 0x1, 0x0, 0x5, 0x10001, 0x1, 0x3, 0x0, 0x1}}) 09:15:03 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x8616}, 0x8) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x8616}, 0x8) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:03 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r0]) socket$inet6_sctp(0xa, 0x1, 0x84) 09:15:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x1, 0x5326f14abba4560c, 0x4, 0xe004, 0xfffffffe, {r1, r2/1000+60000}, {0x4, 0x0, 0x9, 0x4, 0xff, 0x9, "a3298c4e"}, 0x9, 0x2, {&(0x7f00000001c0)=[{0x40, 0x3f, {&(0x7f0000000140)}, 0x6}, {0x8000, 0x3, {&(0x7f0000000180)}, 0x7fff}]}, 0xad, 0x0, r3}) (async) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000300)=@overlay={0x8000, 0x1, 0x4, 0x20, 0x1f, {}, {0x3, 0x0, 0x1, 0x3, 0x1f, 0x4, "2f3bc0f7"}, 0x43365f35, 0x3, {}, 0x3, 0x0, r4}) (async, rerun: 32) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f00000000c0)={0x0, 0x2618, 0xdfb6, 0x4000}) [ 909.930577] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 909.937840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.945093] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 909.956802] blk-mq: reduced tag depth (128 -> 64) 09:15:03 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r0]) socket$inet6_sctp(0xa, 0x1, 0x84) 09:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:03 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000001380)=[{0x90, 0x110, 0xc443, "406ab991455fbb720079f7d9688842715cd965f14a0c8b74bee77ba9f2bc4854a421e3e4e0be2e1bf1bebd981a9fcd8740ea33d49f71ad877dcd081f5dc546d9201c30b7ff7ecfac919e425793902790190ac2e4b508aeb6b33022d32a027ed77386876359143eac42ba6430178fc60b5e4d7e6c7ef62704809274a6"}, {0x30, 0x116, 0x6, "b7453211473264bd2e1c5a3f7a4d83453157686cba49c5cd3e8b86c6147ad9"}, {0xa0, 0x196, 0x1ff, "4b41ec0e3035969bbd534b6fa7b0be235c9586b37586663e8d9dbda35a466db8a51474c16788f76b5e14d664d28069fdaeaffcde321268808ca3e09184e684b89d8da3d771b9a239995a5022ad80c38e774512a157081a6a53879aa54c31aeffd14f7e6ba5df3c88649fcac9959dacc0739ad091e3eba50e07f26080bfd1dbea2f7853fbec8b50604b911f"}, {0x58, 0x119, 0x2, "51197a3d231007ff999828edc8801b3bf9ae442e11c4baece63d7b945c5ce51ea952e81703f933f3fe065672f8aea723699deafe1da7e9f60908783b8e5dcf5152c0a57116"}], 0x1b8}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)="3548c240ed2f48d3e9", 0x9}, {&(0x7f0000000200)="ca2805bbee458c94898643046daa1313b8946b4bb9f9e1c23a928957fd91765f3b60c36abfc3d588e96a25f47671820b072fe2baf9309ce7c9d44fd5757af8ed73a3c82dbb39cb58e96857a5a4cc3c57bf6165926d43117b34ba510f64e940b187bf7d834e1009d0455c073f5616d695634b4da99ca263e753cbc36e", 0x7c}, {&(0x7f0000001540)="c98942209027cc36e2ca4c1cec808f050421ad7846fc24e776c2ab05", 0x1c}], 0x3, &(0x7f00000015c0)=[{0xe8, 0x5, 0x3, "5dd9cc35099215ca0096baa7dda24c5e540b2967bf5983c33c20a00876b605f872b13a7cd805d8daf1a78d38e7de14b22c214731b647c1c237252be9507c8967b690f509967c2c17989ac68e47c4c049a3f53be80b599dc5705359f7f22d88f136e42ffb4bd9e5f0c36308100da75d82e9c05673f89c6248c0ec208711f5d5f4b97be0cdd569ac927bae6aef504d2e9629c73d1877151eb65fb941094f9d59bbab4f55df5e11f2887856dfb07cd27e84b6ebe7bd9ffddf85150a770d40a917b4748bf273cdadb8e4abc72391cbafef1539332ae9ffc22f02"}, {0x110, 0xff, 0x62, "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"}], 0x1f8}}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001840)="65a62bc0c1e47721fd4d4655bbaa414c1519b0f8ef", 0x15}, {&(0x7f0000001880)="2e6bb2a173a48f36cc16b45ffe4f64cafe7d2384a991b2ca206c877303fe17891fe0c3da12efc4e7687a38f9316fa315eddc57529b59b6da92c4510adfd8f4aba5a06b129c1ffb2b9617281eefdc2eb68d9c846320dbf0cf93379692a6cedc4c7d9b79e2a6b2649bf87d14870a8f6caba7dbd4b8d78677a7471991b94474e066134edf59b3d285208c704bdcde3d255ea75a44fa6fb56e62fea0b9c93e5507fd7b0d3b7064c56d7b5c9d99c072cd345143dbb7652a5c6b6771c235813c19e22512eaca116c6652efe378f06aa0b6ad68d8adf63a32f509f47c", 0xd9}], 0x2, &(0x7f00000019c0)=[{0x60, 0x0, 0xfff, "3a5e59d922c2af52852bb4157240a043fb3ff5c3b71d48393b56d17a20c5d971962809b4178f7d057557e66e15c955e73082aa9ac46c44aa17885cca2c1399e3c4ddb3202fb776e4f09c"}], 0x60}}], 0x3, 0x20008000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 09:15:03 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x1ff}) 09:15:03 executing program 2: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x14, 0x0, 0x70bd25, 0x25dfdbfb, {0x26, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xf426, 0x400) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xff00, @default, @rose={'rose', 0x0}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x9, 0x101400) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="02000000000009002e0f66696c653000"]) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000240)=ANY=[@ANYBLOB="5b1c000013000000058905018505068c88"]) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32315659, 0x0, @stepwise={0xfffffffc}}) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x72b, 0x200000) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000100)=0x9) 09:15:03 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) [ 910.069827] FAULT_INJECTION: forcing a failure. [ 910.069827] name failslab, interval 1, probability 0, space 0, times 0 [ 910.113034] CPU: 1 PID: 13379 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 910.121032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.130386] Call Trace: [ 910.132980] dump_stack+0x1b2/0x281 [ 910.136611] should_fail.cold+0x10a/0x149 [ 910.136625] should_failslab+0xd6/0x130 [ 910.144745] kmem_cache_alloc_node_trace+0x25a/0x400 09:15:04 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 10) 09:15:04 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:04 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r0]) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESDEC=r0]) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) 09:15:04 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000001380)=[{0x90, 0x110, 0xc443, "406ab991455fbb720079f7d9688842715cd965f14a0c8b74bee77ba9f2bc4854a421e3e4e0be2e1bf1bebd981a9fcd8740ea33d49f71ad877dcd081f5dc546d9201c30b7ff7ecfac919e425793902790190ac2e4b508aeb6b33022d32a027ed77386876359143eac42ba6430178fc60b5e4d7e6c7ef62704809274a6"}, {0x30, 0x116, 0x6, "b7453211473264bd2e1c5a3f7a4d83453157686cba49c5cd3e8b86c6147ad9"}, {0xa0, 0x196, 0x1ff, "4b41ec0e3035969bbd534b6fa7b0be235c9586b37586663e8d9dbda35a466db8a51474c16788f76b5e14d664d28069fdaeaffcde321268808ca3e09184e684b89d8da3d771b9a239995a5022ad80c38e774512a157081a6a53879aa54c31aeffd14f7e6ba5df3c88649fcac9959dacc0739ad091e3eba50e07f26080bfd1dbea2f7853fbec8b50604b911f"}, {0x58, 0x119, 0x2, "51197a3d231007ff999828edc8801b3bf9ae442e11c4baece63d7b945c5ce51ea952e81703f933f3fe065672f8aea723699deafe1da7e9f60908783b8e5dcf5152c0a57116"}], 0x1b8}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)="3548c240ed2f48d3e9", 0x9}, {&(0x7f0000000200)="ca2805bbee458c94898643046daa1313b8946b4bb9f9e1c23a928957fd91765f3b60c36abfc3d588e96a25f47671820b072fe2baf9309ce7c9d44fd5757af8ed73a3c82dbb39cb58e96857a5a4cc3c57bf6165926d43117b34ba510f64e940b187bf7d834e1009d0455c073f5616d695634b4da99ca263e753cbc36e", 0x7c}, {&(0x7f0000001540)="c98942209027cc36e2ca4c1cec808f050421ad7846fc24e776c2ab05", 0x1c}], 0x3, &(0x7f00000015c0)=[{0xe8, 0x5, 0x3, "5dd9cc35099215ca0096baa7dda24c5e540b2967bf5983c33c20a00876b605f872b13a7cd805d8daf1a78d38e7de14b22c214731b647c1c237252be9507c8967b690f509967c2c17989ac68e47c4c049a3f53be80b599dc5705359f7f22d88f136e42ffb4bd9e5f0c36308100da75d82e9c05673f89c6248c0ec208711f5d5f4b97be0cdd569ac927bae6aef504d2e9629c73d1877151eb65fb941094f9d59bbab4f55df5e11f2887856dfb07cd27e84b6ebe7bd9ffddf85150a770d40a917b4748bf273cdadb8e4abc72391cbafef1539332ae9ffc22f02"}, {0x110, 0xff, 0x62, "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"}], 0x1f8}}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001840)="65a62bc0c1e47721fd4d4655bbaa414c1519b0f8ef", 0x15}, {&(0x7f0000001880)="2e6bb2a173a48f36cc16b45ffe4f64cafe7d2384a991b2ca206c877303fe17891fe0c3da12efc4e7687a38f9316fa315eddc57529b59b6da92c4510adfd8f4aba5a06b129c1ffb2b9617281eefdc2eb68d9c846320dbf0cf93379692a6cedc4c7d9b79e2a6b2649bf87d14870a8f6caba7dbd4b8d78677a7471991b94474e066134edf59b3d285208c704bdcde3d255ea75a44fa6fb56e62fea0b9c93e5507fd7b0d3b7064c56d7b5c9d99c072cd345143dbb7652a5c6b6771c235813c19e22512eaca116c6652efe378f06aa0b6ad68d8adf63a32f509f47c", 0xd9}], 0x2, &(0x7f00000019c0)=[{0x60, 0x0, 0xfff, "3a5e59d922c2af52852bb4157240a043fb3ff5c3b71d48393b56d17a20c5d971962809b4178f7d057557e66e15c955e73082aa9ac46c44aa17885cca2c1399e3c4ddb3202fb776e4f09c"}], 0x60}}], 0x3, 0x20008000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000001380)=[{0x90, 0x110, 0xc443, "406ab991455fbb720079f7d9688842715cd965f14a0c8b74bee77ba9f2bc4854a421e3e4e0be2e1bf1bebd981a9fcd8740ea33d49f71ad877dcd081f5dc546d9201c30b7ff7ecfac919e425793902790190ac2e4b508aeb6b33022d32a027ed77386876359143eac42ba6430178fc60b5e4d7e6c7ef62704809274a6"}, {0x30, 0x116, 0x6, "b7453211473264bd2e1c5a3f7a4d83453157686cba49c5cd3e8b86c6147ad9"}, {0xa0, 0x196, 0x1ff, "4b41ec0e3035969bbd534b6fa7b0be235c9586b37586663e8d9dbda35a466db8a51474c16788f76b5e14d664d28069fdaeaffcde321268808ca3e09184e684b89d8da3d771b9a239995a5022ad80c38e774512a157081a6a53879aa54c31aeffd14f7e6ba5df3c88649fcac9959dacc0739ad091e3eba50e07f26080bfd1dbea2f7853fbec8b50604b911f"}, {0x58, 0x119, 0x2, "51197a3d231007ff999828edc8801b3bf9ae442e11c4baece63d7b945c5ce51ea952e81703f933f3fe065672f8aea723699deafe1da7e9f60908783b8e5dcf5152c0a57116"}], 0x1b8}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)="3548c240ed2f48d3e9", 0x9}, {&(0x7f0000000200)="ca2805bbee458c94898643046daa1313b8946b4bb9f9e1c23a928957fd91765f3b60c36abfc3d588e96a25f47671820b072fe2baf9309ce7c9d44fd5757af8ed73a3c82dbb39cb58e96857a5a4cc3c57bf6165926d43117b34ba510f64e940b187bf7d834e1009d0455c073f5616d695634b4da99ca263e753cbc36e", 0x7c}, {&(0x7f0000001540)="c98942209027cc36e2ca4c1cec808f050421ad7846fc24e776c2ab05", 0x1c}], 0x3, &(0x7f00000015c0)=[{0xe8, 0x5, 0x3, "5dd9cc35099215ca0096baa7dda24c5e540b2967bf5983c33c20a00876b605f872b13a7cd805d8daf1a78d38e7de14b22c214731b647c1c237252be9507c8967b690f509967c2c17989ac68e47c4c049a3f53be80b599dc5705359f7f22d88f136e42ffb4bd9e5f0c36308100da75d82e9c05673f89c6248c0ec208711f5d5f4b97be0cdd569ac927bae6aef504d2e9629c73d1877151eb65fb941094f9d59bbab4f55df5e11f2887856dfb07cd27e84b6ebe7bd9ffddf85150a770d40a917b4748bf273cdadb8e4abc72391cbafef1539332ae9ffc22f02"}, {0x110, 0xff, 0x62, "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"}], 0x1f8}}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001840)="65a62bc0c1e47721fd4d4655bbaa414c1519b0f8ef", 0x15}, {&(0x7f0000001880)="2e6bb2a173a48f36cc16b45ffe4f64cafe7d2384a991b2ca206c877303fe17891fe0c3da12efc4e7687a38f9316fa315eddc57529b59b6da92c4510adfd8f4aba5a06b129c1ffb2b9617281eefdc2eb68d9c846320dbf0cf93379692a6cedc4c7d9b79e2a6b2649bf87d14870a8f6caba7dbd4b8d78677a7471991b94474e066134edf59b3d285208c704bdcde3d255ea75a44fa6fb56e62fea0b9c93e5507fd7b0d3b7064c56d7b5c9d99c072cd345143dbb7652a5c6b6771c235813c19e22512eaca116c6652efe378f06aa0b6ad68d8adf63a32f509f47c", 0xd9}], 0x2, &(0x7f00000019c0)=[{0x60, 0x0, 0xfff, "3a5e59d922c2af52852bb4157240a043fb3ff5c3b71d48393b56d17a20c5d971962809b4178f7d057557e66e15c955e73082aa9ac46c44aa17885cca2c1399e3c4ddb3202fb776e4f09c"}], 0x60}}], 0x3, 0x20008000) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 09:15:04 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x1ff}) [ 910.144760] __kmalloc_node+0x38/0x70 [ 910.144772] blk_mq_alloc_rq_map+0x113/0x220 [ 910.144785] __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 910.144799] blk_mq_alloc_tag_set+0x4ac/0x910 [ 910.144816] loop_add+0x2a0/0x830 09:15:04 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) 09:15:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000f18000000b5ada5ce993bb541799c32f16c4bc5f0854a28e8cfa22bf18f701632ba3faf57f0db31a1919c7373d2e266880584a87a15f6173eca86cd03b64b1a2a4c084eb30ce7239515916d94ee4020845c73775b48", @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX=r0]) [ 910.144827] ? loop_queue_rq+0x280/0x280 [ 910.144835] ? loop_queue_work+0x21e0/0x21e0 [ 910.144850] loop_control_ioctl+0x11a/0x3f0 [ 910.144860] ? loop_lookup+0x190/0x190 09:15:04 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0x4, 0x1ff}) 09:15:04 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="c0033de505641bdd3dec0e50efe04a327d18f8aa48536fafd00bd020a98ea5e8d836246baad67975aa77fc9e1b1e0bf0807343aed09a0ae2d7c789b1a8e72de79df5945421c73b72864f50543f6566b3df8781664b96c1c227ec31974180a3837817c1659364328ac9b9e9b426f525835850c8099554f1b01c6a3ae62c7a3035ff75a63c500c3f5d59467adfb97e6b4a4fe88ba5ab0bf5dec1822b00aa72db9b1983cc76fd2db73acdd4f52afc36a9b245e4e5bb7bc6d1ba61b03b94922b27eeaeefa8274e19487233bb96595a9d57a467725468b19eddd74f47274b6051fb6e5520aab6068a75f4c162668efe2d2e4b80432583be5105dbf23aaeae223526f7c63634a5db7658a215166c15a3e6704a09128dc2c00c46f0bc16f26df8842dae560d363b6de094e4e343434b9b63ffb0422a018390ab01361051088b9cad89f19bbbf369dd49fd1a5c9dcf5c8ceb839ed6091396e40336e426ac73c06c21ab03028955a7f171d4b6eaaa07826497bde7886639f1f080d3e4d70f36041e14f577632ff504281e1c4a98f87d8eeeb52de8ce9245591074d4a127af24ee13795553075aab89b822c03fee91820eaa28ba0e687ca7037f4ab77e2bc99b97031bb8eef887539376e14578a2aa08feb49724827b14d046b4c94bf6b79a3dd92f6383990f56e80409e6f7e318aaf249f4a162101c81435dc180c628e1f7e22daa36f09b0f203c34ad99c00b3bcb5ad5fddb341c4d30508c0ece02deddce10332489511f47b03d09377157fb41a899550571c1c628862f6c6335f8520569b7fe0be65cfe834c32f474328e265ee043324bb36310e6ccdaa3933441572c639368b2793a43a214ef18faffe073d135fd62a1b654281bfb349dfb6121a4c1bacbb1100a7f951eacd2e4c769f67e5cd3ad51222a0576eba7dec69f3200f31221aa25761c9dcadd63e666214ce65bf1770363537a2d34da88c1f7207ae4e72b2028c38f4dab322629e13a67b1d58138157dc28c289f103ec091e9e8679162e2dd913478e4cd23f821512152f327a53c317af7579badd3819afb9310ffc5b86643ab9dbccf3d7b94e9f7408b79ba94fdd721df6453e9357ff5dcb7fa7e5322bb7760ed0024cae30cf5579ea65741369973286bd07b2db9919c19efa71549a74368f4f9a601e017e6d23d36f6d929bab56cf7b52b3a32dc41a8d0f145790d81610c8f656772aa2a471a71b51aebd7576d9879364f22c4445530d7af2541f09d8ac3a3f5e7ce65aa365136a17e8f4504e8040666140fbac2c01f306390c89f06cf645f49ffac1ba132de11bb0f9c4c5c90e27e3611f9ba74d4f0f9cb6a58300d0864387085ff7d30be302fb268f430cf9233a28d5b4c3434995f1bd1bb3a96ad906e1a9bd781a0033f34c5b90704b22a5a606c7feaa6cc9bb63e7b629526954e5461208d70adefb52d2d24b4b6d03eb449e85255c676dea5f73bec778b42f8e65d996e24fb1c41e1bdd28852983ff7f6cdc475148424a745f8dd3b0b67f14ef8d1d74d57ce54153c0f7aa123d69ef8615236b2e89b0911fd982a30ffb7bc020bb1989aa2ec1bd542fd7edd7d8a0584484dbbe18c419c8ef85a97a680841cc9b5267ecb9dc0a1420cf593390f217c3c31462318a867a8948e3166be99d676e14b6e9f03124d700e3e0ef313a4951feffee61397abfc63bd026d0c82a4f051f478c0244b30af4c3d5d88c309f4cb4acc024306c7d926d927982bf2cd2a138a98f18a5de4b397dae253e16c44e23ab1b9f2803dc03dc5dcf88baa1dfa64eb07f7c44b0486e39c8870aaff9ca59cae7c8286c658c473079ee2c93dee25442e9bb769d572ace2a272a904cfd876532861c330fbda5bfa4d9b2d80a24ebc70ba2aa1dad35ef9eef85148a0674afe8dff8f978a2a4bcea4f37c2797d70b0eb1229c575ea5fdd46eb8d884a6e6906bbc787150ffe2d377fef5d5515437d935d7fcdd2740bfada8e2b00b809bedb1364dd8c55363294ee99c18ed5ad4a80e83e1246b24809a3a1dbfa947bf7b606e9cb572003097b866552f4c7f4d50e7dfe4591ea3a0500a7579ff1da78d041cdec29c8fc8a86111395b9a537490938d60732e35bbe856c5e6fcaea88c845eea61934bba598e80f690c4f8c3529ca37211cfd4abdab78957e086bfe9e17d2b6abbd90a01386488a6ca3b98dc57fc459bf9680ff5de8a8beafec8497285cea0f96da18d385f6a4a9c78ff082fd7a64264eaaa318ebf0e549e1676327ced9e6db56708c3756c54fc3a3fdee494c5edfedee2ac94b494ddebeb4ad83f51e23155c4fbbfc4816151a147f7529ae5977e7ce2d207f6fe7058ad9851f7731b36b60e27bf2bce17f4d4f40435c12d075851797829bd9e3e26be243b76a6b8f02d2a694e49325a801dcc76b64c23b8c8bb4458a5916e5371750be12f5208414a21c24acec45d6f5ea3ebed0bec02ba9bac9fe79cc35f46b9597dcee0dcd71b3b95808527c66f94ab72ec2e7add8f63563c1ab6c4a8fa6ac19ba5fc20f9a31268d190ab9686b665f39ad89e9cef8b8323a6e3ea37ec5fc95bf5b025acf1fbebe41ab48509a4ed335ac1e0cd92b1d8ef239a1df992c798b518d151f4a7802b97e2112a87afa8cde4e348b28e915f533b0f7579488ab0ccf4cb6c31a001c0227a6c0570ed9b847f5a10371aa344b0bee0dd33ac6f44e93fee5f38ca2713f4daf40c8e9b4e5559262f58c2a15388f44b450e48b7595de330e6f8b9cea753fd24ba7e4ff8b8c376b6bc2dd5b0e86f091b993518c502745cfa55f7d77c72738abbdc914d622ae8114de6c5c274eeb4a751fd169c76f923039c594d86e3ab9bb4ceb3c61c478d99d210370b0cbda71dca79f00996692894aaa793ffcff28769989d39ab16b87b25605d6d6af2335e637528ef92b621778b7be0d50893ebe31415eea82bb0ab00c9f989ef920457c15f088c4e5f74ad41e57cd323ee4218a6b38e5f807ba8f8085a2512520ea65147856c78eee97fb59d997f7d79bf9bd1096f181e3c1d8ca0e40464bace2c30f5d86a3c58ffd1694b0be6039374399bc305a10dfa3165acd3a6dde577784dca82679f13fc09ccb2d10039ff8ab4ef66163f69fe27c832acb56cc066a7a6524cb609e731e1b9806c4ed79a6f0a6b510ac19c3348486c7b666d89fd34217bb64879c369c524a07310ca44fdef084c571d700d3fac1a6d34cdab9eb94fd2b44d217be7e15ce1d50b1795c0b657714f5ec931f81dc382691e33ffb872c60527b0cc45a9d48d5165f4f06e5d0c93b4cfe276d462b06bb773115400ef3ce8ea3f78f481f7cf17cf8a55cb9847c4293f43490fd2379e3623c8e3dffad40854117e95db70928342f2b6bd955ebdb15590d4eeb4a37241287ee1c07a2b4b244fe47014983a6df9fa9c42e30177d8d1642e15c3dd55a2ca65283d1986ee54b0d337ed361a6855b67afc1ecc83a5666d769b8f499ebe2ae7cbaadf1bf63980a907e46efca1f4a89fbd3a363dacf5401c8d5a721284ecb7c909ab4ebef059ea5c1aca1ba26cae064cf12826a028d6b2733d2280b4806f8cb844ba312f0f5e1f9d231f600ff871f9028bf128b6eb260881ea35ca6d1cc8cee50517602504cf59366d149e250eb2a001385cb782e33673146d1bfcff2c3eb8338f69e2b3571b576f59797a92576589090268ce0f874d24f3d94237c55ba01cab9eca96a69c58321ad5614b5006b6f00218262c5e4d088e7fafe7114e8862da2b217b9dcc7510831d0fc3fac7211206e769181097e1f2b6c70424ed04ff7b4f82e7a3c8f38e0141d25a53c0191a9fb4aa56b387b1c7c7d4d183f625304ec01be316fa78c6c48c008b80c9aa369ae6449660ba935fd094d3ff2680a409ceab64c1befa57c3dd90f9a5d65b87a3085c57f422097db709fb3feeef8f03b66571501347228ed274ceb498ebb56f4a37e70fa0b54d86e3000f981f28d80ec62638dbf7295324d56c58e76f299088172325afffc7bf97cc74dc6ac941d865a9e7abe5e84aa5d81ef06d33a736e8d14578f0a87e5830dcf37d9b184677a6d1970364a43624709c9cba250774c58d9058404381798c74d6ad3c5c0f898b24bf1581fed4b3848244605d057b5484d798de933136677c86708d3bd31d17d2dfa5719b84c3719fdd296498d12e9eb1439de186f64b665271f8938bd6c66b119e9cd0ec523eebce1f9767ac9ccf28e2028c00a0e1445ed5cdb70e25823d551b54b85ed90c276d15427a0d8a1cb822e496943c433ba45f5d00dd583bb5615dd3ec1f65f8aa27bc1d602303a65eab1325ddc51d1fba28ca1065ef1178da3b2a337bfe0e0962cfda4a94687d1d81b99f0497d5afbbced798326090d0caad7475c99ca30c04dbefb9ab157e88265f3884935d7bd157edf8d711704601f5a2e170cab69d52b505a8ec38895fec529d393c66d7b5c909fc672f274c2688c2c3a7f1a990faac210f298790ec9ada7c96937c9d294acec822ff0d103c042796d11ae87081d6c41d4c64c6d15e3ac7a8924277914c71fdd6248ec6da6dedb1b2bcc507e1e909f981a2a1ea30e81895ecbef09bcc5deea286dc545611fa7ee5703a1b7f10f45014637b0c65da73992c1fa99f4c18161bda70e0f4918625d95cff41e3bd47d19b94b793be8b0326f36c5a7d87bcb193063a04ad557e70a412eacb7a2f2f094b0d14de3a9e3fc4882cb39d7866bbf3ddb299f44ef93094def33811f080df1fa8a0a35a1f90959289246e61c4524bd1513fab695bd012c229cd8783654d27149714e143a8013ffa9f43bacfa93acc263a01d43ac4a55d3abe6c5ffceabc6214749ddb02e4f390824c2293e0aa32d18232a71ed1d10ff04628b90eb6e75fd55503d33179ad0a4ab2e95bf494ca7950d142c64fb5c6cabcf7ad52b763c1d9b91d62e474617a5ab2367709a8d7b9308a9471414a3c031c2e5e069555f2fb477bc08b7270a05b90d9d8565bdcebeb8fa056a8d2e3469ae288ec4a00d5003cc0722cbe88b75e3452936eb08a712d2ee09400e5b3218b03f910fdfbb97f4220e8995a4d63f28c4398239d080cbe869ba21231964caef52299730c7c965136dbcd8210ab3b8ca51bbb0e720fec7e55c9136576b4e4e4defe7eed9570e25f24c2212538f0b738569118ed72e52d73e62f787305d9b5339c6b7211a5e9b1bb950bd36d4824480b370a9ff0f2a23b8ae0b589c0f9e92458aad97d26f1131dec405520fc6d253fabf9c08aba06c4b0df6dee6cf332d0d42a1e72851bbaf9ea5096753b43076e947c545eb30246569aa4549cfd3f90d22ced71c9aa82fe5cffcc6c7fabda1b8f1d6359658aad1bf9e112eb8578e5a50a593a92a068a016dc7df1ad06d4ff212d6df030ab61b3e72612a96742b352bf9ebb5edbecfa2c015c613c2ef236c17d09de35c42ded2af91691a63d32bcb4f749f0eacfe199aa1e1bee7cf8a21ab30681abb029028773e6a6a8b5fbd528e6992c86ac6c9aad41344c6becbf38865b3711499c779d8a811389dc3cdcac7fd2b93e2abbe5ab0f899284d0f8ed155e82be13ee936e3aaa3799d19d4f34fbc7c74bfbbd3d59303a33cee6db4d7b6195a9689a8d7f773a6f10af15827eb192a0f14eacd1a807cad24ce4d34c3445bb16808a47b117d21fb27fbbfeb3b9f9d142617e0943ce40fabcedc1b2b6968e11ff12b42dad2ed265592dce21f0e0769e502d0cc3adef346856d1d5d40797fa4b5acde8783bd3e89cea1b8971d112bc2757a542e87d22b6fa68586139dd756b41fbd0b4a3121dd9369e30a30a0439f65f7d", 0x1000}], 0x1, &(0x7f0000001380)=[{0x90, 0x110, 0xc443, "406ab991455fbb720079f7d9688842715cd965f14a0c8b74bee77ba9f2bc4854a421e3e4e0be2e1bf1bebd981a9fcd8740ea33d49f71ad877dcd081f5dc546d9201c30b7ff7ecfac919e425793902790190ac2e4b508aeb6b33022d32a027ed77386876359143eac42ba6430178fc60b5e4d7e6c7ef62704809274a6"}, {0x30, 0x116, 0x6, "b7453211473264bd2e1c5a3f7a4d83453157686cba49c5cd3e8b86c6147ad9"}, {0xa0, 0x196, 0x1ff, "4b41ec0e3035969bbd534b6fa7b0be235c9586b37586663e8d9dbda35a466db8a51474c16788f76b5e14d664d28069fdaeaffcde321268808ca3e09184e684b89d8da3d771b9a239995a5022ad80c38e774512a157081a6a53879aa54c31aeffd14f7e6ba5df3c88649fcac9959dacc0739ad091e3eba50e07f26080bfd1dbea2f7853fbec8b50604b911f"}, {0x58, 0x119, 0x2, "51197a3d231007ff999828edc8801b3bf9ae442e11c4baece63d7b945c5ce51ea952e81703f933f3fe065672f8aea723699deafe1da7e9f60908783b8e5dcf5152c0a57116"}], 0x1b8}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)="3548c240ed2f48d3e9", 0x9}, {&(0x7f0000000200)="ca2805bbee458c94898643046daa1313b8946b4bb9f9e1c23a928957fd91765f3b60c36abfc3d588e96a25f47671820b072fe2baf9309ce7c9d44fd5757af8ed73a3c82dbb39cb58e96857a5a4cc3c57bf6165926d43117b34ba510f64e940b187bf7d834e1009d0455c073f5616d695634b4da99ca263e753cbc36e", 0x7c}, {&(0x7f0000001540)="c98942209027cc36e2ca4c1cec808f050421ad7846fc24e776c2ab05", 0x1c}], 0x3, &(0x7f00000015c0)=[{0xe8, 0x5, 0x3, "5dd9cc35099215ca0096baa7dda24c5e540b2967bf5983c33c20a00876b605f872b13a7cd805d8daf1a78d38e7de14b22c214731b647c1c237252be9507c8967b690f509967c2c17989ac68e47c4c049a3f53be80b599dc5705359f7f22d88f136e42ffb4bd9e5f0c36308100da75d82e9c05673f89c6248c0ec208711f5d5f4b97be0cdd569ac927bae6aef504d2e9629c73d1877151eb65fb941094f9d59bbab4f55df5e11f2887856dfb07cd27e84b6ebe7bd9ffddf85150a770d40a917b4748bf273cdadb8e4abc72391cbafef1539332ae9ffc22f02"}, {0x110, 0xff, 0x62, "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"}], 0x1f8}}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001840)="65a62bc0c1e47721fd4d4655bbaa414c1519b0f8ef", 0x15}, {&(0x7f0000001880)="2e6bb2a173a48f36cc16b45ffe4f64cafe7d2384a991b2ca206c877303fe17891fe0c3da12efc4e7687a38f9316fa315eddc57529b59b6da92c4510adfd8f4aba5a06b129c1ffb2b9617281eefdc2eb68d9c846320dbf0cf93379692a6cedc4c7d9b79e2a6b2649bf87d14870a8f6caba7dbd4b8d78677a7471991b94474e066134edf59b3d285208c704bdcde3d255ea75a44fa6fb56e62fea0b9c93e5507fd7b0d3b7064c56d7b5c9d99c072cd345143dbb7652a5c6b6771c235813c19e22512eaca116c6652efe378f06aa0b6ad68d8adf63a32f509f47c", 0xd9}], 0x2, &(0x7f00000019c0)=[{0x60, 0x0, 0xfff, "3a5e59d922c2af52852bb4157240a043fb3ff5c3b71d48393b56d17a20c5d971962809b4178f7d057557e66e15c955e73082aa9ac46c44aa17885cca2c1399e3c4ddb3202fb776e4f09c"}], 0x60}}], 0x3, 0x20008000) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0x1000}], 0x1, &(0x7f0000001380)=[{0x90, 0x110, 0xc443, "406ab991455fbb720079f7d9688842715cd965f14a0c8b74bee77ba9f2bc4854a421e3e4e0be2e1bf1bebd981a9fcd8740ea33d49f71ad877dcd081f5dc546d9201c30b7ff7ecfac919e425793902790190ac2e4b508aeb6b33022d32a027ed77386876359143eac42ba6430178fc60b5e4d7e6c7ef62704809274a6"}, {0x30, 0x116, 0x6, "b7453211473264bd2e1c5a3f7a4d83453157686cba49c5cd3e8b86c6147ad9"}, {0xa0, 0x196, 0x1ff, "4b41ec0e3035969bbd534b6fa7b0be235c9586b37586663e8d9dbda35a466db8a51474c16788f76b5e14d664d28069fdaeaffcde321268808ca3e09184e684b89d8da3d771b9a239995a5022ad80c38e774512a157081a6a53879aa54c31aeffd14f7e6ba5df3c88649fcac9959dacc0739ad091e3eba50e07f26080bfd1dbea2f7853fbec8b50604b911f"}, {0x58, 0x119, 0x2, "51197a3d231007ff999828edc8801b3bf9ae442e11c4baece63d7b945c5ce51ea952e81703f933f3fe065672f8aea723699deafe1da7e9f60908783b8e5dcf5152c0a57116"}], 0x1b8}}, {{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)="3548c240ed2f48d3e9", 0x9}, {&(0x7f0000000200)="ca2805bbee458c94898643046daa1313b8946b4bb9f9e1c23a928957fd91765f3b60c36abfc3d588e96a25f47671820b072fe2baf9309ce7c9d44fd5757af8ed73a3c82dbb39cb58e96857a5a4cc3c57bf6165926d43117b34ba510f64e940b187bf7d834e1009d0455c073f5616d695634b4da99ca263e753cbc36e", 0x7c}, {&(0x7f0000001540)="c98942209027cc36e2ca4c1cec808f050421ad7846fc24e776c2ab05", 0x1c}], 0x3, &(0x7f00000015c0)=[{0xe8, 0x5, 0x3, "5dd9cc35099215ca0096baa7dda24c5e540b2967bf5983c33c20a00876b605f872b13a7cd805d8daf1a78d38e7de14b22c214731b647c1c237252be9507c8967b690f509967c2c17989ac68e47c4c049a3f53be80b599dc5705359f7f22d88f136e42ffb4bd9e5f0c36308100da75d82e9c05673f89c6248c0ec208711f5d5f4b97be0cdd569ac927bae6aef504d2e9629c73d1877151eb65fb941094f9d59bbab4f55df5e11f2887856dfb07cd27e84b6ebe7bd9ffddf85150a770d40a917b4748bf273cdadb8e4abc72391cbafef1539332ae9ffc22f02"}, {0x110, 0xff, 0x62, "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"}], 0x1f8}}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001840)="65a62bc0c1e47721fd4d4655bbaa414c1519b0f8ef", 0x15}, {&(0x7f0000001880)="2e6bb2a173a48f36cc16b45ffe4f64cafe7d2384a991b2ca206c877303fe17891fe0c3da12efc4e7687a38f9316fa315eddc57529b59b6da92c4510adfd8f4aba5a06b129c1ffb2b9617281eefdc2eb68d9c846320dbf0cf93379692a6cedc4c7d9b79e2a6b2649bf87d14870a8f6caba7dbd4b8d78677a7471991b94474e066134edf59b3d285208c704bdcde3d255ea75a44fa6fb56e62fea0b9c93e5507fd7b0d3b7064c56d7b5c9d99c072cd345143dbb7652a5c6b6771c235813c19e22512eaca116c6652efe378f06aa0b6ad68d8adf63a32f509f47c", 0xd9}], 0x2, &(0x7f00000019c0)=[{0x60, 0x0, 0xfff, "3a5e59d922c2af52852bb4157240a043fb3ff5c3b71d48393b56d17a20c5d971962809b4178f7d057557e66e15c955e73082aa9ac46c44aa17885cca2c1399e3c4ddb3202fb776e4f09c"}], 0x60}}], 0x3, 0x20008000) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 09:15:04 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0xfffffff8, 0x4800}) [ 910.144869] ? SyS_write+0x1b7/0x210 [ 910.144882] ? loop_lookup+0x190/0x190 [ 910.144892] do_vfs_ioctl+0x75a/0xff0 [ 910.144903] ? lock_acquire+0x170/0x3f0 [ 910.144912] ? ioctl_preallocate+0x1a0/0x1a0 [ 910.144925] ? __fget+0x2df/0x460 [ 910.144936] ? do_vfs_ioctl+0xff0/0xff0 [ 910.144947] ? security_file_ioctl+0x83/0xb0 [ 910.144957] SyS_ioctl+0x7f/0xb0 [ 910.144965] ? do_vfs_ioctl+0xff0/0xff0 [ 910.144987] do_syscall_64+0x1d5/0x640 [ 910.145005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 910.145014] RIP: 0033:0x7f8002e8f059 [ 910.145019] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.145029] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 910.145035] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 910.145041] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 910.145046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.145051] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 910.151631] blk-mq: reduced tag depth (128 -> 64) [ 910.324049] FAULT_INJECTION: forcing a failure. [ 910.324049] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 910.324061] CPU: 0 PID: 13427 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 910.324067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.324071] Call Trace: [ 910.324085] dump_stack+0x1b2/0x281 [ 910.324100] should_fail.cold+0x10a/0x149 [ 910.324115] __alloc_pages_nodemask+0x22c/0x2720 [ 910.324124] ? kasan_kmalloc+0xeb/0x160 [ 910.324135] ? blk_mq_alloc_rq_map+0x113/0x220 [ 910.324144] ? __blk_mq_alloc_rq_map+0xa3/0x3a0 [ 910.324154] ? loop_add+0x2a0/0x830 [ 910.324161] ? loop_control_ioctl+0x11a/0x3f0 [ 910.324170] ? do_vfs_ioctl+0x75a/0xff0 [ 910.324181] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 910.324193] ? __mutex_unlock_slowpath+0x75/0x770 [ 910.324204] ? fs_reclaim_release+0xd0/0x110 [ 910.324215] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 910.324231] ? __lockdep_init_map+0x100/0x560 [ 910.324241] ? _find_next_bit+0xdb/0x100 [ 910.324253] ? __cpu_to_node+0x7b/0xa0 [ 910.324264] ? blk_mq_hw_queue_to_node+0x9f/0xf0 [ 910.324276] blk_mq_alloc_rqs+0x227/0x6d0 [ 910.324290] ? blk_mq_alloc_rq_map+0x9d/0x220 [ 910.324302] __blk_mq_alloc_rq_map+0x15b/0x3a0 [ 910.324315] blk_mq_alloc_tag_set+0x4ac/0x910 [ 910.324330] loop_add+0x2a0/0x830 [ 910.324340] ? loop_queue_rq+0x280/0x280 [ 910.324348] ? loop_queue_work+0x21e0/0x21e0 [ 910.324362] loop_control_ioctl+0x11a/0x3f0 [ 910.324371] ? loop_lookup+0x190/0x190 [ 910.324379] ? SyS_write+0x1b7/0x210 [ 910.324391] ? loop_lookup+0x190/0x190 [ 910.324409] do_vfs_ioctl+0x75a/0xff0 [ 910.324419] ? lock_acquire+0x170/0x3f0 [ 910.324429] ? ioctl_preallocate+0x1a0/0x1a0 [ 910.324442] ? __fget+0x2df/0x460 [ 910.324453] ? do_vfs_ioctl+0xff0/0xff0 [ 910.324464] ? security_file_ioctl+0x83/0xb0 [ 910.324473] SyS_ioctl+0x7f/0xb0 [ 910.324481] ? do_vfs_ioctl+0xff0/0xff0 [ 910.324492] do_syscall_64+0x1d5/0x640 [ 910.324507] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 910.324514] RIP: 0033:0x7f8002e8f059 09:15:04 executing program 2: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x14, 0x0, 0x70bd25, 0x25dfdbfb, {0x26, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xf426, 0x400) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xff00, @default, @rose={'rose', 0x0}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x9, 0x101400) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="02000000000009002e0f66696c653000"]) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000240)=ANY=[@ANYBLOB="5b1c000013000000058905018505068c88"]) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32315659, 0x0, @stepwise={0xfffffffc}}) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x72b, 0x200000) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000100)=0x9) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x14, 0x0, 0x70bd25, 0x25dfdbfb, {0x26, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0xf426, 0x400) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$USBDEVFS_RESET(r0, 0x5514) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xff00, @default, @rose={'rose', 0x0}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x9, 0x101400) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="02000000000009002e0f66696c653000"]) (async) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000240)=ANY=[@ANYBLOB="5b1c000013000000058905018505068c88"]) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32315659, 0x0, @stepwise={0xfffffffc}}) (async) syz_open_dev$vcsn(&(0x7f0000000280), 0x72b, 0x200000) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000100)=0x9) (async) 09:15:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000f18000000b5ada5ce993bb541799c32f16c4bc5f0854a28e8cfa22bf18f701632ba3faf57f0db31a1919c7373d2e266880584a87a15f6173eca86cd03b64b1a2a4c084eb30ce7239515916d94ee4020845c73775b48", @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX=r0]) 09:15:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x9d) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x5122, 0x8, [{0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0xb}, {0xc, 0x1}, {0xb}, {0x7, 0x1}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100004018000000", @ANYRES32, @ANYBLOB="696c6530000000000000000000000000d1271697b0f91510b9daad40a90868c610443af767141ae87550c8cf3c409c991704e7c32c57c43201f8dc0846a69873285b961e181ebee3d999aa87d5fc5229d1be37f79b86408fbd525c61f2e3de6b80e8db4a604161e545a0fa835fdeb2016c4428fafd44158d421124a588348a16552133992da79966d7c075"]) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 09:15:04 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 11) 09:15:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @win={{0x40000, 0x6, 0x7f, 0x412}, 0x3, 0xffff, &(0x7f00000000c0)={{0x3ff, 0x8001, 0x4, 0x20}, &(0x7f0000000080)={{0x200, 0x0, 0xffff37a3, 0x7ff}, &(0x7f0000000040)={{0x8, 0x5, 0x3, 0x7}}}}, 0x1, &(0x7f0000000100)="6ff6bacb2b9827acf3522cb7b915f44a2757ec707445c20cf3fe94f66ad474b7304ab5f5189eeb133119e9dbf756da024e359db82b18becc9e7c857fa4a79e6fb6914f98c7d8b9739b900f0d9c663b187986659d5872e1167b110c0d50c55511584bad505769971c38882635fbb13f49d1e10b4d86ba2427ea57192284608fb67182739623bfca17480f2dc435908b02e7fdf286707d752284", 0x30}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x0, @pix={0xdd, 0x7, 0x31384142, 0x1, 0x2, 0x2, 0x1, 0x2, 0x0, 0x7}}) [ 910.324520] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.324530] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 910.324536] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 910.324541] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 910.324546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.324552] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x9d) (async) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x5122, 0x8, [{0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0xb}, {0xc, 0x1}, {0xb}, {0x7, 0x1}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100004018000000", @ANYRES32, @ANYBLOB="696c6530000000000000000000000000d1271697b0f91510b9daad40a90868c610443af767141ae87550c8cf3c409c991704e7c32c57c43201f8dc0846a69873285b961e181ebee3d999aa87d5fc5229d1be37f79b86408fbd525c61f2e3de6b80e8db4a604161e545a0fa835fdeb2016c4428fafd44158d421124a588348a16552133992da79966d7c075"]) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) (async) ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 09:15:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000f18000000b5ada5ce993bb541799c32f16c4bc5f0854a28e8cfa22bf18f701632ba3faf57f0db31a1919c7373d2e266880584a87a15f6173eca86cd03b64b1a2a4c084eb30ce7239515916d94ee4020845c73775b48", @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX=r0]) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000f18000000b5ada5ce993bb541799c32f16c4bc5f0854a28e8cfa22bf18f701632ba3faf57f0db31a1919c7373d2e266880584a87a15f6173eca86cd03b64b1a2a4c084eb30ce7239515916d94ee4020845c73775b48", @ANYRES32, @ANYRESHEX=r0, @ANYRESHEX=r0]) (async) 09:15:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x9d) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x5122, 0x8, [{0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0xb}, {0xc, 0x1}, {0xb}, {0x7, 0x1}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100004018000000", @ANYRES32, @ANYBLOB="696c6530000000000000000000000000d1271697b0f91510b9daad40a90868c610443af767141ae87550c8cf3c409c991704e7c32c57c43201f8dc0846a69873285b961e181ebee3d999aa87d5fc5229d1be37f79b86408fbd525c61f2e3de6b80e8db4a604161e545a0fa835fdeb2016c4428fafd44158d421124a588348a16552133992da79966d7c075"]) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6, 0x40) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x9d) (async) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0x5122, 0x8, [{0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0xb}, {0xc, 0x1}, {0xb}, {0x7, 0x1}]}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100004018000000", @ANYRES32, @ANYBLOB="696c6530000000000000000000000000d1271697b0f91510b9daad40a90868c610443af767141ae87550c8cf3c409c991704e7c32c57c43201f8dc0846a69873285b961e181ebee3d999aa87d5fc5229d1be37f79b86408fbd525c61f2e3de6b80e8db4a604161e545a0fa835fdeb2016c4428fafd44158d421124a588348a16552133992da79966d7c075"]) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) (async) ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) 09:15:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @win={{0x40000, 0x6, 0x7f, 0x412}, 0x3, 0xffff, &(0x7f00000000c0)={{0x3ff, 0x8001, 0x4, 0x20}, &(0x7f0000000080)={{0x200, 0x0, 0xffff37a3, 0x7ff}, &(0x7f0000000040)={{0x8, 0x5, 0x3, 0x7}}}}, 0x1, &(0x7f0000000100)="6ff6bacb2b9827acf3522cb7b915f44a2757ec707445c20cf3fe94f66ad474b7304ab5f5189eeb133119e9dbf756da024e359db82b18becc9e7c857fa4a79e6fb6914f98c7d8b9739b900f0d9c663b187986659d5872e1167b110c0d50c55511584bad505769971c38882635fbb13f49d1e10b4d86ba2427ea57192284608fb67182739623bfca17480f2dc435908b02e7fdf286707d752284", 0x30}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x0, @pix={0xdd, 0x7, 0x31384142, 0x1, 0x2, 0x2, 0x1, 0x2, 0x0, 0x7}}) [ 910.770988] FAULT_INJECTION: forcing a failure. [ 910.770988] name failslab, interval 1, probability 0, space 0, times 0 [ 910.800920] CPU: 0 PID: 13458 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 910.808826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.818175] Call Trace: 09:15:04 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20000, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 910.820762] dump_stack+0x1b2/0x281 [ 910.824390] should_fail.cold+0x10a/0x149 [ 910.828538] should_failslab+0xd6/0x130 [ 910.832601] kmem_cache_alloc_node+0x263/0x410 [ 910.837193] blk_alloc_queue_node+0x2d/0xb40 [ 910.841602] blk_mq_init_queue+0x42/0x90 [ 910.845661] loop_add+0x303/0x830 [ 910.849114] ? loop_queue_rq+0x280/0x280 [ 910.853169] ? loop_queue_work+0x21e0/0x21e0 [ 910.857580] loop_control_ioctl+0x11a/0x3f0 [ 910.861896] ? loop_lookup+0x190/0x190 [ 910.865779] ? SyS_write+0x1b7/0x210 [ 910.869492] ? loop_lookup+0x190/0x190 [ 910.873371] do_vfs_ioctl+0x75a/0xff0 [ 910.877160] ? lock_acquire+0x170/0x3f0 [ 910.881111] ? ioctl_preallocate+0x1a0/0x1a0 [ 910.885508] ? __fget+0x2df/0x460 [ 910.889053] ? do_vfs_ioctl+0xff0/0xff0 [ 910.893024] ? security_file_ioctl+0x83/0xb0 [ 910.897439] SyS_ioctl+0x7f/0xb0 [ 910.900801] ? do_vfs_ioctl+0xff0/0xff0 [ 910.904767] do_syscall_64+0x1d5/0x640 [ 910.908649] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 910.913819] RIP: 0033:0x7f8002e8f059 09:15:04 executing program 2: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x14, 0x0, 0x70bd25, 0x25dfdbfb, {0x26, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xf426, 0x400) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xff00, @default, @rose={'rose', 0x0}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x9, 0x101400) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="02000000000009002e0f66696c653000"]) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000240)=ANY=[@ANYBLOB="5b1c000013000000058905018505068c88"]) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32315659, 0x0, @stepwise={0xfffffffc}}) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x72b, 0x200000) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000100)=0x9) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x14, 0x0, 0x70bd25, 0x25dfdbfb, {0x26, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0xf426, 0x400) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$USBDEVFS_RESET(r0, 0x5514) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xff00, @default, @rose={'rose', 0x0}, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x9, 0x101400) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="02000000000009002e0f66696c653000"]) (async) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000240)=ANY=[@ANYBLOB="5b1c000013000000058905018505068c88"]) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x32315659, 0x0, @stepwise={0xfffffffc}}) (async) syz_open_dev$vcsn(&(0x7f0000000280), 0x72b, 0x200000) (async) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8}, 0x10) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) (async) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000100)=0x9) (async) 09:15:04 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20000, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) 09:15:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @win={{0x40000, 0x6, 0x7f, 0x412}, 0x3, 0xffff, &(0x7f00000000c0)={{0x3ff, 0x8001, 0x4, 0x20}, &(0x7f0000000080)={{0x200, 0x0, 0xffff37a3, 0x7ff}, &(0x7f0000000040)={{0x8, 0x5, 0x3, 0x7}}}}, 0x1, &(0x7f0000000100)="6ff6bacb2b9827acf3522cb7b915f44a2757ec707445c20cf3fe94f66ad474b7304ab5f5189eeb133119e9dbf756da024e359db82b18becc9e7c857fa4a79e6fb6914f98c7d8b9739b900f0d9c663b187986659d5872e1167b110c0d50c55511584bad505769971c38882635fbb13f49d1e10b4d86ba2427ea57192284608fb67182739623bfca17480f2dc435908b02e7fdf286707d752284", 0x30}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x0, @pix={0xdd, 0x7, 0x31384142, 0x1, 0x2, 0x2, 0x1, 0x2, 0x0, 0x7}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @win={{0x40000, 0x6, 0x7f, 0x412}, 0x3, 0xffff, &(0x7f00000000c0)={{0x3ff, 0x8001, 0x4, 0x20}, &(0x7f0000000080)={{0x200, 0x0, 0xffff37a3, 0x7ff}, &(0x7f0000000040)={{0x8, 0x5, 0x3, 0x7}}}}, 0x1, &(0x7f0000000100)="6ff6bacb2b9827acf3522cb7b915f44a2757ec707445c20cf3fe94f66ad474b7304ab5f5189eeb133119e9dbf756da024e359db82b18becc9e7c857fa4a79e6fb6914f98c7d8b9739b900f0d9c663b187986659d5872e1167b110c0d50c55511584bad505769971c38882635fbb13f49d1e10b4d86ba2427ea57192284608fb67182739623bfca17480f2dc435908b02e7fdf286707d752284", 0x30}}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x0, @pix={0xdd, 0x7, 0x31384142, 0x1, 0x2, 0x2, 0x1, 0x2, 0x0, 0x7}}) (async) 09:15:04 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 12) [ 910.917509] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.925199] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 910.932455] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 910.939706] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 910.946956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.954383] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:04 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0xfffffff8, 0x4800}) 09:15:04 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20000, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:04 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @raw_data="9a7b079806b1a043f9654f7c3fda73348f331c11744424ab8700e9b4ebe22730fe5455108aa5027d98931a69383cf84dd8f8e14a6ef67af4323f2b36d0114c277f8b4e034497d203aa61c48f6c7cadc4fd2d2ebf4e85df46615e13de571345223889c4cc6895e498c1187e010c1ac8740a8c44cce4c313d91ffebfda002d76fd70e75d7d07c3ccf806a67fd79c3894638aa943e98fcad984a4022b946e7e4daed59f9a474fd2d9bc951004f1abed5680217501cfd8dc7b8cee44d0ae3bcddd7dc28522bbd43208ac"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x6, 0x80, 0x1, {0x3, @vbi={0x7fc00000, 0xfffffbff, 0xfffffffb, 0x31435750, [0x401, 0x2f42], [0x10000000, 0x3], 0x1}}, 0x1ff}) [ 911.029392] FAULT_INJECTION: forcing a failure. [ 911.029392] name failslab, interval 1, probability 0, space 0, times 0 [ 911.049000] CPU: 0 PID: 13523 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 911.056915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.066267] Call Trace: [ 911.068856] dump_stack+0x1b2/0x281 [ 911.072487] should_fail.cold+0x10a/0x149 [ 911.076638] should_failslab+0xd6/0x130 [ 911.080619] kmem_cache_alloc_trace+0x29a/0x3d0 [ 911.085292] bioset_create+0x53/0x750 [ 911.089085] ? kmem_cache_alloc_node+0x38b/0x410 [ 911.093833] blk_alloc_queue_node+0xa8/0xb40 [ 911.098243] blk_mq_init_queue+0x42/0x90 [ 911.102308] loop_add+0x303/0x830 [ 911.105804] ? loop_queue_rq+0x280/0x280 [ 911.109861] ? loop_queue_work+0x21e0/0x21e0 [ 911.114269] loop_control_ioctl+0x11a/0x3f0 [ 911.118588] ? loop_lookup+0x190/0x190 [ 911.122472] ? SyS_write+0x1b7/0x210 [ 911.126192] ? loop_lookup+0x190/0x190 [ 911.130086] do_vfs_ioctl+0x75a/0xff0 [ 911.133888] ? lock_acquire+0x170/0x3f0 [ 911.137853] ? ioctl_preallocate+0x1a0/0x1a0 [ 911.142252] ? __fget+0x2df/0x460 [ 911.145693] ? do_vfs_ioctl+0xff0/0xff0 [ 911.149655] ? security_file_ioctl+0x83/0xb0 [ 911.154061] SyS_ioctl+0x7f/0xb0 [ 911.157425] ? do_vfs_ioctl+0xff0/0xff0 [ 911.161385] do_syscall_64+0x1d5/0x640 [ 911.165388] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 911.170684] RIP: 0033:0x7f8002e8f059 09:15:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f827c52ae885ea8597a1e236f6a271dd7e5ca0fc5fc1e14e6ce4a9d5f8b853cd87c96597ee19e0f3365ad94425b1b89628e749b009d2660f1da9c7407154abddcfe40dfcc3472f38cfcbb73f910e27a0bfe"]) 09:15:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @raw_data="9a7b079806b1a043f9654f7c3fda73348f331c11744424ab8700e9b4ebe22730fe5455108aa5027d98931a69383cf84dd8f8e14a6ef67af4323f2b36d0114c277f8b4e034497d203aa61c48f6c7cadc4fd2d2ebf4e85df46615e13de571345223889c4cc6895e498c1187e010c1ac8740a8c44cce4c313d91ffebfda002d76fd70e75d7d07c3ccf806a67fd79c3894638aa943e98fcad984a4022b946e7e4daed59f9a474fd2d9bc951004f1abed5680217501cfd8dc7b8cee44d0ae3bcddd7dc28522bbd43208ac"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x6, 0x80, 0x1, {0x3, @vbi={0x7fc00000, 0xfffffbff, 0xfffffffb, 0x31435750, [0x401, 0x2f42], [0x10000000, 0x3], 0x1}}, 0x1ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @raw_data="9a7b079806b1a043f9654f7c3fda73348f331c11744424ab8700e9b4ebe22730fe5455108aa5027d98931a69383cf84dd8f8e14a6ef67af4323f2b36d0114c277f8b4e034497d203aa61c48f6c7cadc4fd2d2ebf4e85df46615e13de571345223889c4cc6895e498c1187e010c1ac8740a8c44cce4c313d91ffebfda002d76fd70e75d7d07c3ccf806a67fd79c3894638aa943e98fcad984a4022b946e7e4daed59f9a474fd2d9bc951004f1abed5680217501cfd8dc7b8cee44d0ae3bcddd7dc28522bbd43208ac"}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x6, 0x80, 0x1, {0x3, @vbi={0x7fc00000, 0xfffffbff, 0xfffffffb, 0x31435750, [0x401, 0x2f42], [0x10000000, 0x3], 0x1}}, 0x1ff}) (async) 09:15:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0xfffffff8, 0x4800}) 09:15:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x6, 0x34324142, 0x3, @discrete={0x6}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'a', ' *:* ', 'w\x00'}, 0x8) 09:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @sdr={0x3231564e, 0x6}}) 09:15:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 13) [ 911.174374] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.182320] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 911.189569] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 911.196815] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 911.204070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.211323] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0xfffffff8, 0x4800}) 09:15:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x6, 0x34324142, 0x3, @discrete={0x6}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'a', ' *:* ', 'w\x00'}, 0x8) 09:15:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f827c52ae885ea8597a1e236f6a271dd7e5ca0fc5fc1e14e6ce4a9d5f8b853cd87c96597ee19e0f3365ad94425b1b89628e749b009d2660f1da9c7407154abddcfe40dfcc3472f38cfcbb73f910e27a0bfe"]) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f827c52ae885ea8597a1e236f6a271dd7e5ca0fc5fc1e14e6ce4a9d5f8b853cd87c96597ee19e0f3365ad94425b1b89628e749b009d2660f1da9c7407154abddcfe40dfcc3472f38cfcbb73f910e27a0bfe"]) (async) 09:15:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x0, 0xfffffff8, 0x4800}) 09:15:05 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @raw_data="9a7b079806b1a043f9654f7c3fda73348f331c11744424ab8700e9b4ebe22730fe5455108aa5027d98931a69383cf84dd8f8e14a6ef67af4323f2b36d0114c277f8b4e034497d203aa61c48f6c7cadc4fd2d2ebf4e85df46615e13de571345223889c4cc6895e498c1187e010c1ac8740a8c44cce4c313d91ffebfda002d76fd70e75d7d07c3ccf806a67fd79c3894638aa943e98fcad984a4022b946e7e4daed59f9a474fd2d9bc951004f1abed5680217501cfd8dc7b8cee44d0ae3bcddd7dc28522bbd43208ac"}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x6, 0x80, 0x1, {0x3, @vbi={0x7fc00000, 0xfffffbff, 0xfffffffb, 0x31435750, [0x401, 0x2f42], [0x10000000, 0x3], 0x1}}, 0x1ff}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @raw_data="9a7b079806b1a043f9654f7c3fda73348f331c11744424ab8700e9b4ebe22730fe5455108aa5027d98931a69383cf84dd8f8e14a6ef67af4323f2b36d0114c277f8b4e034497d203aa61c48f6c7cadc4fd2d2ebf4e85df46615e13de571345223889c4cc6895e498c1187e010c1ac8740a8c44cce4c313d91ffebfda002d76fd70e75d7d07c3ccf806a67fd79c3894638aa943e98fcad984a4022b946e7e4daed59f9a474fd2d9bc951004f1abed5680217501cfd8dc7b8cee44d0ae3bcddd7dc28522bbd43208ac"}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x6, 0x80, 0x1, {0x3, @vbi={0x7fc00000, 0xfffffbff, 0xfffffffb, 0x31435750, [0x401, 0x2f42], [0x10000000, 0x3], 0x1}}, 0x1ff}) (async) 09:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @sdr={0x3231564e, 0x6}}) 09:15:05 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f827c52ae885ea8597a1e236f6a271dd7e5ca0fc5fc1e14e6ce4a9d5f8b853cd87c96597ee19e0f3365ad94425b1b89628e749b009d2660f1da9c7407154abddcfe40dfcc3472f38cfcbb73f910e27a0bfe"]) 09:15:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x4800}) 09:15:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x6, 0x34324142, 0x3, @discrete={0x6}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'a', ' *:* ', 'w\x00'}, 0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x6, 0x34324142, 0x3, @discrete={0x6}}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)={'a', ' *:* ', 'w\x00'}, 0x8) (async) [ 911.326340] FAULT_INJECTION: forcing a failure. [ 911.326340] name failslab, interval 1, probability 0, space 0, times 0 [ 911.350343] CPU: 0 PID: 13569 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 911.358254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.367603] Call Trace: [ 911.370192] dump_stack+0x1b2/0x281 09:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @sdr={0x3231564e, 0x6}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @sdr={0x3231564e, 0x6}}) (async) 09:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x8, 0xd4d, 0x7fffffff, 0x2, 0x6, 0x2}}) [ 911.373824] should_fail.cold+0x10a/0x149 [ 911.377976] should_failslab+0xd6/0x130 [ 911.382077] kmem_cache_alloc_node_trace+0x25a/0x400 [ 911.387176] ? mempool_free+0x1d0/0x1d0 [ 911.391237] mempool_create_node+0x76/0x3e0 [ 911.395557] ? mempool_kmalloc+0x20/0x20 [ 911.399627] bioset_create+0x31b/0x750 [ 911.403520] ? kmem_cache_alloc_node+0x38b/0x410 [ 911.408279] blk_alloc_queue_node+0xa8/0xb40 [ 911.412689] blk_mq_init_queue+0x42/0x90 [ 911.416752] loop_add+0x303/0x830 [ 911.420204] ? loop_queue_rq+0x280/0x280 [ 911.424257] ? loop_queue_work+0x21e0/0x21e0 [ 911.428664] loop_control_ioctl+0x11a/0x3f0 [ 911.432978] ? loop_lookup+0x190/0x190 [ 911.436860] ? SyS_write+0x1b7/0x210 [ 911.440578] ? loop_lookup+0x190/0x190 [ 911.444471] do_vfs_ioctl+0x75a/0xff0 [ 911.448267] ? lock_acquire+0x170/0x3f0 [ 911.452237] ? ioctl_preallocate+0x1a0/0x1a0 [ 911.456645] ? __fget+0x2df/0x460 [ 911.460096] ? do_vfs_ioctl+0xff0/0xff0 [ 911.464074] ? security_file_ioctl+0x83/0xb0 [ 911.468481] SyS_ioctl+0x7f/0xb0 [ 911.471839] ? do_vfs_ioctl+0xff0/0xff0 [ 911.475813] do_syscall_64+0x1d5/0x640 [ 911.479708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 911.484891] RIP: 0033:0x7f8002e8f059 [ 911.488594] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.496415] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 911.503680] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 911.510949] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 911.518218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:15:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 14) 09:15:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3}) 09:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x8, 0xd4d, 0x7fffffff, 0x2, 0x6, 0x2}}) 09:15:05 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x1, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x81, 0x2, 0x3, "046e06d8d9f2835614ba163b1ac141d0e8a3c80fa63f75195f563fd3e41e1a99", 0x30314142}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x3, 0x2, 0x9, 0x80000}) 09:15:05 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 09:15:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e21, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @multicast2}}}, 0x90) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000640)={0x1, 0x10, 0xfa00, {&(0x7f0000000600), r1}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000580)={0x12, 0x10, 0xfa00, {&(0x7f0000000540), r1, r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) shmget(0x3, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r6, 0x4, "008000", "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"}}, 0x110) [ 911.525487] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x8, 0xd4d, 0x7fffffff, 0x2, 0x6, 0x2}}) 09:15:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x0, 0x1, 0xfffffff8, 0x4800}) 09:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) [ 911.595518] FAULT_INJECTION: forcing a failure. [ 911.595518] name failslab, interval 1, probability 0, space 0, times 0 [ 911.606945] CPU: 0 PID: 13604 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 911.614833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.624184] Call Trace: [ 911.626771] dump_stack+0x1b2/0x281 [ 911.630424] should_fail.cold+0x10a/0x149 [ 911.630439] should_failslab+0xd6/0x130 09:15:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 15) 09:15:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) [ 911.630452] kmem_cache_alloc_node_trace+0x25a/0x400 [ 911.630462] ? mempool_free+0x1d0/0x1d0 [ 911.630473] __kmalloc_node+0x38/0x70 [ 911.630485] mempool_create_node+0xb1/0x3e0 [ 911.630494] ? mempool_kmalloc+0x20/0x20 09:15:05 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e21, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @multicast2}}}, 0x90) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000640)={0x1, 0x10, 0xfa00, {&(0x7f0000000600), r1}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r1}}, 0x30) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000580)={0x12, 0x10, 0xfa00, {&(0x7f0000000540), r1, r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) shmget(0x3, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r6, 0x4, "008000", "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"}}, 0x110) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e21, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @multicast2}}}, 0x90) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000640)={0x1, 0x10, 0xfa00, {&(0x7f0000000600), r1}}, 0x18) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000580)={0x12, 0x10, 0xfa00, {&(0x7f0000000540), r1, r3}}, 0x18) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) shmget(0x3, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r6, 0x4, "008000", "faab3c07000000eda26ca4fd564d503dd0c69d04f2e06c0914414bf4adb8e2fbc4f490100ff7ad919388704f7fb7418f62ef7e545e77b4fa1a4217c8fea594767576d5840b538c4982b08bff67896ac9fd02b81e6883d9747221ac6d5529dc8c1338c14bc1962dc5fc9e5190c46ecdac49b937f755ba906b9b7b3cca02d12296bd895cc4dac1c55bcd71de3f00c451a95c461c7e194b9838b3051e06245a954b8ef08adec90758647e4cdb72f04a0042effdd1341f521f07f9acd1aa425f7581882284d4b13229174fba813ad5f9b7e2fc3aa2b56ebfc725e15d8a9be2b84d4a0f08c67bbd4d8815f9583301b3f5750b238222f325d6af5005101332daac1f53"}}, 0x110) (async) 09:15:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 16) 09:15:05 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) [ 911.630510] bioset_create+0x31b/0x750 [ 911.630519] ? kmem_cache_alloc_node+0x38b/0x410 [ 911.630532] blk_alloc_queue_node+0xa8/0xb40 [ 911.630546] blk_mq_init_queue+0x42/0x90 [ 911.630557] loop_add+0x303/0x830 [ 911.630567] ? loop_queue_rq+0x280/0x280 [ 911.630575] ? loop_queue_work+0x21e0/0x21e0 [ 911.630589] loop_control_ioctl+0x11a/0x3f0 [ 911.630598] ? loop_lookup+0x190/0x190 [ 911.630607] ? SyS_write+0x1b7/0x210 [ 911.630619] ? loop_lookup+0x190/0x190 [ 911.630629] do_vfs_ioctl+0x75a/0xff0 [ 911.630640] ? lock_acquire+0x170/0x3f0 [ 911.630649] ? ioctl_preallocate+0x1a0/0x1a0 [ 911.630662] ? __fget+0x2df/0x460 [ 911.630673] ? do_vfs_ioctl+0xff0/0xff0 [ 911.630684] ? security_file_ioctl+0x83/0xb0 [ 911.630695] SyS_ioctl+0x7f/0xb0 [ 911.630701] ? do_vfs_ioctl+0xff0/0xff0 [ 911.630713] do_syscall_64+0x1d5/0x640 [ 911.630729] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 911.630737] RIP: 0033:0x7f8002e8f059 [ 911.630742] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.630753] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 911.630758] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 911.630764] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 911.630769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.630775] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 911.711756] FAULT_INJECTION: forcing a failure. [ 911.711756] name failslab, interval 1, probability 0, space 0, times 0 [ 911.711768] CPU: 0 PID: 13620 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 911.711774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.711778] Call Trace: [ 911.711792] dump_stack+0x1b2/0x281 [ 911.711808] should_fail.cold+0x10a/0x149 [ 911.711822] should_failslab+0xd6/0x130 [ 911.711835] kmem_cache_alloc+0x28e/0x3c0 [ 911.711845] ? mempool_free+0x1d0/0x1d0 [ 911.711858] mempool_create_node+0x2d2/0x3e0 [ 911.711872] bioset_create+0x31b/0x750 [ 911.711882] ? kmem_cache_alloc_node+0x38b/0x410 [ 911.711894] blk_alloc_queue_node+0xa8/0xb40 [ 911.711908] blk_mq_init_queue+0x42/0x90 [ 911.711918] loop_add+0x303/0x830 [ 911.711928] ? loop_queue_rq+0x280/0x280 [ 911.711936] ? loop_queue_work+0x21e0/0x21e0 [ 911.711951] loop_control_ioctl+0x11a/0x3f0 [ 911.711961] ? loop_lookup+0x190/0x190 [ 911.711971] ? SyS_write+0x1b7/0x210 [ 911.711984] ? loop_lookup+0x190/0x190 [ 911.711995] do_vfs_ioctl+0x75a/0xff0 [ 911.712007] ? lock_acquire+0x170/0x3f0 [ 911.712017] ? ioctl_preallocate+0x1a0/0x1a0 [ 911.712030] ? __fget+0x2df/0x460 [ 911.712041] ? do_vfs_ioctl+0xff0/0xff0 [ 911.712052] ? security_file_ioctl+0x83/0xb0 [ 911.712062] SyS_ioctl+0x7f/0xb0 [ 911.712070] ? do_vfs_ioctl+0xff0/0xff0 [ 911.712081] do_syscall_64+0x1d5/0x640 [ 911.712100] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 911.712108] RIP: 0033:0x7f8002e8f059 [ 911.712113] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.712124] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 911.712130] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 911.712136] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 911.712141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.712147] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 911.779844] FAULT_INJECTION: forcing a failure. [ 911.779844] name failslab, interval 1, probability 0, space 0, times 0 [ 912.060430] CPU: 1 PID: 13631 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 912.068318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.077650] Call Trace: [ 912.080234] dump_stack+0x1b2/0x281 [ 912.083873] should_fail.cold+0x10a/0x149 [ 912.087997] should_failslab+0xd6/0x130 [ 912.091969] kmem_cache_alloc+0x28e/0x3c0 [ 912.096093] ? mempool_free+0x1d0/0x1d0 [ 912.100043] mempool_create_node+0x2d2/0x3e0 [ 912.104451] bioset_create+0x31b/0x750 [ 912.108316] ? kmem_cache_alloc_node+0x38b/0x410 [ 912.113167] blk_alloc_queue_node+0xa8/0xb40 [ 912.117579] blk_mq_init_queue+0x42/0x90 [ 912.121644] loop_add+0x303/0x830 [ 912.125082] ? loop_queue_rq+0x280/0x280 [ 912.129137] ? loop_queue_work+0x21e0/0x21e0 [ 912.133543] loop_control_ioctl+0x11a/0x3f0 [ 912.137880] ? loop_lookup+0x190/0x190 [ 912.141756] ? SyS_write+0x1b7/0x210 [ 912.145467] ? loop_lookup+0x190/0x190 [ 912.149355] do_vfs_ioctl+0x75a/0xff0 [ 912.153226] ? lock_acquire+0x170/0x3f0 [ 912.157197] ? ioctl_preallocate+0x1a0/0x1a0 [ 912.161852] ? __fget+0x2df/0x460 [ 912.165290] ? do_vfs_ioctl+0xff0/0xff0 [ 912.169244] ? security_file_ioctl+0x83/0xb0 [ 912.173659] SyS_ioctl+0x7f/0xb0 [ 912.177006] ? do_vfs_ioctl+0xff0/0xff0 [ 912.180962] do_syscall_64+0x1d5/0x640 [ 912.184828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 912.189997] RIP: 0033:0x7f8002e8f059 09:15:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x1, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x81, 0x2, 0x3, "046e06d8d9f2835614ba163b1ac141d0e8a3c80fa63f75195f563fd3e41e1a99", 0x30314142}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x3, 0x2, 0x9, 0x80000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x1, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$USBDEVFS_RESET(r1, 0x5514) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x81, 0x2, 0x3, "046e06d8d9f2835614ba163b1ac141d0e8a3c80fa63f75195f563fd3e41e1a99", 0x30314142}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x3, 0x2, 0x9, 0x80000}) (async) 09:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 09:15:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e21, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @multicast2}}}, 0x90) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000640)={0x1, 0x10, 0xfa00, {&(0x7f0000000600), r1}}, 0x18) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000580)={0x12, 0x10, 0xfa00, {&(0x7f0000000540), r1, r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x106}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) shmget(0x3, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r6, 0x4, "008000", "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"}}, 0x110) 09:15:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 17) [ 912.193781] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.201609] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 912.208874] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 912.216556] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 912.223802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.231046] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:06 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @discrete={0x7, 0xffffffff}}) 09:15:06 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) 09:15:06 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @discrete={0x7, 0xffffffff}}) 09:15:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x1, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x81, 0x2, 0x3, "046e06d8d9f2835614ba163b1ac141d0e8a3c80fa63f75195f563fd3e41e1a99", 0x30314142}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x3, 0x2, 0x9, 0x80000}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x1, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$USBDEVFS_RESET(r1, 0x5514) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x81, 0x2, 0x3, "046e06d8d9f2835614ba163b1ac141d0e8a3c80fa63f75195f563fd3e41e1a99", 0x30314142}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x3, 0x2, 0x9, 0x80000}) (async) [ 912.317276] FAULT_INJECTION: forcing a failure. [ 912.317276] name failslab, interval 1, probability 0, space 0, times 0 [ 912.339947] CPU: 1 PID: 13664 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 912.348013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.348017] Call Trace: [ 912.348032] dump_stack+0x1b2/0x281 09:15:06 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @discrete={0x7, 0xffffffff}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @discrete={0x7, 0xffffffff}}) (async) 09:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0xfffffa6e, 0xfffffffe, 0x80800}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x2c, 0x0, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}}, 0x90) 09:15:06 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) [ 912.348048] should_fail.cold+0x10a/0x149 [ 912.348062] should_failslab+0xd6/0x130 [ 912.348076] kmem_cache_alloc_node_trace+0x25a/0x400 [ 912.348085] ? mempool_free+0x1d0/0x1d0 [ 912.348095] mempool_create_node+0x76/0x3e0 [ 912.348105] ? mempool_kmalloc+0x20/0x20 [ 912.348119] bioset_create+0x506/0x750 [ 912.348128] ? kmem_cache_alloc_node+0x38b/0x410 [ 912.348142] blk_alloc_queue_node+0xa8/0xb40 [ 912.348154] blk_mq_init_queue+0x42/0x90 [ 912.348164] loop_add+0x303/0x830 [ 912.348173] ? loop_queue_rq+0x280/0x280 09:15:06 executing program 4: ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0xfffffa6e, 0xfffffffe, 0x80800}) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x2c, 0x0, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}}, 0x90) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0xfffffa6e, 0xfffffffe, 0x80800}) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x2c, 0x0, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}}, 0x90) (async) 09:15:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x9, 0x100, 0x80800}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) [ 912.348181] ? loop_queue_work+0x21e0/0x21e0 [ 912.348195] loop_control_ioctl+0x11a/0x3f0 [ 912.348203] ? loop_lookup+0x190/0x190 [ 912.348211] ? SyS_write+0x1b7/0x210 [ 912.348222] ? loop_lookup+0x190/0x190 [ 912.348231] do_vfs_ioctl+0x75a/0xff0 [ 912.348242] ? lock_acquire+0x170/0x3f0 [ 912.348251] ? ioctl_preallocate+0x1a0/0x1a0 [ 912.348264] ? __fget+0x2df/0x460 [ 912.348275] ? do_vfs_ioctl+0xff0/0xff0 [ 912.348286] ? security_file_ioctl+0x83/0xb0 [ 912.348295] SyS_ioctl+0x7f/0xb0 [ 912.348303] ? do_vfs_ioctl+0xff0/0xff0 [ 912.348314] do_syscall_64+0x1d5/0x640 [ 912.348329] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 912.348337] RIP: 0033:0x7f8002e8f059 [ 912.348342] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.348361] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 912.348369] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 912.500406] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 09:15:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 18) 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x2, 0xfffffa6e, 0xfffffffe, 0x80800}) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x2c, 0x0, @in6={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}}, 0x90) [ 912.500412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.500416] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 912.557359] FAULT_INJECTION: forcing a failure. [ 912.557359] name failslab, interval 1, probability 0, space 0, times 0 [ 912.569106] CPU: 0 PID: 13731 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 912.576996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.586450] Call Trace: [ 912.589059] dump_stack+0x1b2/0x281 [ 912.589074] should_fail.cold+0x10a/0x149 [ 912.596848] should_failslab+0xd6/0x130 [ 912.600833] kmem_cache_alloc_node_trace+0x25a/0x400 [ 912.605935] ? mempool_free+0x1d0/0x1d0 [ 912.609909] __kmalloc_node+0x38/0x70 [ 912.613709] mempool_create_node+0xb1/0x3e0 09:15:06 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 09:15:06 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x111, 0x3}}, 0x20) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x7, 0x3, 0x3ff, 0x80800}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x3, 0xa, 0x0, 0x81, 0x7d, 0xfff, &(0x7f00000001c0)="bf94f6979b9f1262f882b70c47119f831329c712dbf51d423134acb4c5554fbe8b4dea1200fee0aeff795cb7b42484235c41764d2fcd1344f01ccaa2668aa1e579b159cfd13393a38bcf67b3e234ab551347fb02d25256b56ba49010d2d2d4d14fdd47b7da7437efe9ef20a0e1599b0f611a3d7d57cf33e2d866f6f129"}) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x400, 0x100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x2, 0x47524247, 0x0, @stepwise={0x0, 0x8, 0x0, 0xfffff35c}}) 09:15:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1f, 0x0, 0x2, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x35315258}) 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x9, 0x100, 0x80800}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:06 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 09:15:06 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x111, 0x3}}, 0x20) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x7, 0x3, 0x3ff, 0x80800}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x3, 0xa, 0x0, 0x81, 0x7d, 0xfff, &(0x7f00000001c0)="bf94f6979b9f1262f882b70c47119f831329c712dbf51d423134acb4c5554fbe8b4dea1200fee0aeff795cb7b42484235c41764d2fcd1344f01ccaa2668aa1e579b159cfd13393a38bcf67b3e234ab551347fb02d25256b56ba49010d2d2d4d14fdd47b7da7437efe9ef20a0e1599b0f611a3d7d57cf33e2d866f6f129"}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x400, 0x100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x2, 0x47524247, 0x0, @stepwise={0x0, 0x8, 0x0, 0xfffff35c}}) 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 19) [ 912.618026] ? mempool_kmalloc+0x20/0x20 [ 912.622095] bioset_create+0x506/0x750 [ 912.625988] ? kmem_cache_alloc_node+0x38b/0x410 [ 912.630745] blk_alloc_queue_node+0xa8/0xb40 [ 912.635158] blk_mq_init_queue+0x42/0x90 [ 912.639228] loop_add+0x303/0x830 [ 912.642684] ? loop_queue_rq+0x280/0x280 [ 912.646755] ? loop_queue_work+0x21e0/0x21e0 09:15:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1f, 0x0, 0x2, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x35315258}) 09:15:06 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x43353039, 0xffffffff}}) [ 912.646768] loop_control_ioctl+0x11a/0x3f0 [ 912.646777] ? loop_lookup+0x190/0x190 [ 912.646787] ? SyS_write+0x1b7/0x210 [ 912.646798] ? loop_lookup+0x190/0x190 [ 912.646807] do_vfs_ioctl+0x75a/0xff0 [ 912.646819] ? lock_acquire+0x170/0x3f0 [ 912.646834] ? ioctl_preallocate+0x1a0/0x1a0 09:15:06 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x111, 0x3}}, 0x20) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x7, 0x3, 0x3ff, 0x80800}) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x3, 0xa, 0x0, 0x81, 0x7d, 0xfff, &(0x7f00000001c0)="bf94f6979b9f1262f882b70c47119f831329c712dbf51d423134acb4c5554fbe8b4dea1200fee0aeff795cb7b42484235c41764d2fcd1344f01ccaa2668aa1e579b159cfd13393a38bcf67b3e234ab551347fb02d25256b56ba49010d2d2d4d14fdd47b7da7437efe9ef20a0e1599b0f611a3d7d57cf33e2d866f6f129"}) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x400, 0x100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x2, 0x47524247, 0x0, @stepwise={0x0, 0x8, 0x0, 0xfffff35c}}) 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 09:15:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1f, 0x0, 0x2, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x35315258}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1f, 0x0, 0x2, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886", 0x35315258}) (async) [ 912.646846] ? __fget+0x2df/0x460 [ 912.646856] ? do_vfs_ioctl+0xff0/0xff0 [ 912.646867] ? security_file_ioctl+0x83/0xb0 [ 912.646876] SyS_ioctl+0x7f/0xb0 [ 912.646883] ? do_vfs_ioctl+0xff0/0xff0 [ 912.646894] do_syscall_64+0x1d5/0x640 [ 912.646919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 912.646927] RIP: 0033:0x7f8002e8f059 [ 912.646932] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.646940] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 912.646945] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 912.646949] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 912.646953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.646958] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 912.704711] FAULT_INJECTION: forcing a failure. [ 912.704711] name failslab, interval 1, probability 0, space 0, times 0 [ 912.806997] CPU: 1 PID: 13754 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 09:15:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x9, 0x100, 0x80800}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:06 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSGL2CALL(r0, 0x89e5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 09:15:06 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x10, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4048081) r3 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009d40)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000009d00)={&(0x7f0000009c40)={0x14, r3, 0x20, 0x70bd25}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4048084) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x4, 0x44, 0x40, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, 0x7, 0x1, 0x9, 0x101}}) [ 912.814888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.824239] Call Trace: [ 912.826837] dump_stack+0x1b2/0x281 [ 912.830470] should_fail.cold+0x10a/0x149 [ 912.834626] should_failslab+0xd6/0x130 [ 912.838603] kmem_cache_alloc+0x28e/0x3c0 [ 912.842747] ? mempool_free+0x1d0/0x1d0 [ 912.846729] mempool_create_node+0x2d2/0x3e0 [ 912.846745] bioset_create+0x506/0x750 [ 912.846756] ? kmem_cache_alloc_node+0x38b/0x410 [ 912.846769] blk_alloc_queue_node+0xa8/0xb40 [ 912.846783] blk_mq_init_queue+0x42/0x90 [ 912.846793] loop_add+0x303/0x830 [ 912.846809] ? loop_queue_rq+0x280/0x280 [ 912.846817] ? loop_queue_work+0x21e0/0x21e0 [ 912.846830] loop_control_ioctl+0x11a/0x3f0 [ 912.846839] ? loop_lookup+0x190/0x190 [ 912.846847] ? SyS_write+0x1b7/0x210 [ 912.846859] ? loop_lookup+0x190/0x190 [ 912.846869] do_vfs_ioctl+0x75a/0xff0 [ 912.846880] ? lock_acquire+0x170/0x3f0 [ 912.846890] ? ioctl_preallocate+0x1a0/0x1a0 [ 912.846901] ? __fget+0x2df/0x460 [ 912.846912] ? do_vfs_ioctl+0xff0/0xff0 [ 912.846924] ? security_file_ioctl+0x83/0xb0 09:15:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 20) 09:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x4, 0x31303453, 0x1, @stepwise={0x0, 0x3ff, 0x0, 0x5, 0x74a, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x2}, 0x5ac77674, 0x0, &(0x7f0000000040)="e125f79875d04d2bb3b1d3f3a967b029910df056a4c7af088dec8b5c50a4cd0b2ddb03358b923f912b7a0f1f30e20ef87d294839b038f9cebc120873d9291bf6e378c8f6d9325e547bccee3ee1fe5d", 0x4f, 0x3315, 0x80000000, 0x0, 0x7f, 0x6, &(0x7f00000000c0)="86f7c0f121153107d34c9807dbc61231a1877e8bcba15d4b6256296fa197bbfae8ab94d1b8cd2f991b568dee2c2c7b13c77455e9038a038aef19b0cb8beb0b02f0fada824e"}) 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 09:15:06 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040), 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x2254, 0xd, [{0xb}, {0x3, 0x1}, {0xe}, {0xa, 0x1}, {0xe}, {0xf}, {0xf}, {0x7, 0x1}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0xd}, {0x3}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 912.846934] SyS_ioctl+0x7f/0xb0 [ 912.846941] ? do_vfs_ioctl+0xff0/0xff0 [ 912.846953] do_syscall_64+0x1d5/0x640 [ 912.846968] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 912.846977] RIP: 0033:0x7f8002e8f059 [ 912.939998] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.940012] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x0, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x2}, 0x5ac77674, 0x0, &(0x7f0000000040)="e125f79875d04d2bb3b1d3f3a967b029910df056a4c7af088dec8b5c50a4cd0b2ddb03358b923f912b7a0f1f30e20ef87d294839b038f9cebc120873d9291bf6e378c8f6d9325e547bccee3ee1fe5d", 0x4f, 0x3315, 0x80000000, 0x0, 0x7f, 0x6, &(0x7f00000000c0)="86f7c0f121153107d34c9807dbc61231a1877e8bcba15d4b6256296fa197bbfae8ab94d1b8cd2f991b568dee2c2c7b13c77455e9038a038aef19b0cb8beb0b02f0fada824e"}) (rerun: 64) 09:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x4, 0x31303453, 0x1, @stepwise={0x0, 0x3ff, 0x0, 0x5, 0x74a, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 21) [ 912.940016] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 912.940020] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 912.940024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:15:06 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x0, @sdr={0x43353039, 0xffffffff}}) 09:15:06 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 22) [ 912.940029] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 912.988834] FAULT_INJECTION: forcing a failure. [ 912.988834] name failslab, interval 1, probability 0, space 0, times 0 [ 912.988846] CPU: 1 PID: 13800 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 912.988851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.988854] Call Trace: [ 912.988867] dump_stack+0x1b2/0x281 [ 912.988882] should_fail.cold+0x10a/0x149 [ 912.988896] should_failslab+0xd6/0x130 [ 912.988910] kmem_cache_alloc+0x28e/0x3c0 [ 912.988919] ? mempool_free+0x1d0/0x1d0 [ 912.988930] mempool_create_node+0x2d2/0x3e0 [ 912.988944] bioset_create+0x506/0x750 [ 912.988951] ? kmem_cache_alloc_node+0x38b/0x410 [ 912.988962] blk_alloc_queue_node+0xa8/0xb40 [ 912.988973] blk_mq_init_queue+0x42/0x90 [ 912.988983] loop_add+0x303/0x830 [ 912.988993] ? loop_queue_rq+0x280/0x280 [ 912.989000] ? loop_queue_work+0x21e0/0x21e0 [ 912.989014] loop_control_ioctl+0x11a/0x3f0 [ 912.989022] ? loop_lookup+0x190/0x190 [ 912.989029] ? SyS_write+0x1b7/0x210 [ 912.989041] ? loop_lookup+0x190/0x190 [ 912.989050] do_vfs_ioctl+0x75a/0xff0 [ 912.989063] ? lock_acquire+0x170/0x3f0 [ 912.989073] ? ioctl_preallocate+0x1a0/0x1a0 [ 912.989090] ? __fget+0x2df/0x460 [ 912.989103] ? do_vfs_ioctl+0xff0/0xff0 [ 912.989116] ? security_file_ioctl+0x83/0xb0 [ 912.989125] SyS_ioctl+0x7f/0xb0 [ 912.989132] ? do_vfs_ioctl+0xff0/0xff0 [ 912.989142] do_syscall_64+0x1d5/0x640 [ 912.989156] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 912.989163] RIP: 0033:0x7f8002e8f059 [ 912.989168] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.989178] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 912.989184] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 912.989189] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 912.989195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.989200] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 913.027171] FAULT_INJECTION: forcing a failure. [ 913.027171] name failslab, interval 1, probability 0, space 0, times 0 [ 913.027182] CPU: 1 PID: 13807 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 913.027188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.027191] Call Trace: [ 913.027204] dump_stack+0x1b2/0x281 [ 913.027220] should_fail.cold+0x10a/0x149 [ 913.027234] should_failslab+0xd6/0x130 [ 913.027248] kmem_cache_alloc_node_trace+0x25a/0x400 [ 913.027263] bdi_alloc_node+0x5d/0x2e0 [ 913.027274] blk_alloc_queue_node+0xe2/0xb40 [ 913.027294] blk_mq_init_queue+0x42/0x90 [ 913.027307] loop_add+0x303/0x830 [ 913.027318] ? loop_queue_rq+0x280/0x280 [ 913.027326] ? loop_queue_work+0x21e0/0x21e0 [ 913.027341] loop_control_ioctl+0x11a/0x3f0 [ 913.027351] ? loop_lookup+0x190/0x190 [ 913.027361] ? SyS_write+0x1b7/0x210 [ 913.027374] ? loop_lookup+0x190/0x190 [ 913.027385] do_vfs_ioctl+0x75a/0xff0 [ 913.027396] ? lock_acquire+0x170/0x3f0 [ 913.027405] ? ioctl_preallocate+0x1a0/0x1a0 [ 913.027418] ? __fget+0x2df/0x460 [ 913.027429] ? do_vfs_ioctl+0xff0/0xff0 [ 913.027438] ? security_file_ioctl+0x83/0xb0 [ 913.027447] SyS_ioctl+0x7f/0xb0 [ 913.027455] ? do_vfs_ioctl+0xff0/0xff0 [ 913.027466] do_syscall_64+0x1d5/0x640 [ 913.027481] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 913.027488] RIP: 0033:0x7f8002e8f059 [ 913.027493] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.027502] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 913.027507] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 913.027512] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.027517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.027522] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 913.067301] FAULT_INJECTION: forcing a failure. [ 913.067301] name failslab, interval 1, probability 0, space 0, times 0 [ 913.067313] CPU: 1 PID: 13814 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 913.067319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.067322] Call Trace: [ 913.067337] dump_stack+0x1b2/0x281 [ 913.067353] should_fail.cold+0x10a/0x149 [ 913.067367] should_failslab+0xd6/0x130 [ 913.067380] kmem_cache_alloc_trace+0x29a/0x3d0 [ 913.067395] wb_congested_get_create+0x15b/0x360 [ 913.067410] wb_init+0x4f6/0x7c0 [ 913.067421] ? __raw_spin_lock_init+0x28/0x100 [ 913.067433] cgwb_bdi_init+0xe2/0x1e0 [ 913.067444] bdi_alloc_node+0x224/0x2e0 [ 913.067454] blk_alloc_queue_node+0xe2/0xb40 [ 913.067467] blk_mq_init_queue+0x42/0x90 [ 913.067477] loop_add+0x303/0x830 [ 913.067486] ? loop_queue_rq+0x280/0x280 [ 913.067493] ? loop_queue_work+0x21e0/0x21e0 [ 913.067507] loop_control_ioctl+0x11a/0x3f0 [ 913.067516] ? loop_lookup+0x190/0x190 [ 913.067524] ? SyS_write+0x1b7/0x210 [ 913.067536] ? loop_lookup+0x190/0x190 [ 913.067546] do_vfs_ioctl+0x75a/0xff0 [ 913.067555] ? lock_acquire+0x170/0x3f0 [ 913.067564] ? ioctl_preallocate+0x1a0/0x1a0 [ 913.067576] ? __fget+0x2df/0x460 [ 913.067586] ? do_vfs_ioctl+0xff0/0xff0 [ 913.067595] ? security_file_ioctl+0x83/0xb0 [ 913.067605] SyS_ioctl+0x7f/0xb0 [ 913.067612] ? do_vfs_ioctl+0xff0/0xff0 [ 913.067623] do_syscall_64+0x1d5/0x640 [ 913.067640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 913.067648] RIP: 0033:0x7f8002e8f059 [ 913.067653] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.067663] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 09:15:07 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x10, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4048081) (async) r3 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009d40)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000009d00)={&(0x7f0000009c40)={0x14, r3, 0x20, 0x70bd25}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4048084) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x4, 0x44, 0x40, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, 0x7, 0x1, 0x9, 0x101}}) 09:15:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x4, 0x31303453, 0x1, @stepwise={0x0, 0x3ff, 0x0, 0x5, 0x74a, 0x5}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x4, 0x31303453, 0x1, @stepwise={0x0, 0x3ff, 0x0, 0x5, 0x74a, 0x5}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) 09:15:07 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x2}, 0x5ac77674, 0x0, &(0x7f0000000040)="e125f79875d04d2bb3b1d3f3a967b029910df056a4c7af088dec8b5c50a4cd0b2ddb03358b923f912b7a0f1f30e20ef87d294839b038f9cebc120873d9291bf6e378c8f6d9325e547bccee3ee1fe5d", 0x4f, 0x3315, 0x80000000, 0x0, 0x7f, 0x6, &(0x7f00000000c0)="86f7c0f121153107d34c9807dbc61231a1877e8bcba15d4b6256296fa197bbfae8ab94d1b8cd2f991b568dee2c2c7b13c77455e9038a038aef19b0cb8beb0b02f0fada824e"}) (rerun: 64) 09:15:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x0, @sdr={0x43353039, 0xffffffff}}) 09:15:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 23) 09:15:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040), 0x0) (async) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x2254, 0xd, [{0xb}, {0x3, 0x1}, {0xe}, {0xa, 0x1}, {0xe}, {0xf}, {0xf}, {0x7, 0x1}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0xd}, {0x3}]}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr={0x0, 0xffffffff}}) 09:15:07 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async, rerun: 32) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x10, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4048081) (async) r3 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009d40)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000009d00)={&(0x7f0000009c40)={0x14, r3, 0x20, 0x70bd25}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4048084) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x4, 0x44, 0x40, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, 0x7, 0x1, 0x9, 0x101}}) [ 913.067669] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 913.067674] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.067679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.067685] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:07 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x450000) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x24004040) fcntl$getown(r1, 0x9) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x3ff, 0x0, 0x2, 0x0, 0x6}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x0, 0x3, 0x4, 0x100000, 0x8, {r1, r2/1000+10000}, {0x5, 0x0, 0x6, 0x3, 0x3, 0x8f, "75229b0b"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x5}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x2000, 0x224, {}, {0x1, 0x2, 0xff, 0x1, 0xf8, 0xa1, "d01002bc"}, 0xfff, 0x1, {&(0x7f0000000180)=[{0x800, 0x38, {0x2}, 0x800008}, {0x400, 0x7, {0x100}, 0x34d}]}, 0x2}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) close$fd_v4l2_buffer(r3) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000002c0)) [ 913.670775] FAULT_INJECTION: forcing a failure. [ 913.670775] name failslab, interval 1, probability 0, space 0, times 0 [ 913.690471] CPU: 0 PID: 13829 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 913.698384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.707733] Call Trace: [ 913.710327] dump_stack+0x1b2/0x281 [ 913.713965] should_fail.cold+0x10a/0x149 09:15:07 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040), 0x0) (async, rerun: 64) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000040)={0x2254, 0xd, [{0xb}, {0x3, 0x1}, {0xe}, {0xa, 0x1}, {0xe}, {0xf}, {0xf}, {0x7, 0x1}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0xd}, {0x3}]}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr}) 09:15:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr}) [ 913.718121] should_failslab+0xd6/0x130 [ 913.722102] kmem_cache_alloc_trace+0x29a/0x3d0 [ 913.726779] blk_alloc_queue_stats+0x3c/0x100 [ 913.731282] blk_alloc_queue_node+0x125/0xb40 [ 913.735788] blk_mq_init_queue+0x42/0x90 [ 913.739952] loop_add+0x303/0x830 09:15:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 24) [ 913.739963] ? loop_queue_rq+0x280/0x280 09:15:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 25) 09:15:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x1, @sdr}) 09:15:07 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 26) [ 913.739971] ? loop_queue_work+0x21e0/0x21e0 [ 913.739984] loop_control_ioctl+0x11a/0x3f0 [ 913.739994] ? loop_lookup+0x190/0x190 [ 913.740004] ? SyS_write+0x1b7/0x210 [ 913.740016] ? loop_lookup+0x190/0x190 09:15:07 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x10, 0x70bd29, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4048081) r3 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000009d40)={&(0x7f0000009bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000009d00)={&(0x7f0000009c40)={0x14, r3, 0x20, 0x70bd25}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4048084) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r2, 0x29, 0x7, 0x4, 0x44, 0x40, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, 0x7, 0x1, 0x9, 0x101}}) [ 913.740026] do_vfs_ioctl+0x75a/0xff0 [ 913.740038] ? lock_acquire+0x170/0x3f0 [ 913.740047] ? ioctl_preallocate+0x1a0/0x1a0 [ 913.740060] ? __fget+0x2df/0x460 [ 913.740070] ? do_vfs_ioctl+0xff0/0xff0 [ 913.740081] ? security_file_ioctl+0x83/0xb0 [ 913.740092] SyS_ioctl+0x7f/0xb0 [ 913.740100] ? do_vfs_ioctl+0xff0/0xff0 [ 913.740111] do_syscall_64+0x1d5/0x640 [ 913.740128] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 913.740136] RIP: 0033:0x7f8002e8f059 [ 913.740142] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.740153] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 913.740158] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 913.740164] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.740169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.740175] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 913.786203] FAULT_INJECTION: forcing a failure. [ 913.786203] name failslab, interval 1, probability 0, space 0, times 0 [ 913.786215] CPU: 0 PID: 13852 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 913.786222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.786225] Call Trace: [ 913.786242] dump_stack+0x1b2/0x281 [ 913.786258] should_fail.cold+0x10a/0x149 [ 913.786272] should_failslab+0xd6/0x130 [ 913.786286] kmem_cache_alloc_node_trace+0x25a/0x400 [ 913.786301] blkg_alloc+0x92/0x5c0 [ 913.786316] blkcg_init_queue+0x23/0x410 [ 913.786327] blk_alloc_queue_node+0x826/0xb40 [ 913.786341] blk_mq_init_queue+0x42/0x90 [ 913.786351] loop_add+0x303/0x830 [ 913.786361] ? loop_queue_rq+0x280/0x280 [ 913.786370] ? loop_queue_work+0x21e0/0x21e0 [ 913.786383] loop_control_ioctl+0x11a/0x3f0 [ 913.786393] ? loop_lookup+0x190/0x190 [ 913.786401] ? SyS_write+0x1b7/0x210 [ 913.786413] ? loop_lookup+0x190/0x190 [ 913.786423] do_vfs_ioctl+0x75a/0xff0 [ 913.786434] ? lock_acquire+0x170/0x3f0 [ 913.786443] ? ioctl_preallocate+0x1a0/0x1a0 [ 913.786456] ? __fget+0x2df/0x460 [ 913.786467] ? do_vfs_ioctl+0xff0/0xff0 [ 913.786478] ? security_file_ioctl+0x83/0xb0 [ 913.786488] SyS_ioctl+0x7f/0xb0 [ 913.786495] ? do_vfs_ioctl+0xff0/0xff0 [ 913.786506] do_syscall_64+0x1d5/0x640 [ 913.786521] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 913.786528] RIP: 0033:0x7f8002e8f059 [ 913.786533] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.786543] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 913.786549] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 913.786555] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.786561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.786567] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 913.814115] FAULT_INJECTION: forcing a failure. [ 913.814115] name failslab, interval 1, probability 0, space 0, times 0 [ 913.814127] CPU: 0 PID: 13860 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 913.814132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.814136] Call Trace: [ 913.814150] dump_stack+0x1b2/0x281 [ 913.814166] should_fail.cold+0x10a/0x149 [ 913.814181] should_failslab+0xd6/0x130 [ 913.814203] kmem_cache_alloc_node_trace+0x25a/0x400 [ 913.814219] blk_throtl_init+0x7a/0x590 [ 913.814232] blkcg_init_queue+0x18f/0x410 [ 913.814244] blk_alloc_queue_node+0x826/0xb40 [ 913.814258] blk_mq_init_queue+0x42/0x90 [ 913.814268] loop_add+0x303/0x830 [ 913.814279] ? loop_queue_rq+0x280/0x280 [ 913.814287] ? loop_queue_work+0x21e0/0x21e0 [ 913.814301] loop_control_ioctl+0x11a/0x3f0 [ 913.814310] ? loop_lookup+0x190/0x190 [ 913.814318] ? SyS_write+0x1b7/0x210 [ 913.814331] ? loop_lookup+0x190/0x190 [ 913.814341] do_vfs_ioctl+0x75a/0xff0 [ 913.814351] ? lock_acquire+0x170/0x3f0 [ 913.814361] ? ioctl_preallocate+0x1a0/0x1a0 [ 913.814374] ? __fget+0x2df/0x460 [ 913.814385] ? do_vfs_ioctl+0xff0/0xff0 [ 913.814395] ? security_file_ioctl+0x83/0xb0 [ 913.814406] SyS_ioctl+0x7f/0xb0 [ 913.814414] ? do_vfs_ioctl+0xff0/0xff0 [ 913.814425] do_syscall_64+0x1d5/0x640 [ 913.814440] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 913.814448] RIP: 0033:0x7f8002e8f059 [ 913.814453] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 913.814464] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 913.814469] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 913.814474] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 913.814479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.814485] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 913.840380] FAULT_INJECTION: forcing a failure. 09:15:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 27) [ 913.840380] name failslab, interval 1, probability 0, space 0, times 0 [ 914.296946] CPU: 1 PID: 13864 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 914.296951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.296954] Call Trace: [ 914.296968] dump_stack+0x1b2/0x281 [ 914.296982] should_fail.cold+0x10a/0x149 [ 914.296996] should_failslab+0xd6/0x130 [ 914.297012] kmem_cache_alloc_node_trace+0x25a/0x400 [ 914.297028] throtl_pd_alloc+0x59/0x990 [ 914.297037] ? throtl_add_bio_tg+0x1e0/0x1e0 [ 914.297047] blkcg_activate_policy+0x115/0x5c0 [ 914.297062] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 914.297076] blk_throtl_init+0x408/0x590 [ 914.297088] blkcg_init_queue+0x18f/0x410 [ 914.297098] blk_alloc_queue_node+0x826/0xb40 [ 914.297110] blk_mq_init_queue+0x42/0x90 [ 914.297120] loop_add+0x303/0x830 [ 914.297128] ? loop_queue_rq+0x280/0x280 [ 914.297135] ? loop_queue_work+0x21e0/0x21e0 [ 914.297147] loop_control_ioctl+0x11a/0x3f0 [ 914.297156] ? loop_lookup+0x190/0x190 [ 914.297164] ? SyS_write+0x1b7/0x210 [ 914.297176] ? loop_lookup+0x190/0x190 [ 914.297185] do_vfs_ioctl+0x75a/0xff0 [ 914.297196] ? lock_acquire+0x170/0x3f0 [ 914.297204] ? ioctl_preallocate+0x1a0/0x1a0 [ 914.297217] ? __fget+0x2df/0x460 [ 914.297226] ? do_vfs_ioctl+0xff0/0xff0 [ 914.297236] ? security_file_ioctl+0x83/0xb0 [ 914.297245] SyS_ioctl+0x7f/0xb0 [ 914.297252] ? do_vfs_ioctl+0xff0/0xff0 [ 914.297263] do_syscall_64+0x1d5/0x640 [ 914.297277] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 914.297285] RIP: 0033:0x7f8002e8f059 [ 914.297289] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.297298] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 914.297302] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 914.297306] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.297309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.297313] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 914.349269] FAULT_INJECTION: forcing a failure. [ 914.349269] name failslab, interval 1, probability 0, space 0, times 0 [ 914.501111] CPU: 0 PID: 13871 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 914.501117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.501121] Call Trace: [ 914.501137] dump_stack+0x1b2/0x281 [ 914.501152] should_fail.cold+0x10a/0x149 [ 914.528880] should_failslab+0xd6/0x130 [ 914.528894] kmem_cache_alloc_node_trace+0x58/0x400 [ 914.528909] throtl_pd_alloc+0x59/0x990 [ 914.528919] ? throtl_add_bio_tg+0x1e0/0x1e0 [ 914.528928] blkcg_activate_policy+0x23e/0x5c0 [ 914.528947] blk_throtl_init+0x408/0x590 [ 914.528959] blkcg_init_queue+0x18f/0x410 [ 914.528971] blk_alloc_queue_node+0x826/0xb40 [ 914.528984] blk_mq_init_queue+0x42/0x90 [ 914.528995] loop_add+0x303/0x830 [ 914.529005] ? loop_queue_rq+0x280/0x280 [ 914.529013] ? loop_queue_work+0x21e0/0x21e0 [ 914.529027] loop_control_ioctl+0x11a/0x3f0 [ 914.529036] ? loop_lookup+0x190/0x190 [ 914.529045] ? SyS_write+0x1b7/0x210 [ 914.529057] ? loop_lookup+0x190/0x190 [ 914.529068] do_vfs_ioctl+0x75a/0xff0 [ 914.529080] ? lock_acquire+0x170/0x3f0 [ 914.529089] ? ioctl_preallocate+0x1a0/0x1a0 [ 914.529102] ? __fget+0x2df/0x460 [ 914.529113] ? do_vfs_ioctl+0xff0/0xff0 [ 914.529124] ? security_file_ioctl+0x83/0xb0 [ 914.529134] SyS_ioctl+0x7f/0xb0 [ 914.529142] ? do_vfs_ioctl+0xff0/0xff0 [ 914.529153] do_syscall_64+0x1d5/0x640 [ 914.529169] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 914.529177] RIP: 0033:0x7f8002e8f059 [ 914.529182] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.529192] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 914.529198] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 914.529208] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.529213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x2}}, 0x20) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x450000) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) (async) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x24004040) (async) fcntl$getown(r1, 0x9) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 28) 09:15:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r2, 0x80, "c16028", "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"}}, 0x110) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 09:15:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x3ff, 0x0, 0x2, 0x0, 0x6}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x0, 0x3, 0x4, 0x100000, 0x8, {r1, r2/1000+10000}, {0x5, 0x0, 0x6, 0x3, 0x3, 0x8f, "75229b0b"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x5}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x2000, 0x224, {}, {0x1, 0x2, 0xff, 0x1, 0xf8, 0xa1, "d01002bc"}, 0xfff, 0x1, {&(0x7f0000000180)=[{0x800, 0x38, {0x2}, 0x800008}, {0x400, 0x7, {0x100}, 0x34d}]}, 0x2}) (async) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) close$fd_v4l2_buffer(r3) (async) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000002c0)) 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x2}}, 0x20) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x2}}, 0x20) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) 09:15:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x2}}, 0x20) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 914.529219] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x2}}, 0x20) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x3ff, 0x0, 0x2, 0x0, 0x6}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x0, 0x3, 0x4, 0x100000, 0x8, {r1, r2/1000+10000}, {0x5, 0x0, 0x6, 0x3, 0x3, 0x8f, "75229b0b"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x5}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x2000, 0x224, {}, {0x1, 0x2, 0xff, 0x1, 0xf8, 0xa1, "d01002bc"}, 0xfff, 0x1, {&(0x7f0000000180)=[{0x800, 0x38, {0x2}, 0x800008}, {0x400, 0x7, {0x100}, 0x34d}]}, 0x2}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) close$fd_v4l2_buffer(r3) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000002c0)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x3ff, 0x0, 0x2, 0x0, 0x6}) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@userptr={0x0, 0x3, 0x4, 0x100000, 0x8, {r1, r2/1000+10000}, {0x5, 0x0, 0x6, 0x3, 0x3, 0x8f, "75229b0b"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x5}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x2000, 0x224, {}, {0x1, 0x2, 0xff, 0x1, 0xf8, 0xa1, "d01002bc"}, 0xfff, 0x1, {&(0x7f0000000180)=[{0x800, 0x38, {0x2}, 0x800008}, {0x400, 0x7, {0x100}, 0x34d}]}, 0x2}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) (async) close$fd_v4l2_buffer(r3) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000002c0)) (async) 09:15:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r2, 0x80, "c16028", "88d1b09a365de412b8668353b2f249dab6d9c651309e66a2f8960a4c0273444cd7593fb19e048abeaeacab98d14d7a39cd2018368eacb7f9569fa329f9ef6873440a5720148ae595df7a83f735b8e110d26da4b331132829e7d4d89979ee2a50d4d03c2ddc90c62570a412c63a19d68bf905354d3b6f2d2ebdea7a81414b659572b65760a99f1a281997a43f2e43dbedc3c8e49758bd4db49795bd98f4566ded6591fe7a88a5f7dc1ed68bf69bf35ffbe35d3831037a520cd165f83d0f71c3030b07edc50536be8421f2a228cfdf4961acd68cc4988342acfd0192c771a02a43a9ff9958e093ab6dafe34e98a49f7161cde457872f5da28e7897d84ae7b1aab6"}}, 0x110) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 29) [ 914.788762] FAULT_INJECTION: forcing a failure. [ 914.788762] name failslab, interval 1, probability 0, space 0, times 0 [ 914.809133] CPU: 1 PID: 13884 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 09:15:08 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x450000) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async) r5 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, 0x0, 0x0) (async) r6 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, 0x0, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x24004040) (async) fcntl$getown(r1, 0x9) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) (rerun: 64) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r2, 0x80, "c16028", "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"}}, 0x110) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 914.809140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.809144] Call Trace: [ 914.809160] dump_stack+0x1b2/0x281 [ 914.809176] should_fail.cold+0x10a/0x149 [ 914.809190] should_failslab+0xd6/0x130 [ 914.809203] kmem_cache_alloc_trace+0x29a/0x3d0 [ 914.809216] ? blk_mq_can_queue+0x40/0x40 [ 914.809225] ? queue_set_hctx_shared+0x210/0x210 [ 914.809235] blk_stat_alloc_callback+0x54/0x2f0 [ 914.809250] blk_mq_init_allocated_queue+0x80/0xfd0 [ 914.809260] ? blkcg_init_queue+0x19f/0x410 [ 914.809270] ? blk_alloc_queue_node+0x82f/0xb40 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x4, 0x7, 0x1, {0x0, @sliced={0x4, [0x80, 0x2, 0x40, 0x6, 0x3, 0x800, 0xfffd, 0x573a, 0x6, 0x2, 0x3, 0x9, 0x100, 0xa1f, 0x8, 0x20, 0x401, 0x9, 0x3f1, 0x7, 0x1, 0x5, 0x3, 0x8001, 0x880, 0xfbff, 0x2, 0x4, 0x1, 0x3, 0x2, 0x2, 0x5, 0x7, 0x0, 0x81, 0x100, 0x32, 0x6, 0x0, 0x0, 0x3ff, 0x80, 0x1, 0x8, 0x1f, 0xffff, 0xc7f1], 0x1}}, 0x3}) [ 914.809282] blk_mq_init_queue+0x5a/0x90 [ 914.809292] loop_add+0x303/0x830 [ 914.809302] ? loop_queue_rq+0x280/0x280 [ 914.809310] ? loop_queue_work+0x21e0/0x21e0 [ 914.809324] loop_control_ioctl+0x11a/0x3f0 [ 914.809333] ? loop_lookup+0x190/0x190 [ 914.809341] ? SyS_write+0x1b7/0x210 [ 914.809354] ? loop_lookup+0x190/0x190 [ 914.809364] do_vfs_ioctl+0x75a/0xff0 [ 914.809375] ? lock_acquire+0x170/0x3f0 [ 914.809383] ? ioctl_preallocate+0x1a0/0x1a0 [ 914.809395] ? __fget+0x2df/0x460 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x4, 0x7, 0x1, {0x0, @sliced={0x4, [0x80, 0x2, 0x40, 0x6, 0x3, 0x800, 0xfffd, 0x573a, 0x6, 0x2, 0x3, 0x9, 0x100, 0xa1f, 0x8, 0x20, 0x401, 0x9, 0x3f1, 0x7, 0x1, 0x5, 0x3, 0x8001, 0x880, 0xfbff, 0x2, 0x4, 0x1, 0x3, 0x2, 0x2, 0x5, 0x7, 0x0, 0x81, 0x100, 0x32, 0x6, 0x0, 0x0, 0x3ff, 0x80, 0x1, 0x8, 0x1f, 0xffff, 0xc7f1], 0x1}}, 0x3}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x4, 0x7, 0x1, {0x0, @sliced={0x4, [0x80, 0x2, 0x40, 0x6, 0x3, 0x800, 0xfffd, 0x573a, 0x6, 0x2, 0x3, 0x9, 0x100, 0xa1f, 0x8, 0x20, 0x401, 0x9, 0x3f1, 0x7, 0x1, 0x5, 0x3, 0x8001, 0x880, 0xfbff, 0x2, 0x4, 0x1, 0x3, 0x2, 0x2, 0x5, 0x7, 0x0, 0x81, 0x100, 0x32, 0x6, 0x0, 0x0, 0x3ff, 0x80, 0x1, 0x8, 0x1f, 0xffff, 0xc7f1], 0x1}}, 0x3}) (async) 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x4, 0x7, 0x1, {0x0, @sliced={0x4, [0x80, 0x2, 0x40, 0x6, 0x3, 0x800, 0xfffd, 0x573a, 0x6, 0x2, 0x3, 0x9, 0x100, 0xa1f, 0x8, 0x20, 0x401, 0x9, 0x3f1, 0x7, 0x1, 0x5, 0x3, 0x8001, 0x880, 0xfbff, 0x2, 0x4, 0x1, 0x3, 0x2, 0x2, 0x5, 0x7, 0x0, 0x81, 0x100, 0x32, 0x6, 0x0, 0x0, 0x3ff, 0x80, 0x1, 0x8, 0x1f, 0xffff, 0xc7f1], 0x1}}, 0x3}) [ 914.809404] ? do_vfs_ioctl+0xff0/0xff0 [ 914.809413] ? security_file_ioctl+0x83/0xb0 [ 914.809422] SyS_ioctl+0x7f/0xb0 [ 914.809429] ? do_vfs_ioctl+0xff0/0xff0 [ 914.809440] do_syscall_64+0x1d5/0x640 [ 914.809454] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 914.809461] RIP: 0033:0x7f8002e8f059 [ 914.809466] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.809477] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 914.809482] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x1, "57b8d7d3559532365c46ed2e2007905c32d9b28788c57e8505566cdbd3f7f8a6", 0x30364d54}) 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x1, "57b8d7d3559532365c46ed2e2007905c32d9b28788c57e8505566cdbd3f7f8a6", 0x30364d54}) 09:15:08 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x9, 0x100, 0x80800}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:08 executing program 2: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x3ed, 0x1, 0x70bd27, 0x25dfdbff, "d7b55e3638455fb275f6a7c7926c580146d3757aad808036a591e2f9efe06a30eac072927be32bfba5063ca2e23ce810645e0382f4d3eeb77c701f0da9953ba2819dae2f8b1c928b964c8c4123a039c1a23910dadc5b2f91b4d79feab597c242afd686676b9704d1f342349b067134d30dda", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x7, 0x2, "584d7e8489dfad273717d5b0728bb709f387911084cb11cb8c245732fda01cb8506b25ceb080566346ebb3a14d3f154c058b790fc4b279841b00872bcec76eabd2c1530c03d414ad23f84a00adf21f8ef67db7bed6c4c66056a4efc87c6a94ffcdd4c28a95ddef8d8dc561467a85544ef8b78ed2ca9dbe4a655e6be501ed8d8e9432927c6d9cb35dff770d67ecac4c0f5125dff10c27d7e91b6728719b84b1c070f474ed6ce334a9bc119ad8edab9cf6352d1e73e057561f9e3534994bed36ffb5cb9ddde39e5121623cde2e8d2175eccbde1b5045f42ca16558ebc784a3553976db3a9d41200024bba631b9dc2a34eef443591af94aded0ad2ac0ec39335418"}) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@userptr={0x0, 0x0, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x4, 0x7, 0x4, 0x1f, 0xec, "ead817f6"}, 0x7, 0x2, {&(0x7f0000000240)}, 0x7ff, 0x0, r2}) [ 914.809488] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.809493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.809499] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 914.836309] FAULT_INJECTION: forcing a failure. [ 914.836309] name failslab, interval 1, probability 0, space 0, times 0 [ 915.028088] CPU: 1 PID: 13913 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 09:15:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 30) 09:15:08 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x1, "57b8d7d3559532365c46ed2e2007905c32d9b28788c57e8505566cdbd3f7f8a6", 0x30364d54}) [ 915.028095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.028099] Call Trace: [ 915.028114] dump_stack+0x1b2/0x281 [ 915.028129] should_fail.cold+0x10a/0x149 [ 915.028142] should_failslab+0xd6/0x130 [ 915.028154] __kmalloc+0x2c1/0x400 [ 915.028165] ? blk_stat_alloc_callback+0x81/0x2f0 [ 915.028175] ? blk_mq_can_queue+0x40/0x40 09:15:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 31) [ 915.028183] ? queue_set_hctx_shared+0x210/0x210 [ 915.028192] blk_stat_alloc_callback+0x81/0x2f0 [ 915.028206] blk_mq_init_allocated_queue+0x80/0xfd0 [ 915.028216] ? blkcg_init_queue+0x19f/0x410 [ 915.028227] ? blk_alloc_queue_node+0x82f/0xb40 [ 915.028239] blk_mq_init_queue+0x5a/0x90 [ 915.028249] loop_add+0x303/0x830 [ 915.028260] ? loop_queue_rq+0x280/0x280 [ 915.028268] ? loop_queue_work+0x21e0/0x21e0 [ 915.028282] loop_control_ioctl+0x11a/0x3f0 [ 915.028291] ? loop_lookup+0x190/0x190 [ 915.028300] ? SyS_write+0x1b7/0x210 [ 915.028312] ? loop_lookup+0x190/0x190 [ 915.028323] do_vfs_ioctl+0x75a/0xff0 [ 915.028334] ? lock_acquire+0x170/0x3f0 [ 915.028343] ? ioctl_preallocate+0x1a0/0x1a0 [ 915.028357] ? __fget+0x2df/0x460 [ 915.028368] ? do_vfs_ioctl+0xff0/0xff0 [ 915.028380] ? security_file_ioctl+0x83/0xb0 [ 915.028391] SyS_ioctl+0x7f/0xb0 [ 915.028398] ? do_vfs_ioctl+0xff0/0xff0 [ 915.028410] do_syscall_64+0x1d5/0x640 [ 915.028425] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 915.028433] RIP: 0033:0x7f8002e8f059 [ 915.028438] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.028448] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 915.028453] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 915.028459] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 915.028464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 915.028470] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 915.131521] FAULT_INJECTION: forcing a failure. [ 915.131521] name failslab, interval 1, probability 0, space 0, times 0 [ 915.131550] CPU: 0 PID: 13975 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 915.131555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.131558] Call Trace: [ 915.131571] dump_stack+0x1b2/0x281 [ 915.131584] should_fail.cold+0x10a/0x149 [ 915.131596] should_failslab+0xd6/0x130 [ 915.131608] kmem_cache_alloc_node_trace+0x25a/0x400 [ 915.131620] __kmalloc_node+0x38/0x70 [ 915.131630] blk_mq_init_allocated_queue+0x17b/0xfd0 [ 915.131639] ? blkcg_init_queue+0x19f/0x410 [ 915.131648] ? blk_alloc_queue_node+0x82f/0xb40 [ 915.131657] blk_mq_init_queue+0x5a/0x90 [ 915.131668] loop_add+0x303/0x830 [ 915.131677] ? loop_queue_rq+0x280/0x280 [ 915.131684] ? loop_queue_work+0x21e0/0x21e0 [ 915.131695] loop_control_ioctl+0x11a/0x3f0 [ 915.131702] ? loop_lookup+0x190/0x190 [ 915.131709] ? SyS_write+0x1b7/0x210 [ 915.131719] ? loop_lookup+0x190/0x190 [ 915.131727] do_vfs_ioctl+0x75a/0xff0 [ 915.131736] ? lock_acquire+0x170/0x3f0 [ 915.131744] ? ioctl_preallocate+0x1a0/0x1a0 [ 915.131755] ? __fget+0x2df/0x460 [ 915.131764] ? do_vfs_ioctl+0xff0/0xff0 [ 915.131773] ? security_file_ioctl+0x83/0xb0 [ 915.131781] SyS_ioctl+0x7f/0xb0 [ 915.131787] ? do_vfs_ioctl+0xff0/0xff0 [ 915.131797] do_syscall_64+0x1d5/0x640 [ 915.131809] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 915.131815] RIP: 0033:0x7f8002e8f059 [ 915.131820] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.131830] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 915.131835] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 915.131839] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 915.131853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 915.131859] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 915.206529] FAULT_INJECTION: forcing a failure. [ 915.206529] name failslab, interval 1, probability 0, space 0, times 0 [ 915.487621] CPU: 1 PID: 13985 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 915.487627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.487635] Call Trace: [ 915.507687] dump_stack+0x1b2/0x281 [ 915.507705] should_fail.cold+0x10a/0x149 [ 915.515447] should_failslab+0xd6/0x130 [ 915.519400] kmem_cache_alloc_node_trace+0x25a/0x400 [ 915.524481] __kmalloc_node+0x38/0x70 [ 915.528263] blk_mq_realloc_hw_ctxs+0x1a5/0xe00 [ 915.532931] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 915.537923] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 915.543622] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 915.548722] ? blkcg_init_queue+0x19f/0x410 [ 915.553038] ? blk_alloc_queue_node+0x82f/0xb40 [ 915.557689] blk_mq_init_queue+0x5a/0x90 [ 915.561729] loop_add+0x303/0x830 [ 915.565167] ? loop_queue_rq+0x280/0x280 [ 915.569205] ? loop_queue_work+0x21e0/0x21e0 [ 915.573589] loop_control_ioctl+0x11a/0x3f0 [ 915.577891] ? loop_lookup+0x190/0x190 [ 915.581753] ? SyS_write+0x1b7/0x210 [ 915.585443] ? loop_lookup+0x190/0x190 [ 915.589307] do_vfs_ioctl+0x75a/0xff0 [ 915.593084] ? lock_acquire+0x170/0x3f0 [ 915.597032] ? ioctl_preallocate+0x1a0/0x1a0 [ 915.601415] ? __fget+0x2df/0x460 [ 915.604841] ? do_vfs_ioctl+0xff0/0xff0 [ 915.608790] ? security_file_ioctl+0x83/0xb0 [ 915.613173] SyS_ioctl+0x7f/0xb0 [ 915.616513] ? do_vfs_ioctl+0xff0/0xff0 [ 915.620467] do_syscall_64+0x1d5/0x640 [ 915.624341] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 915.629505] RIP: 0033:0x7f8002e8f059 [ 915.633188] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.640884] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 915.648132] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 09:15:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x70bd28, 0xfffffffe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) [ 915.655378] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 915.662628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 915.669879] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00./file0\x00']) 09:15:09 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000002300)) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000002340), 0x7, 0x400) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r5, 0x2}}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=@ret_submit={{0x3, 0x10001, 0x0, 0x1, 0x4}, 0x8, 0xe8, 0xed, 0x20d, 0xff4, 0x0, "0bb813f7522ea068525031d815ff1f6fc24b94e464d81ee17c0b500ee3da911aa0ccb9829b52dd14705a233ba689abb683612421774eb3dc93667b96338bbadeeff7c8ad9a294a0ef2b9c331d92c76dff95fd5493f210b526cd1d0f0f3f07837c146ed358ca9f7249fddee94b59febb5f1f6f0c79194d6342aeedc78fcb7f220878e3e5cc2ab9afa65429557302b6f2ba182999f694a13a1790e30c16141e61b9130fcc9b248ca1287e4aff9f694a0c851fd74a6d527631b56fcf35dbe5ae9847139c87f1231c4f276ef556d9794bd7144923eac1793195665e52e4e98035ef0e259375f6104e8ff", [{0x5, 0x0, 0x1, 0xfd2}, {0x100, 0x8, 0x7}, {0xd5, 0xfffffffa, 0x2, 0x81}, {0x10001, 0x687ade9b, 0x1, 0x5}, {0xe8f, 0x101, 0x8}, {0x7, 0x8, 0x2, 0x80000000}, {0x3, 0x6, 0x479, 0xff}, {0x5759, 0x8000, 0x1000, 0xfff}, {0x8796, 0xffffffff, 0x8, 0x6}, {0x5, 0x80000000, 0x5, 0x9}, {0xffffffff, 0x3252, 0x7fff, 0x8001}, {0x6de, 0x2, 0x3f, 0x4}, {0x2, 0xfffffbbb, 0x2dd, 0x57a}, {0x0, 0x2, 0xff, 0xe7}, {0xd01, 0x8, 0x4, 0xfffffff8}, {0x100, 0x9, 0x8000, 0x20}, {0x4, 0x4, 0xfffffffe, 0x8001}, {0xfffffff7, 0x18, 0x1, 0xeef}, {0x7ff, 0x6, 0x2c851033, 0x9}, {0x4, 0x2, 0x6}, {0x7, 0x3, 0x3, 0x2}, {0x3, 0xd1, 0x1, 0x9}, {0x0, 0xb6, 0x1, 0x6}, {0x7, 0x2, 0x6, 0x4}, {0xdc30, 0x7, 0x7fff, 0x1ff}, {0x1, 0x7, 0x7, 0x10001}, {0x10001, 0x9, 0x3, 0x5d5}, {0x0, 0x1, 0x7}, {0x1, 0x1f, 0x4, 0x6}, {0xf6, 0x40, 0x411, 0xffffffff}, {0x4, 0x57f, 0xffff}, {0x7ff, 0x3b6, 0x716}, {0x8, 0x8, 0x4}, {0x3ff, 0x1, 0x1, 0x10001}, {0x9, 0x7016, 0x3, 0x32}, {0x5, 0x7ff, 0xba, 0x9269}, {0x1, 0x8, 0x4, 0xcbb}, {0x6, 0x80000000, 0x8, 0x5}, {0x40, 0x8, 0x80, 0x100}, {0x6, 0x0, 0x8, 0x5}, {0x2, 0x1, 0x1, 0x200}, {0x1, 0x7, 0x10000, 0x6}, {0x6f, 0x4, 0x5, 0x7fff}, {0xf18, 0x81, 0x6, 0x4}, {0xad6b, 0xd64, 0x5, 0x4}, {0x81, 0x4, 0x800, 0x3f}, {0x10001, 0x2, 0x3, 0x24b}, {0x3, 0x4, 0x3, 0xc97e}, {0x6, 0xb1f6, 0x9, 0x5}, {0x8e, 0x800, 0x46, 0xfff}, {0x7fffffff, 0xd4c, 0x7fff, 0x3a62}, {0xfff, 0xffffffff, 0x4, 0xfff}, {0x8, 0xf0f, 0xc83, 0x9}, {0x4, 0x8, 0x3, 0x401}, {0x6, 0xcd4, 0xc0da, 0x7}, {0x101, 0x0, 0x7, 0x8}, {0xa94, 0xffffffff, 0x97, 0xe65c}, {0x101, 0x9, 0x5, 0x200}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x1000, 0x4, 0x4}, {0x31f1, 0x6, 0x38d0, 0x2}, {0x7, 0x800, 0x8001, 0x80000000}, {0x2, 0x80000000, 0x78a, 0x7ff}, {0x0, 0x6, 0xffffffff, 0x401}, {0x72, 0x1, 0x7, 0xfffff5f1}, {0x7, 0x6, 0x8, 0xc8}, {0x9, 0x7, 0x81, 0x80000000}, {0x17d90, 0x6, 0x5, 0x1}, {0x3, 0x80, 0x5, 0xffffd1fa}, {0x205, 0x6, 0x80000001, 0x3}, {0x260, 0x297, 0xa4, 0x9}, {0x2, 0x7, 0x10000, 0x1f}, {0x7, 0x8, 0x8000000, 0xc9}, {0x12, 0x7ff, 0xffff, 0x200}, {0x7, 0x400, 0x8, 0x1}, {0x0, 0x1, 0x800, 0x401}, {0x1ed44166, 0x3, 0x10001, 0x3}, {0x3f, 0x7, 0x100, 0xffffff00}, {0x3, 0x80, 0x2, 0xfffffe00}, {0x10001, 0x0, 0x5, 0x3}, {0xc8, 0x1, 0x8, 0x7fff}, {0x800, 0x10000, 0x1}, {0xf29, 0x9, 0xff, 0x7f}, {0x81, 0x5, 0x4, 0x4}, {0x42, 0x34, 0x370d, 0x81}, {0x896, 0x3, 0x0, 0x7}, {0x8001, 0x7e0000, 0x5, 0x80000001}, {0xfb79, 0x1, 0xffff0000, 0x5}, {0x1, 0xf419, 0x81, 0x10000}, {0x4, 0xfffffffe, 0x1ff, 0xff}, {0x1, 0x3, 0x6, 0xffff}, {0x7fff, 0x3}, {0x6e2d5d81, 0x9, 0x8, 0x4010000}, {0x6, 0xf3, 0x1, 0xdc51}, {0x2, 0x4, 0x7, 0x800}, {0x81, 0x1, 0x9, 0x1}, {0xfff, 0x10000, 0x5, 0x1eb}, {0x401, 0x6, 0x9, 0x7}, {0x1, 0x67, 0x0, 0x10000}, {0x20, 0xd447, 0x2, 0xa7}, {0x40, 0x4, 0x20}, {0xffffffff, 0x1b8, 0xa36, 0x2}, {0x1f, 0x7, 0x6, 0x8000}, {0x4, 0x0, 0xb2a7, 0x7}, {0x80000001, 0x4, 0x2}, {0x8, 0x81, 0x10000, 0xde}, {0x0, 0x10000, 0x8, 0xeea}, {0x0, 0x20, 0x7, 0x40}, {0x4, 0x3, 0xa2ab, 0x88}, {0x101, 0x3, 0x200, 0x40}, {0xff, 0xffff, 0x0, 0x5}, {0x3f, 0x5, 0x8000, 0x9}, {0x10004, 0x0, 0x8, 0x7}, {0x7ff, 0xff, 0xb80, 0x3}, {0x81, 0x25, 0x3, 0x9}, {0x40, 0x0, 0x4, 0x5}, {0x756, 0x5, 0x7, 0xfff}, {0x2926, 0x2, 0x0, 0x1}, {0xfffffff9, 0x81, 0x8, 0x7}, {0x7ff, 0x9, 0x80, 0x7}, {0x2, 0x1000, 0x4, 0x3}, {0x3, 0x0, 0x84, 0x5}, {0x102, 0x800, 0xaaea, 0x20}, {0x40, 0x2, 0x45d, 0x3}, {0xffffff7f, 0x7fff, 0x2, 0x8}, {0x7f, 0x9, 0x772, 0x8}, {0x9, 0xffffffff, 0x7fff}, {0x2, 0x8, 0x10000003, 0x4}, {0x4, 0xfffffff7, 0x0, 0x80}, {0x2, 0x3, 0xfffffff7, 0x1bf6}, {0x3, 0x3, 0x8, 0x7fff}, {0xb455, 0x8, 0x2}, {0x849, 0x100, 0x3, 0x5}, {0x2, 0x0, 0x10001, 0x10001}, {0x0, 0x4, 0x6, 0xff}, {0x8, 0x1f4, 0x8, 0x1}, {0x26a9, 0x60000000, 0x8, 0x4}, {0xf9, 0x6, 0x81, 0x18000000}, {0x6d1b, 0xffffffff, 0x5, 0x7}, {0xb34, 0x1ff, 0x400, 0x7}, {0x7ff, 0x40, 0x9, 0x8000}, {0x1, 0x2b, 0x8, 0xfffffffb}, {0x0, 0x2ed, 0x800, 0x7}, {0x5, 0xffffffff, 0xa87, 0x3}, {0x8, 0x1, 0x400, 0xffffd7e2}, {0x12a, 0x1, 0x7, 0x5}, {0x3, 0x101, 0x0, 0x7fff}, {0xc6, 0x6, 0x4, 0x4}, {0x2, 0x20000000, 0xcf73, 0x6}, {0xffffffff, 0x7ff, 0x200}, {0x9, 0x8, 0x1, 0x8}, {0x0, 0x200, 0x4, 0x7}, {0x10000000, 0x6, 0x400}, {0x5c96, 0x1f, 0x5, 0x40}, {0x5, 0xfffffffe, 0x7fffffff, 0x20}, {0xde, 0xd7, 0x401, 0x2}, {0x101, 0x5, 0xfffffff9, 0x4}, {0x6, 0xbc974896, 0x48d, 0x4}, {0x6, 0xa61c, 0x2, 0x7}, {0x7, 0x0, 0x4, 0x6}, {0x6, 0x0, 0x9, 0x81}, {0x8, 0x3, 0x5, 0x2}, {0x8, 0x800, 0x2, 0x7}, {0x52d1, 0x5, 0x3, 0x3ff}, {0x5, 0x5, 0xcb6, 0x6}, {0x9b, 0x7, 0x3ec, 0x10000}, {0x200, 0x7, 0x4, 0x7}, {0x4135, 0x9, 0x7f, 0x9}, {0x7ff, 0xbe, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x20}, {0x7, 0xfffffffb, 0x8000, 0x9}, {0x2, 0xd77, 0xa429, 0x4}, {0x8, 0x5, 0x19a, 0x767}, {0xe9, 0x20, 0x278, 0xfffffe01}, {0x6, 0x95, 0xbf88, 0x8001}, {0x4, 0x40, 0xff, 0xfffffff9}, {0x6, 0x8, 0x7, 0x7fff}, {0x7ff, 0x21, 0x8000, 0x7}, {0x854, 0x400, 0x1f, 0x3}, {0x0, 0x1, 0x100, 0x5}, {0xe568, 0xec, 0x1, 0xffff7938}, {0x3, 0x3f, 0x4, 0x6}, {0x0, 0x6, 0x4, 0x4d4e4a0a}, {0x6, 0x1000, 0x1ff, 0x3f}, {0x5, 0x2c7, 0x76, 0x1}, {0xfffffff7, 0x1, 0x0, 0x1}, {0x8, 0x5, 0xcf7d, 0x7}, {0x2, 0x7, 0x0, 0xf4a}, {0x6, 0x4, 0x40100000, 0x7}, {0x3, 0x4, 0xb3ff}, {0x7, 0x65, 0x423b, 0x5}, {0x8273, 0xf16, 0x158, 0x80000001}, {0x9, 0x0, 0x5, 0x9ffe}, {0x8, 0x1, 0x80, 0x81}, {0x400, 0x3, 0x7, 0x8001}, {0x3, 0x80, 0xe3b9, 0x4}, {0x7b2, 0x2, 0xa4, 0x20}, {0x8001, 0x0, 0x6, 0x8}, {0x9b, 0x0, 0x8, 0x8}, {0xffff, 0x2, 0x7, 0x4}, {0x7f, 0x30, 0x5, 0x5e9}, {0x3ff, 0xff, 0x2, 0x9}, {0x81, 0x40, 0xedc, 0x1000}, {0x1ff, 0x1, 0xd0, 0x401}, {0x9, 0x5704ca51, 0x100, 0xef}, {0x1, 0x3, 0x100, 0x7}, {0x5, 0x9, 0x9, 0x1}, {0xbe5, 0x0, 0x9, 0x200}, {0x80000000, 0x8001, 0x10000, 0x101}, {0x6, 0x8, 0x1, 0x80000001}, {0xb2, 0x7228, 0x9, 0x40}, {0x9, 0x81, 0x93, 0x9}, {0x9, 0x7, 0x6, 0x2}, {0x4000, 0x8, 0xd67, 0x1}, {0xfffffffb, 0x656, 0x5d9, 0x7}, {0x3, 0xd4, 0x6, 0x9}, {0x80, 0x1, 0x3f, 0x3}, {0x3, 0xfffffe00, 0x6, 0x9}, {0xffff, 0x80000001, 0x40, 0x80000000}, {0x7, 0x1, 0x7, 0x2}, {0x1f, 0x99, 0xffffffff, 0x7d29}, {0x8, 0x4, 0xff, 0x5}, {0x3, 0x8, 0xfffffff8, 0x6}, {0x404, 0x3, 0x1, 0x3ff}, {0x6, 0xffff, 0xfffffff9, 0x4}, {0x5, 0x0, 0x80000000, 0x400}, {0x5, 0xf17, 0x1, 0x9}, {0x4435, 0x7, 0x4, 0x9}, {0x4, 0x3be, 0x401, 0x6}, {0x80000001, 0x0, 0x3, 0x7ff}, {0x101, 0x9c2, 0x5, 0x1000}, {0x2, 0x9, 0x2, 0x1ff}, {0x8000, 0x200, 0x4800000, 0xfff}, {0x5, 0x4, 0x1, 0x7}, {0xe326, 0x1, 0x2, 0x1}, {0x6, 0x9, 0x4, 0x2}, {0x0, 0x4, 0x6, 0x3ff}, {0x4, 0x8, 0x5, 0x6}, {0x6, 0x7fffffff, 0x3f, 0x6}, {0x401, 0x7f, 0x3, 0xfffffffd}, {0x0, 0x8, 0x3, 0xf978}, {0x1f, 0x100, 0x7}, {0x6, 0x3, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x101}, {0x4, 0x8, 0x7}, {0x1000, 0x1000, 0x3, 0x3f}, {0x3, 0x9, 0x9, 0x2a89e679}, {0xae, 0x1, 0x5, 0x6}, {0x1, 0x9, 0x9, 0x7fff}, {0x5, 0x4, 0x1, 0xfffffff7}, {0xa6, 0x5, 0x9f, 0x2}, {0x9, 0x20, 0xc6, 0x4}, {0x4, 0x6, 0xff, 0x9}, {0x7, 0x7f41, 0x3, 0x8000}, {0x9, 0x6, 0x400, 0xebb}, {0x80000000, 0xfffffff7, 0x3ff, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x2, 0xffffffff, 0x5}, {0x7fff, 0x635, 0x7fffffff, 0x1ff}, {0x5, 0x8d, 0x1, 0x6}, {0xa9, 0x6, 0x7ff, 0x1}, {0xc000000, 0x3, 0x4, 0x2}, {0x1, 0x6, 0x80000001, 0x6}, {0x42, 0xffffffff, 0x5, 0x2e}, {0x3ff, 0x69f, 0x1, 0x6}, {0x5, 0x942a, 0x8, 0x8352}, {0x346eb548, 0x4d07, 0x100, 0x401}, {0xffff, 0x4, 0x1, 0xfff}, {0xfffffff9, 0x7, 0x6, 0x60bd}, {0x136e, 0x1, 0xd0df, 0x400}, {0x3, 0x7c000000, 0x2a3a, 0x200}, {0x9, 0x40, 0x200, 0x81}, {0x2, 0x8, 0xb9c, 0x7fffffff}, {0x2, 0x2717, 0x4, 0x5}, {0x2, 0x651, 0x5, 0x7}, {0x69f, 0xaac3, 0x8, 0x7ff}, {0x100, 0x3f, 0x6, 0xfffffffc}, {0xfffeffff, 0x1, 0x9, 0x7}, {0x3f89, 0x1, 0x0, 0x6}, {0xb02, 0x7f, 0x3a4, 0x1}, {0x401, 0x1ff, 0x9, 0x3}, {0x7, 0xffffffff, 0x7, 0x6}, {0x93, 0x7fff, 0x7, 0x8}, {0x4, 0x3, 0x2, 0x1ff}, {0x1, 0x9b65, 0xef, 0x2a36}, {0x2, 0x1, 0x4, 0x7ff}, {0x8, 0x2, 0x80000000, 0x2}, {0x80000001, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x9, 0xd2eb}, {0x0, 0x2, 0x8, 0x4}, {0x6, 0x4, 0x9, 0x9}, {0x3, 0x0, 0xfd7, 0x7}, {0x9bd, 0xffffffff, 0x2083, 0x101}, {0x8, 0xf40, 0x7, 0x5}, {0x4, 0x8, 0x3f, 0x4}, {0x0, 0x94b4, 0x80000001, 0xffffffff}, {0x0, 0x7f, 0x2c5, 0x20}, {0x4, 0x1, 0x6, 0x3}, {0xa3d, 0x850, 0xfffffff7, 0x8}, {0x81, 0x82e, 0x7, 0x2}, {0x6a5b47c2, 0x92a3d482, 0x7, 0x1}, {0x8791, 0x1, 0xfffffffc, 0xd4d}, {0x0, 0x2, 0x200, 0x1}, {0x8, 0x8, 0x5, 0x63de}, {0x800, 0x1, 0x4, 0x8}, {0x6, 0x620, 0x1d0b4854, 0xf42a}, {0x4, 0x101, 0xfffffff8, 0x824c}, {0x7, 0x0, 0x6}, {0x1ff, 0x7fff, 0x200, 0x5}, {0x81, 0x8, 0x4}, {0x2, 0x7, 0x800, 0x2}, {0xebd, 0xfffffffb, 0x7ff, 0x7}, {0xfc, 0xd3de, 0xb91, 0x796}, {0x6, 0x2, 0x2, 0x5}, {0x6, 0x445, 0x17, 0x6}, {0x0, 0x3, 0x10001, 0x7f}, {0x7, 0x8000, 0x2, 0x7}, {0x3, 0x0, 0x10001, 0x8}, {0xca, 0x4, 0x81b6, 0x6}, {0x8, 0x7, 0x75c}, {0x3, 0x5, 0x1, 0x3}, {0x10001, 0x81, 0x1000, 0x8}, {0x75d71962, 0x8, 0x8, 0x9}, {0x3, 0x5, 0x3f, 0x3}, {0x7, 0x400, 0x9, 0x7}, {0x400, 0x0, 0xfffffffc, 0x2}, {0x80000000, 0x5, 0x0, 0x12}, {0x189, 0x1, 0x80000001, 0x9}, {0xa0, 0x87, 0x3, 0x3ff}, {0x2, 0xffffffff, 0x0, 0x4d}, {0x6, 0x80000001, 0x1000, 0x8}, {0x2, 0x8, 0x8, 0x100}, {0x7278, 0x9ada, 0x9, 0x9}, {0x7, 0x0, 0xfffff000, 0x8db4}, {0x2, 0x5, 0xfff}, {0x5, 0x8001, 0x81, 0x9}, {0x0, 0x83, 0x7}, {0x80, 0x80, 0x1f, 0x8}, {0x2, 0x6, 0x7, 0x200}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0xaf41, 0x6, 0x3f}, {0x0, 0x3, 0xf1, 0xb9}, {0x0, 0x5a, 0x3, 0x3}, {0x8000, 0x81, 0x2, 0x22}, {0x0, 0xe5, 0x7, 0x8}, {0x7fff, 0xf85, 0x7fffffff}, {0x6, 0x1, 0x1, 0x3}, {0x9, 0x6, 0x1f, 0xd1}, {0x1f, 0x3, 0x7c000000, 0x5}, {0x2, 0x80000000, 0x9b, 0x1}, {0x5, 0x7, 0xffff, 0x78}, {0x8, 0x3, 0x7ff, 0xff}, {0x7fffffff, 0x8000, 0x7, 0x2}, {0x101, 0x1, 0x3ff, 0xccc3}, {0x5, 0x400, 0x7, 0xfff}, {0x8, 0x101, 0xfffffffe, 0x1}, {0x200, 0xfffff972, 0x148, 0x8}, {0xffffffff, 0x7fff, 0x7, 0x9}, {0x5f, 0x800, 0xef13, 0x1f}, {0x5d, 0x3, 0x10001, 0x5}, {0x4, 0x10000000, 0x7, 0x630}, {0x4, 0x9, 0x969, 0x2}, {0x36a2b83, 0x8000, 0x1, 0x8001}, {0x4, 0x1e4, 0x8001, 0x40}, {0x576e, 0x3, 0x7ff, 0x67}, {0xff, 0x52, 0x8, 0x2}, {0x2, 0x101, 0xfff, 0x80}, {0x5, 0x5, 0x6, 0x81}, {0x2, 0x70, 0xbd, 0x40}, {0x1, 0xfffffff9, 0x8, 0x3}, {0x9, 0xbdc, 0x0, 0x162}, {0x8, 0x7, 0xee5, 0x10001}, {0x2, 0x2, 0x2, 0x800}, {0x10001, 0x1dc4e23e, 0x80000001, 0x4d8}, {0x1c00000, 0xb0b9, 0x816, 0x7}, {0x20, 0x1, 0x22, 0x7}, {0x200, 0x8, 0x7, 0x2f1}, {0x7ff, 0x0, 0x9, 0x7}, {0x1000, 0x9, 0x627, 0x3f}, {0x7fffffff, 0x4, 0xac3d, 0x1}, {0x40, 0x4c51, 0x8, 0x9}, {0x744, 0x5, 0x9, 0x9}, {0x5, 0x7, 0x1000, 0x100}, {0x2, 0x9, 0x7ff, 0x2}, {0x1, 0xe7, 0x7fffffff, 0x1}, {0x101, 0xb, 0x0, 0xbb}, {0x1, 0x3, 0x1ff, 0x101}, {0x6, 0xfffff00d, 0x2a8, 0x3}, {0x40, 0x8d3, 0x8, 0x7}, {0x10001, 0x117, 0x1000000, 0x6}, {0x8, 0x1, 0x3f, 0x8}, {0x30, 0x5, 0x5, 0x6}, {0x0, 0xffffffff, 0x6, 0x1}, {0x2, 0x8001, 0x800, 0x5bb}, {0x400, 0x1, 0x7fff, 0x800}, {0xbbf3, 0x1, 0x7fffffff, 0x40}, {0xfffffffe, 0x400, 0x401, 0x2}, {0x400, 0x6, 0x357, 0x7ff}, {0x1, 0x83fb, 0x3, 0xe3a}, {0x6, 0x973, 0x685, 0x200}, {0x10000000, 0x1, 0x100, 0x5}, {0x3, 0xfffffffc, 0x0, 0x8001}, {0x1f, 0x6, 0x4, 0x7fffffff}, {0x8, 0x0, 0x1f, 0x3f}, {0x0, 0x81, 0xffffffff, 0x1000}, {0x9, 0xf4, 0x9, 0x4}, {0x2, 0x10000, 0x1800, 0x1}, {0x2, 0x9, 0x9, 0x2}, {0x81, 0x200, 0x6, 0x400}, {0x1, 0xeee, 0x40, 0x7}, {0x1, 0x6, 0x0, 0x2}, {0x4, 0x8, 0x0, 0x5}, {0x8, 0x22d, 0xfffffffb, 0x5}, {0x85, 0x1, 0x5, 0x4}, {0x3, 0x7479, 0x7ff, 0x8}, {0x80, 0xfff, 0xfffffff9, 0x3ff}, {0x1f, 0x5, 0x10001, 0x8}, {0x1, 0x5, 0x6, 0x7fff}, {0x20, 0x7, 0x400, 0x2}, {0x81, 0x6, 0x5, 0x5}, {0x4, 0x6, 0x0, 0x79c}, {0x10000, 0x8, 0x3, 0x2}, {0x2, 0x7, 0x3, 0x9}, {0x6, 0xffff9a51, 0x32a}, {0x7, 0x1ff, 0x6, 0x46}, {0x9f04, 0x0, 0x7fffffff, 0x7}, {0x800, 0x57, 0x0, 0xffffb493}, {0x3, 0x9, 0x9, 0x2}, {0x1, 0x6054, 0xfffffff7, 0x3}, {0x2, 0x7, 0x4, 0x81}, {0x0, 0x2, 0x7fffffff, 0x6}, {0xd, 0x8b3a, 0x7, 0x1}, {0x1, 0x4, 0x100, 0x1}, {0xec1, 0x2, 0x3, 0x1800}, {0x30c8, 0x4, 0x1, 0x7}, {0x200, 0x8af0, 0x7ff, 0x18ac}, {0x23, 0x2, 0x9, 0xb4}, {0xffffffff, 0x7, 0x1, 0x3f}, {0x6, 0x5, 0x33cb, 0xa}, {0x7, 0x40, 0x8, 0x7ff}, {0x7, 0x9, 0x5, 0x1f}, {0x7, 0x3ff, 0x7, 0xfffffffb}, {0x8, 0xd9, 0x4, 0xd6}, {0x4, 0x5, 0x6, 0x4}, {0x3, 0x100, 0x71, 0x6}, {0x640, 0x10001, 0x9, 0x400}, {0x87, 0x6, 0x80000000, 0x8}, {0x1f8b, 0x0, 0x200, 0x6}, {0x4, 0x10001, 0x4b, 0xa4c}, {0x0, 0xff, 0x800, 0x1}, {0x2, 0x8, 0x8f2, 0x7ff}, {0x8000, 0x80000001, 0xffff2bf8, 0x9fa9}, {0x6, 0xffff, 0x81, 0x3259d18d}, {0x1000, 0xf8d5, 0x7, 0x401}, {0x10001, 0x100, 0x0, 0x9}, {0x4, 0x1, 0x6, 0x1}, {0x6, 0x7fff, 0xfffffff5, 0x4369}, {0x9, 0x0, 0x7, 0x40}, {0x8, 0x1, 0x9, 0x3f}, {0x3ff, 0x5, 0x8001, 0x92bd}, {0x7, 0x6, 0x1, 0x2}, {0x1, 0x0, 0x20, 0x6}, {0x9, 0x1, 0x8, 0x200}, {0x80, 0xffffffff, 0x6, 0x7}, {0x3, 0x7, 0x8, 0x7f}, {0x1, 0x893, 0xffffffff, 0x7}, {0xfffffff7, 0x5, 0xa02a, 0x2}, {0x0, 0x880, 0x8000, 0x5}, {0x3, 0x7, 0x101, 0x401}, {0x4, 0x3ff, 0x7}, {0x6, 0x3, 0xfffffff9, 0x7ff}, {0xc22, 0x6f9, 0x4, 0x8001}, {0x1, 0x1, 0x4, 0x7fff}, {0x7, 0x2, 0x9}, {0x1f, 0x9, 0x49c, 0x21}, {0x0, 0x4, 0xffff}, {0x6, 0x4c47, 0x4, 0x80}, {0x8, 0x8, 0x2, 0x1ff}, {0x80, 0x8, 0x81, 0x400}, {0x100, 0x36, 0x7, 0x5f37}, {0x0, 0x1ff, 0x81, 0x101}, {0x4, 0x9b, 0x3, 0x6}, {0x8, 0x606e, 0x4, 0xd4c4}, {0x5, 0x1, 0x6, 0x400}, {0x9, 0x2, 0x20000000, 0x8}, {0x79, 0x1, 0xffffffff, 0x2}, {0x8, 0x0, 0x6, 0x5}, {0x4, 0x0, 0x7b4, 0x7ff}, {0x6, 0x2, 0xff, 0x2}, {0x3, 0x21, 0x7, 0x3}, {0x2, 0x0, 0x0, 0x5}, {0x7, 0x8, 0x80000000, 0x8}, {0x9696, 0x0, 0x4, 0x6}, {0x3ff, 0x401, 0x400, 0x3ff}, {0x2, 0x5, 0x9, 0xfff}, {0x4, 0x7f, 0x80000001, 0xe2}, {0x0, 0xd8b, 0x3, 0x81}, {0x8, 0xbe, 0x8, 0x800}, {0x4b4, 0x20, 0x1, 0x5}, {0x2, 0xffff, 0x6, 0x79b11c1b}, {0x0, 0x4, 0x56, 0x8}, {0x0, 0xffff0000, 0x4, 0x62}, {0x2, 0x6, 0x2, 0x4}, {0xffff, 0x1, 0x40a, 0x8}, {0x81, 0x2, 0xa1, 0x80000000}, {0x7, 0x7, 0xd9c, 0x4}, {0x7, 0x9, 0x1c45}, {0x233, 0x0, 0x0, 0xff}, {0x20002000, 0x3, 0x3, 0x2ac}, {0x8, 0x109, 0x6, 0xb7f0}, {0x7, 0x3, 0x5, 0x200}, {0x3, 0x6, 0x6997e228, 0x2}, {0xfffffff7, 0xfff, 0x5, 0x7}, {0xaea6, 0x8001, 0x3, 0x800}, {0x3, 0xf3f, 0x6, 0x3ff}, {0x9, 0x0, 0x1, 0xc}, {0x0, 0x7, 0x3b000000}, {0x6, 0x6, 0xfffffff7, 0x92}, {0x5, 0x9, 0xffff8000, 0xfffffffa}, {0x3, 0x3, 0xdd, 0x8000}, {0xfffffffa, 0x80000001, 0xdb, 0xffffffff}, {0x4, 0x2, 0x2, 0xfffffff9}, {0x5, 0x22a, 0x800, 0x8001}, {0x4, 0x1ffe0, 0x800, 0xe}, {0x6, 0x4, 0x101, 0x2}]}, 0x21e8) 09:15:09 executing program 2: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x3ed, 0x1, 0x70bd27, 0x25dfdbff, "d7b55e3638455fb275f6a7c7926c580146d3757aad808036a591e2f9efe06a30eac072927be32bfba5063ca2e23ce810645e0382f4d3eeb77c701f0da9953ba2819dae2f8b1c928b964c8c4123a039c1a23910dadc5b2f91b4d79feab597c242afd686676b9704d1f342349b067134d30dda", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x7, 0x2, "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"}) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@userptr={0x0, 0x0, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x4, 0x7, 0x4, 0x1f, 0xec, "ead817f6"}, 0x7, 0x2, {&(0x7f0000000240)}, 0x7ff, 0x0, r2}) 09:15:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x70bd28, 0xfffffffe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:09 executing program 4: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x3ed, 0x1, 0x70bd27, 0x25dfdbff, "d7b55e3638455fb275f6a7c7926c580146d3757aad808036a591e2f9efe06a30eac072927be32bfba5063ca2e23ce810645e0382f4d3eeb77c701f0da9953ba2819dae2f8b1c928b964c8c4123a039c1a23910dadc5b2f91b4d79feab597c242afd686676b9704d1f342349b067134d30dda", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x7, 0x2, "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"}) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@userptr={0x0, 0x0, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x4, 0x7, 0x4, 0x1f, 0xec, "ead817f6"}, 0x7, 0x2, {&(0x7f0000000240)}, 0x7ff, 0x0, r2}) 09:15:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 32) 09:15:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x81, 0x2, 0x1, 0x0, 0x3}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, 0x0, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0x0, @pix={0x8001, 0x4, 0x47504a50, 0x9, 0x8, 0x7f, 0x1, 0x1ade, 0x1, 0x4, 0x2, 0x4}}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:09 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x70bd28, 0xfffffffe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:09 executing program 2: sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x3ed, 0x1, 0x70bd27, 0x25dfdbff, "d7b55e3638455fb275f6a7c7926c580146d3757aad808036a591e2f9efe06a30eac072927be32bfba5063ca2e23ce810645e0382f4d3eeb77c701f0da9953ba2819dae2f8b1c928b964c8c4123a039c1a23910dadc5b2f91b4d79feab597c242afd686676b9704d1f342349b067134d30dda", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) (async) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0x7, 0x2, "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"}) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000280)=@userptr={0x0, 0x0, 0x4, 0x8, 0x8000, {0x77359400}, {0x1, 0x4, 0x7, 0x4, 0x1f, 0xec, "ead817f6"}, 0x7, 0x2, {&(0x7f0000000240)}, 0x7ff, 0x0, r2}) 09:15:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00./file0\x00']) 09:15:09 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000002300)) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000002340), 0x7, 0x400) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r5, 0x2}}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=@ret_submit={{0x3, 0x10001, 0x0, 0x1, 0x4}, 0x8, 0xe8, 0xed, 0x20d, 0xff4, 0x0, "0bb813f7522ea068525031d815ff1f6fc24b94e464d81ee17c0b500ee3da911aa0ccb9829b52dd14705a233ba689abb683612421774eb3dc93667b96338bbadeeff7c8ad9a294a0ef2b9c331d92c76dff95fd5493f210b526cd1d0f0f3f07837c146ed358ca9f7249fddee94b59febb5f1f6f0c79194d6342aeedc78fcb7f220878e3e5cc2ab9afa65429557302b6f2ba182999f694a13a1790e30c16141e61b9130fcc9b248ca1287e4aff9f694a0c851fd74a6d527631b56fcf35dbe5ae9847139c87f1231c4f276ef556d9794bd7144923eac1793195665e52e4e98035ef0e259375f6104e8ff", [{0x5, 0x0, 0x1, 0xfd2}, {0x100, 0x8, 0x7}, {0xd5, 0xfffffffa, 0x2, 0x81}, {0x10001, 0x687ade9b, 0x1, 0x5}, {0xe8f, 0x101, 0x8}, {0x7, 0x8, 0x2, 0x80000000}, {0x3, 0x6, 0x479, 0xff}, {0x5759, 0x8000, 0x1000, 0xfff}, {0x8796, 0xffffffff, 0x8, 0x6}, {0x5, 0x80000000, 0x5, 0x9}, {0xffffffff, 0x3252, 0x7fff, 0x8001}, {0x6de, 0x2, 0x3f, 0x4}, {0x2, 0xfffffbbb, 0x2dd, 0x57a}, {0x0, 0x2, 0xff, 0xe7}, {0xd01, 0x8, 0x4, 0xfffffff8}, {0x100, 0x9, 0x8000, 0x20}, {0x4, 0x4, 0xfffffffe, 0x8001}, {0xfffffff7, 0x18, 0x1, 0xeef}, {0x7ff, 0x6, 0x2c851033, 0x9}, {0x4, 0x2, 0x6}, {0x7, 0x3, 0x3, 0x2}, {0x3, 0xd1, 0x1, 0x9}, {0x0, 0xb6, 0x1, 0x6}, {0x7, 0x2, 0x6, 0x4}, {0xdc30, 0x7, 0x7fff, 0x1ff}, {0x1, 0x7, 0x7, 0x10001}, {0x10001, 0x9, 0x3, 0x5d5}, {0x0, 0x1, 0x7}, {0x1, 0x1f, 0x4, 0x6}, {0xf6, 0x40, 0x411, 0xffffffff}, {0x4, 0x57f, 0xffff}, {0x7ff, 0x3b6, 0x716}, {0x8, 0x8, 0x4}, {0x3ff, 0x1, 0x1, 0x10001}, {0x9, 0x7016, 0x3, 0x32}, {0x5, 0x7ff, 0xba, 0x9269}, {0x1, 0x8, 0x4, 0xcbb}, {0x6, 0x80000000, 0x8, 0x5}, {0x40, 0x8, 0x80, 0x100}, {0x6, 0x0, 0x8, 0x5}, {0x2, 0x1, 0x1, 0x200}, {0x1, 0x7, 0x10000, 0x6}, {0x6f, 0x4, 0x5, 0x7fff}, {0xf18, 0x81, 0x6, 0x4}, {0xad6b, 0xd64, 0x5, 0x4}, {0x81, 0x4, 0x800, 0x3f}, {0x10001, 0x2, 0x3, 0x24b}, {0x3, 0x4, 0x3, 0xc97e}, {0x6, 0xb1f6, 0x9, 0x5}, {0x8e, 0x800, 0x46, 0xfff}, {0x7fffffff, 0xd4c, 0x7fff, 0x3a62}, {0xfff, 0xffffffff, 0x4, 0xfff}, {0x8, 0xf0f, 0xc83, 0x9}, {0x4, 0x8, 0x3, 0x401}, {0x6, 0xcd4, 0xc0da, 0x7}, {0x101, 0x0, 0x7, 0x8}, {0xa94, 0xffffffff, 0x97, 0xe65c}, {0x101, 0x9, 0x5, 0x200}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x1000, 0x4, 0x4}, {0x31f1, 0x6, 0x38d0, 0x2}, {0x7, 0x800, 0x8001, 0x80000000}, {0x2, 0x80000000, 0x78a, 0x7ff}, {0x0, 0x6, 0xffffffff, 0x401}, {0x72, 0x1, 0x7, 0xfffff5f1}, {0x7, 0x6, 0x8, 0xc8}, {0x9, 0x7, 0x81, 0x80000000}, {0x17d90, 0x6, 0x5, 0x1}, {0x3, 0x80, 0x5, 0xffffd1fa}, {0x205, 0x6, 0x80000001, 0x3}, {0x260, 0x297, 0xa4, 0x9}, {0x2, 0x7, 0x10000, 0x1f}, {0x7, 0x8, 0x8000000, 0xc9}, {0x12, 0x7ff, 0xffff, 0x200}, {0x7, 0x400, 0x8, 0x1}, {0x0, 0x1, 0x800, 0x401}, {0x1ed44166, 0x3, 0x10001, 0x3}, {0x3f, 0x7, 0x100, 0xffffff00}, {0x3, 0x80, 0x2, 0xfffffe00}, {0x10001, 0x0, 0x5, 0x3}, {0xc8, 0x1, 0x8, 0x7fff}, {0x800, 0x10000, 0x1}, {0xf29, 0x9, 0xff, 0x7f}, {0x81, 0x5, 0x4, 0x4}, {0x42, 0x34, 0x370d, 0x81}, {0x896, 0x3, 0x0, 0x7}, {0x8001, 0x7e0000, 0x5, 0x80000001}, {0xfb79, 0x1, 0xffff0000, 0x5}, {0x1, 0xf419, 0x81, 0x10000}, {0x4, 0xfffffffe, 0x1ff, 0xff}, {0x1, 0x3, 0x6, 0xffff}, {0x7fff, 0x3}, {0x6e2d5d81, 0x9, 0x8, 0x4010000}, {0x6, 0xf3, 0x1, 0xdc51}, {0x2, 0x4, 0x7, 0x800}, {0x81, 0x1, 0x9, 0x1}, {0xfff, 0x10000, 0x5, 0x1eb}, {0x401, 0x6, 0x9, 0x7}, {0x1, 0x67, 0x0, 0x10000}, {0x20, 0xd447, 0x2, 0xa7}, {0x40, 0x4, 0x20}, {0xffffffff, 0x1b8, 0xa36, 0x2}, {0x1f, 0x7, 0x6, 0x8000}, {0x4, 0x0, 0xb2a7, 0x7}, {0x80000001, 0x4, 0x2}, {0x8, 0x81, 0x10000, 0xde}, {0x0, 0x10000, 0x8, 0xeea}, {0x0, 0x20, 0x7, 0x40}, {0x4, 0x3, 0xa2ab, 0x88}, {0x101, 0x3, 0x200, 0x40}, {0xff, 0xffff, 0x0, 0x5}, {0x3f, 0x5, 0x8000, 0x9}, {0x10004, 0x0, 0x8, 0x7}, {0x7ff, 0xff, 0xb80, 0x3}, {0x81, 0x25, 0x3, 0x9}, {0x40, 0x0, 0x4, 0x5}, {0x756, 0x5, 0x7, 0xfff}, {0x2926, 0x2, 0x0, 0x1}, {0xfffffff9, 0x81, 0x8, 0x7}, {0x7ff, 0x9, 0x80, 0x7}, {0x2, 0x1000, 0x4, 0x3}, {0x3, 0x0, 0x84, 0x5}, {0x102, 0x800, 0xaaea, 0x20}, {0x40, 0x2, 0x45d, 0x3}, {0xffffff7f, 0x7fff, 0x2, 0x8}, {0x7f, 0x9, 0x772, 0x8}, {0x9, 0xffffffff, 0x7fff}, {0x2, 0x8, 0x10000003, 0x4}, {0x4, 0xfffffff7, 0x0, 0x80}, {0x2, 0x3, 0xfffffff7, 0x1bf6}, {0x3, 0x3, 0x8, 0x7fff}, {0xb455, 0x8, 0x2}, {0x849, 0x100, 0x3, 0x5}, {0x2, 0x0, 0x10001, 0x10001}, {0x0, 0x4, 0x6, 0xff}, {0x8, 0x1f4, 0x8, 0x1}, {0x26a9, 0x60000000, 0x8, 0x4}, {0xf9, 0x6, 0x81, 0x18000000}, {0x6d1b, 0xffffffff, 0x5, 0x7}, {0xb34, 0x1ff, 0x400, 0x7}, {0x7ff, 0x40, 0x9, 0x8000}, {0x1, 0x2b, 0x8, 0xfffffffb}, {0x0, 0x2ed, 0x800, 0x7}, {0x5, 0xffffffff, 0xa87, 0x3}, {0x8, 0x1, 0x400, 0xffffd7e2}, {0x12a, 0x1, 0x7, 0x5}, {0x3, 0x101, 0x0, 0x7fff}, {0xc6, 0x6, 0x4, 0x4}, {0x2, 0x20000000, 0xcf73, 0x6}, {0xffffffff, 0x7ff, 0x200}, {0x9, 0x8, 0x1, 0x8}, {0x0, 0x200, 0x4, 0x7}, {0x10000000, 0x6, 0x400}, {0x5c96, 0x1f, 0x5, 0x40}, {0x5, 0xfffffffe, 0x7fffffff, 0x20}, {0xde, 0xd7, 0x401, 0x2}, {0x101, 0x5, 0xfffffff9, 0x4}, {0x6, 0xbc974896, 0x48d, 0x4}, {0x6, 0xa61c, 0x2, 0x7}, {0x7, 0x0, 0x4, 0x6}, {0x6, 0x0, 0x9, 0x81}, {0x8, 0x3, 0x5, 0x2}, {0x8, 0x800, 0x2, 0x7}, {0x52d1, 0x5, 0x3, 0x3ff}, {0x5, 0x5, 0xcb6, 0x6}, {0x9b, 0x7, 0x3ec, 0x10000}, {0x200, 0x7, 0x4, 0x7}, {0x4135, 0x9, 0x7f, 0x9}, {0x7ff, 0xbe, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x20}, {0x7, 0xfffffffb, 0x8000, 0x9}, {0x2, 0xd77, 0xa429, 0x4}, {0x8, 0x5, 0x19a, 0x767}, {0xe9, 0x20, 0x278, 0xfffffe01}, {0x6, 0x95, 0xbf88, 0x8001}, {0x4, 0x40, 0xff, 0xfffffff9}, {0x6, 0x8, 0x7, 0x7fff}, {0x7ff, 0x21, 0x8000, 0x7}, {0x854, 0x400, 0x1f, 0x3}, {0x0, 0x1, 0x100, 0x5}, {0xe568, 0xec, 0x1, 0xffff7938}, {0x3, 0x3f, 0x4, 0x6}, {0x0, 0x6, 0x4, 0x4d4e4a0a}, {0x6, 0x1000, 0x1ff, 0x3f}, {0x5, 0x2c7, 0x76, 0x1}, {0xfffffff7, 0x1, 0x0, 0x1}, {0x8, 0x5, 0xcf7d, 0x7}, {0x2, 0x7, 0x0, 0xf4a}, {0x6, 0x4, 0x40100000, 0x7}, {0x3, 0x4, 0xb3ff}, {0x7, 0x65, 0x423b, 0x5}, {0x8273, 0xf16, 0x158, 0x80000001}, {0x9, 0x0, 0x5, 0x9ffe}, {0x8, 0x1, 0x80, 0x81}, {0x400, 0x3, 0x7, 0x8001}, {0x3, 0x80, 0xe3b9, 0x4}, {0x7b2, 0x2, 0xa4, 0x20}, {0x8001, 0x0, 0x6, 0x8}, {0x9b, 0x0, 0x8, 0x8}, {0xffff, 0x2, 0x7, 0x4}, {0x7f, 0x30, 0x5, 0x5e9}, {0x3ff, 0xff, 0x2, 0x9}, {0x81, 0x40, 0xedc, 0x1000}, {0x1ff, 0x1, 0xd0, 0x401}, {0x9, 0x5704ca51, 0x100, 0xef}, {0x1, 0x3, 0x100, 0x7}, {0x5, 0x9, 0x9, 0x1}, {0xbe5, 0x0, 0x9, 0x200}, {0x80000000, 0x8001, 0x10000, 0x101}, {0x6, 0x8, 0x1, 0x80000001}, {0xb2, 0x7228, 0x9, 0x40}, {0x9, 0x81, 0x93, 0x9}, {0x9, 0x7, 0x6, 0x2}, {0x4000, 0x8, 0xd67, 0x1}, {0xfffffffb, 0x656, 0x5d9, 0x7}, {0x3, 0xd4, 0x6, 0x9}, {0x80, 0x1, 0x3f, 0x3}, {0x3, 0xfffffe00, 0x6, 0x9}, {0xffff, 0x80000001, 0x40, 0x80000000}, {0x7, 0x1, 0x7, 0x2}, {0x1f, 0x99, 0xffffffff, 0x7d29}, {0x8, 0x4, 0xff, 0x5}, {0x3, 0x8, 0xfffffff8, 0x6}, {0x404, 0x3, 0x1, 0x3ff}, {0x6, 0xffff, 0xfffffff9, 0x4}, {0x5, 0x0, 0x80000000, 0x400}, {0x5, 0xf17, 0x1, 0x9}, {0x4435, 0x7, 0x4, 0x9}, {0x4, 0x3be, 0x401, 0x6}, {0x80000001, 0x0, 0x3, 0x7ff}, {0x101, 0x9c2, 0x5, 0x1000}, {0x2, 0x9, 0x2, 0x1ff}, {0x8000, 0x200, 0x4800000, 0xfff}, {0x5, 0x4, 0x1, 0x7}, {0xe326, 0x1, 0x2, 0x1}, {0x6, 0x9, 0x4, 0x2}, {0x0, 0x4, 0x6, 0x3ff}, {0x4, 0x8, 0x5, 0x6}, {0x6, 0x7fffffff, 0x3f, 0x6}, {0x401, 0x7f, 0x3, 0xfffffffd}, {0x0, 0x8, 0x3, 0xf978}, {0x1f, 0x100, 0x7}, {0x6, 0x3, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x101}, {0x4, 0x8, 0x7}, {0x1000, 0x1000, 0x3, 0x3f}, {0x3, 0x9, 0x9, 0x2a89e679}, {0xae, 0x1, 0x5, 0x6}, {0x1, 0x9, 0x9, 0x7fff}, {0x5, 0x4, 0x1, 0xfffffff7}, {0xa6, 0x5, 0x9f, 0x2}, {0x9, 0x20, 0xc6, 0x4}, {0x4, 0x6, 0xff, 0x9}, {0x7, 0x7f41, 0x3, 0x8000}, {0x9, 0x6, 0x400, 0xebb}, {0x80000000, 0xfffffff7, 0x3ff, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x2, 0xffffffff, 0x5}, {0x7fff, 0x635, 0x7fffffff, 0x1ff}, {0x5, 0x8d, 0x1, 0x6}, {0xa9, 0x6, 0x7ff, 0x1}, {0xc000000, 0x3, 0x4, 0x2}, {0x1, 0x6, 0x80000001, 0x6}, {0x42, 0xffffffff, 0x5, 0x2e}, {0x3ff, 0x69f, 0x1, 0x6}, {0x5, 0x942a, 0x8, 0x8352}, {0x346eb548, 0x4d07, 0x100, 0x401}, {0xffff, 0x4, 0x1, 0xfff}, {0xfffffff9, 0x7, 0x6, 0x60bd}, {0x136e, 0x1, 0xd0df, 0x400}, {0x3, 0x7c000000, 0x2a3a, 0x200}, {0x9, 0x40, 0x200, 0x81}, {0x2, 0x8, 0xb9c, 0x7fffffff}, {0x2, 0x2717, 0x4, 0x5}, {0x2, 0x651, 0x5, 0x7}, {0x69f, 0xaac3, 0x8, 0x7ff}, {0x100, 0x3f, 0x6, 0xfffffffc}, {0xfffeffff, 0x1, 0x9, 0x7}, {0x3f89, 0x1, 0x0, 0x6}, {0xb02, 0x7f, 0x3a4, 0x1}, {0x401, 0x1ff, 0x9, 0x3}, {0x7, 0xffffffff, 0x7, 0x6}, {0x93, 0x7fff, 0x7, 0x8}, {0x4, 0x3, 0x2, 0x1ff}, {0x1, 0x9b65, 0xef, 0x2a36}, {0x2, 0x1, 0x4, 0x7ff}, {0x8, 0x2, 0x80000000, 0x2}, {0x80000001, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x9, 0xd2eb}, {0x0, 0x2, 0x8, 0x4}, {0x6, 0x4, 0x9, 0x9}, {0x3, 0x0, 0xfd7, 0x7}, {0x9bd, 0xffffffff, 0x2083, 0x101}, {0x8, 0xf40, 0x7, 0x5}, {0x4, 0x8, 0x3f, 0x4}, {0x0, 0x94b4, 0x80000001, 0xffffffff}, {0x0, 0x7f, 0x2c5, 0x20}, {0x4, 0x1, 0x6, 0x3}, {0xa3d, 0x850, 0xfffffff7, 0x8}, {0x81, 0x82e, 0x7, 0x2}, {0x6a5b47c2, 0x92a3d482, 0x7, 0x1}, {0x8791, 0x1, 0xfffffffc, 0xd4d}, {0x0, 0x2, 0x200, 0x1}, {0x8, 0x8, 0x5, 0x63de}, {0x800, 0x1, 0x4, 0x8}, {0x6, 0x620, 0x1d0b4854, 0xf42a}, {0x4, 0x101, 0xfffffff8, 0x824c}, {0x7, 0x0, 0x6}, {0x1ff, 0x7fff, 0x200, 0x5}, {0x81, 0x8, 0x4}, {0x2, 0x7, 0x800, 0x2}, {0xebd, 0xfffffffb, 0x7ff, 0x7}, {0xfc, 0xd3de, 0xb91, 0x796}, {0x6, 0x2, 0x2, 0x5}, {0x6, 0x445, 0x17, 0x6}, {0x0, 0x3, 0x10001, 0x7f}, {0x7, 0x8000, 0x2, 0x7}, {0x3, 0x0, 0x10001, 0x8}, {0xca, 0x4, 0x81b6, 0x6}, {0x8, 0x7, 0x75c}, {0x3, 0x5, 0x1, 0x3}, {0x10001, 0x81, 0x1000, 0x8}, {0x75d71962, 0x8, 0x8, 0x9}, {0x3, 0x5, 0x3f, 0x3}, {0x7, 0x400, 0x9, 0x7}, {0x400, 0x0, 0xfffffffc, 0x2}, {0x80000000, 0x5, 0x0, 0x12}, {0x189, 0x1, 0x80000001, 0x9}, {0xa0, 0x87, 0x3, 0x3ff}, {0x2, 0xffffffff, 0x0, 0x4d}, {0x6, 0x80000001, 0x1000, 0x8}, {0x2, 0x8, 0x8, 0x100}, {0x7278, 0x9ada, 0x9, 0x9}, {0x7, 0x0, 0xfffff000, 0x8db4}, {0x2, 0x5, 0xfff}, {0x5, 0x8001, 0x81, 0x9}, {0x0, 0x83, 0x7}, {0x80, 0x80, 0x1f, 0x8}, {0x2, 0x6, 0x7, 0x200}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0xaf41, 0x6, 0x3f}, {0x0, 0x3, 0xf1, 0xb9}, {0x0, 0x5a, 0x3, 0x3}, {0x8000, 0x81, 0x2, 0x22}, {0x0, 0xe5, 0x7, 0x8}, {0x7fff, 0xf85, 0x7fffffff}, {0x6, 0x1, 0x1, 0x3}, {0x9, 0x6, 0x1f, 0xd1}, {0x1f, 0x3, 0x7c000000, 0x5}, {0x2, 0x80000000, 0x9b, 0x1}, {0x5, 0x7, 0xffff, 0x78}, {0x8, 0x3, 0x7ff, 0xff}, {0x7fffffff, 0x8000, 0x7, 0x2}, {0x101, 0x1, 0x3ff, 0xccc3}, {0x5, 0x400, 0x7, 0xfff}, {0x8, 0x101, 0xfffffffe, 0x1}, {0x200, 0xfffff972, 0x148, 0x8}, {0xffffffff, 0x7fff, 0x7, 0x9}, {0x5f, 0x800, 0xef13, 0x1f}, {0x5d, 0x3, 0x10001, 0x5}, {0x4, 0x10000000, 0x7, 0x630}, {0x4, 0x9, 0x969, 0x2}, {0x36a2b83, 0x8000, 0x1, 0x8001}, {0x4, 0x1e4, 0x8001, 0x40}, {0x576e, 0x3, 0x7ff, 0x67}, {0xff, 0x52, 0x8, 0x2}, {0x2, 0x101, 0xfff, 0x80}, {0x5, 0x5, 0x6, 0x81}, {0x2, 0x70, 0xbd, 0x40}, {0x1, 0xfffffff9, 0x8, 0x3}, {0x9, 0xbdc, 0x0, 0x162}, {0x8, 0x7, 0xee5, 0x10001}, {0x2, 0x2, 0x2, 0x800}, {0x10001, 0x1dc4e23e, 0x80000001, 0x4d8}, {0x1c00000, 0xb0b9, 0x816, 0x7}, {0x20, 0x1, 0x22, 0x7}, {0x200, 0x8, 0x7, 0x2f1}, {0x7ff, 0x0, 0x9, 0x7}, {0x1000, 0x9, 0x627, 0x3f}, {0x7fffffff, 0x4, 0xac3d, 0x1}, {0x40, 0x4c51, 0x8, 0x9}, {0x744, 0x5, 0x9, 0x9}, {0x5, 0x7, 0x1000, 0x100}, {0x2, 0x9, 0x7ff, 0x2}, {0x1, 0xe7, 0x7fffffff, 0x1}, {0x101, 0xb, 0x0, 0xbb}, {0x1, 0x3, 0x1ff, 0x101}, {0x6, 0xfffff00d, 0x2a8, 0x3}, {0x40, 0x8d3, 0x8, 0x7}, {0x10001, 0x117, 0x1000000, 0x6}, {0x8, 0x1, 0x3f, 0x8}, {0x30, 0x5, 0x5, 0x6}, {0x0, 0xffffffff, 0x6, 0x1}, {0x2, 0x8001, 0x800, 0x5bb}, {0x400, 0x1, 0x7fff, 0x800}, {0xbbf3, 0x1, 0x7fffffff, 0x40}, {0xfffffffe, 0x400, 0x401, 0x2}, {0x400, 0x6, 0x357, 0x7ff}, {0x1, 0x83fb, 0x3, 0xe3a}, {0x6, 0x973, 0x685, 0x200}, {0x10000000, 0x1, 0x100, 0x5}, {0x3, 0xfffffffc, 0x0, 0x8001}, {0x1f, 0x6, 0x4, 0x7fffffff}, {0x8, 0x0, 0x1f, 0x3f}, {0x0, 0x81, 0xffffffff, 0x1000}, {0x9, 0xf4, 0x9, 0x4}, {0x2, 0x10000, 0x1800, 0x1}, {0x2, 0x9, 0x9, 0x2}, {0x81, 0x200, 0x6, 0x400}, {0x1, 0xeee, 0x40, 0x7}, {0x1, 0x6, 0x0, 0x2}, {0x4, 0x8, 0x0, 0x5}, {0x8, 0x22d, 0xfffffffb, 0x5}, {0x85, 0x1, 0x5, 0x4}, {0x3, 0x7479, 0x7ff, 0x8}, {0x80, 0xfff, 0xfffffff9, 0x3ff}, {0x1f, 0x5, 0x10001, 0x8}, {0x1, 0x5, 0x6, 0x7fff}, {0x20, 0x7, 0x400, 0x2}, {0x81, 0x6, 0x5, 0x5}, {0x4, 0x6, 0x0, 0x79c}, {0x10000, 0x8, 0x3, 0x2}, {0x2, 0x7, 0x3, 0x9}, {0x6, 0xffff9a51, 0x32a}, {0x7, 0x1ff, 0x6, 0x46}, {0x9f04, 0x0, 0x7fffffff, 0x7}, {0x800, 0x57, 0x0, 0xffffb493}, {0x3, 0x9, 0x9, 0x2}, {0x1, 0x6054, 0xfffffff7, 0x3}, {0x2, 0x7, 0x4, 0x81}, {0x0, 0x2, 0x7fffffff, 0x6}, {0xd, 0x8b3a, 0x7, 0x1}, {0x1, 0x4, 0x100, 0x1}, {0xec1, 0x2, 0x3, 0x1800}, {0x30c8, 0x4, 0x1, 0x7}, {0x200, 0x8af0, 0x7ff, 0x18ac}, {0x23, 0x2, 0x9, 0xb4}, {0xffffffff, 0x7, 0x1, 0x3f}, {0x6, 0x5, 0x33cb, 0xa}, {0x7, 0x40, 0x8, 0x7ff}, {0x7, 0x9, 0x5, 0x1f}, {0x7, 0x3ff, 0x7, 0xfffffffb}, {0x8, 0xd9, 0x4, 0xd6}, {0x4, 0x5, 0x6, 0x4}, {0x3, 0x100, 0x71, 0x6}, {0x640, 0x10001, 0x9, 0x400}, {0x87, 0x6, 0x80000000, 0x8}, {0x1f8b, 0x0, 0x200, 0x6}, {0x4, 0x10001, 0x4b, 0xa4c}, {0x0, 0xff, 0x800, 0x1}, {0x2, 0x8, 0x8f2, 0x7ff}, {0x8000, 0x80000001, 0xffff2bf8, 0x9fa9}, {0x6, 0xffff, 0x81, 0x3259d18d}, {0x1000, 0xf8d5, 0x7, 0x401}, {0x10001, 0x100, 0x0, 0x9}, {0x4, 0x1, 0x6, 0x1}, {0x6, 0x7fff, 0xfffffff5, 0x4369}, {0x9, 0x0, 0x7, 0x40}, {0x8, 0x1, 0x9, 0x3f}, {0x3ff, 0x5, 0x8001, 0x92bd}, {0x7, 0x6, 0x1, 0x2}, {0x1, 0x0, 0x20, 0x6}, {0x9, 0x1, 0x8, 0x200}, {0x80, 0xffffffff, 0x6, 0x7}, {0x3, 0x7, 0x8, 0x7f}, {0x1, 0x893, 0xffffffff, 0x7}, {0xfffffff7, 0x5, 0xa02a, 0x2}, {0x0, 0x880, 0x8000, 0x5}, {0x3, 0x7, 0x101, 0x401}, {0x4, 0x3ff, 0x7}, {0x6, 0x3, 0xfffffff9, 0x7ff}, {0xc22, 0x6f9, 0x4, 0x8001}, {0x1, 0x1, 0x4, 0x7fff}, {0x7, 0x2, 0x9}, {0x1f, 0x9, 0x49c, 0x21}, {0x0, 0x4, 0xffff}, {0x6, 0x4c47, 0x4, 0x80}, {0x8, 0x8, 0x2, 0x1ff}, {0x80, 0x8, 0x81, 0x400}, {0x100, 0x36, 0x7, 0x5f37}, {0x0, 0x1ff, 0x81, 0x101}, {0x4, 0x9b, 0x3, 0x6}, {0x8, 0x606e, 0x4, 0xd4c4}, {0x5, 0x1, 0x6, 0x400}, {0x9, 0x2, 0x20000000, 0x8}, {0x79, 0x1, 0xffffffff, 0x2}, {0x8, 0x0, 0x6, 0x5}, {0x4, 0x0, 0x7b4, 0x7ff}, {0x6, 0x2, 0xff, 0x2}, {0x3, 0x21, 0x7, 0x3}, {0x2, 0x0, 0x0, 0x5}, {0x7, 0x8, 0x80000000, 0x8}, {0x9696, 0x0, 0x4, 0x6}, {0x3ff, 0x401, 0x400, 0x3ff}, {0x2, 0x5, 0x9, 0xfff}, {0x4, 0x7f, 0x80000001, 0xe2}, {0x0, 0xd8b, 0x3, 0x81}, {0x8, 0xbe, 0x8, 0x800}, {0x4b4, 0x20, 0x1, 0x5}, {0x2, 0xffff, 0x6, 0x79b11c1b}, {0x0, 0x4, 0x56, 0x8}, {0x0, 0xffff0000, 0x4, 0x62}, {0x2, 0x6, 0x2, 0x4}, {0xffff, 0x1, 0x40a, 0x8}, {0x81, 0x2, 0xa1, 0x80000000}, {0x7, 0x7, 0xd9c, 0x4}, {0x7, 0x9, 0x1c45}, {0x233, 0x0, 0x0, 0xff}, {0x20002000, 0x3, 0x3, 0x2ac}, {0x8, 0x109, 0x6, 0xb7f0}, {0x7, 0x3, 0x5, 0x200}, {0x3, 0x6, 0x6997e228, 0x2}, {0xfffffff7, 0xfff, 0x5, 0x7}, {0xaea6, 0x8001, 0x3, 0x800}, {0x3, 0xf3f, 0x6, 0x3ff}, {0x9, 0x0, 0x1, 0xc}, {0x0, 0x7, 0x3b000000}, {0x6, 0x6, 0xfffffff7, 0x92}, {0x5, 0x9, 0xffff8000, 0xfffffffa}, {0x3, 0x3, 0xdd, 0x8000}, {0xfffffffa, 0x80000001, 0xdb, 0xffffffff}, {0x4, 0x2, 0x2, 0xfffffff9}, {0x5, 0x22a, 0x800, 0x8001}, {0x4, 0x1ffe0, 0x800, 0xe}, {0x6, 0x4, 0x101, 0x2}]}, 0x21e8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) [ 915.798640] FAULT_INJECTION: forcing a failure. [ 915.798640] name failslab, interval 1, probability 0, space 0, times 0 [ 915.826158] CPU: 1 PID: 14032 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 915.834064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.843422] Call Trace: [ 915.846015] dump_stack+0x1b2/0x281 [ 915.849646] should_fail.cold+0x10a/0x149 [ 915.853796] should_failslab+0xd6/0x130 [ 915.857783] kmem_cache_alloc_node_trace+0x25a/0x400 [ 915.862890] __kmalloc_node+0x38/0x70 [ 915.866694] blk_mq_realloc_hw_ctxs+0x528/0xe00 [ 915.871373] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 915.876470] ? blkcg_init_queue+0x19f/0x410 [ 915.880788] ? blk_alloc_queue_node+0x82f/0xb40 [ 915.885455] blk_mq_init_queue+0x5a/0x90 [ 915.889516] loop_add+0x303/0x830 [ 915.892971] ? loop_queue_rq+0x280/0x280 [ 915.897113] ? loop_queue_work+0x21e0/0x21e0 [ 915.901523] loop_control_ioctl+0x11a/0x3f0 [ 915.905843] ? loop_lookup+0x190/0x190 [ 915.909722] ? SyS_write+0x1b7/0x210 [ 915.913432] ? loop_lookup+0x190/0x190 [ 915.917317] do_vfs_ioctl+0x75a/0xff0 [ 915.921116] ? lock_acquire+0x170/0x3f0 [ 915.925092] ? ioctl_preallocate+0x1a0/0x1a0 [ 915.929501] ? __fget+0x2df/0x460 [ 915.932947] ? do_vfs_ioctl+0xff0/0xff0 [ 915.936930] ? security_file_ioctl+0x83/0xb0 [ 915.941333] SyS_ioctl+0x7f/0xb0 [ 915.944868] ? do_vfs_ioctl+0xff0/0xff0 [ 915.948842] do_syscall_64+0x1d5/0x640 [ 915.952732] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 915.957914] RIP: 0033:0x7f8002e8f059 [ 915.961613] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.969322] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 915.976611] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 915.983890] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 915.983899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000002300)) (async) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000002340), 0x7, 0x400) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r5, 0x2}}, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=@ret_submit={{0x3, 0x10001, 0x0, 0x1, 0x4}, 0x8, 0xe8, 0xed, 0x20d, 0xff4, 0x0, "0bb813f7522ea068525031d815ff1f6fc24b94e464d81ee17c0b500ee3da911aa0ccb9829b52dd14705a233ba689abb683612421774eb3dc93667b96338bbadeeff7c8ad9a294a0ef2b9c331d92c76dff95fd5493f210b526cd1d0f0f3f07837c146ed358ca9f7249fddee94b59febb5f1f6f0c79194d6342aeedc78fcb7f220878e3e5cc2ab9afa65429557302b6f2ba182999f694a13a1790e30c16141e61b9130fcc9b248ca1287e4aff9f694a0c851fd74a6d527631b56fcf35dbe5ae9847139c87f1231c4f276ef556d9794bd7144923eac1793195665e52e4e98035ef0e259375f6104e8ff", [{0x5, 0x0, 0x1, 0xfd2}, {0x100, 0x8, 0x7}, {0xd5, 0xfffffffa, 0x2, 0x81}, {0x10001, 0x687ade9b, 0x1, 0x5}, {0xe8f, 0x101, 0x8}, {0x7, 0x8, 0x2, 0x80000000}, {0x3, 0x6, 0x479, 0xff}, {0x5759, 0x8000, 0x1000, 0xfff}, {0x8796, 0xffffffff, 0x8, 0x6}, {0x5, 0x80000000, 0x5, 0x9}, {0xffffffff, 0x3252, 0x7fff, 0x8001}, {0x6de, 0x2, 0x3f, 0x4}, {0x2, 0xfffffbbb, 0x2dd, 0x57a}, {0x0, 0x2, 0xff, 0xe7}, {0xd01, 0x8, 0x4, 0xfffffff8}, {0x100, 0x9, 0x8000, 0x20}, {0x4, 0x4, 0xfffffffe, 0x8001}, {0xfffffff7, 0x18, 0x1, 0xeef}, {0x7ff, 0x6, 0x2c851033, 0x9}, {0x4, 0x2, 0x6}, {0x7, 0x3, 0x3, 0x2}, {0x3, 0xd1, 0x1, 0x9}, {0x0, 0xb6, 0x1, 0x6}, {0x7, 0x2, 0x6, 0x4}, {0xdc30, 0x7, 0x7fff, 0x1ff}, {0x1, 0x7, 0x7, 0x10001}, {0x10001, 0x9, 0x3, 0x5d5}, {0x0, 0x1, 0x7}, {0x1, 0x1f, 0x4, 0x6}, {0xf6, 0x40, 0x411, 0xffffffff}, {0x4, 0x57f, 0xffff}, {0x7ff, 0x3b6, 0x716}, {0x8, 0x8, 0x4}, {0x3ff, 0x1, 0x1, 0x10001}, {0x9, 0x7016, 0x3, 0x32}, {0x5, 0x7ff, 0xba, 0x9269}, {0x1, 0x8, 0x4, 0xcbb}, {0x6, 0x80000000, 0x8, 0x5}, {0x40, 0x8, 0x80, 0x100}, {0x6, 0x0, 0x8, 0x5}, {0x2, 0x1, 0x1, 0x200}, {0x1, 0x7, 0x10000, 0x6}, {0x6f, 0x4, 0x5, 0x7fff}, {0xf18, 0x81, 0x6, 0x4}, {0xad6b, 0xd64, 0x5, 0x4}, {0x81, 0x4, 0x800, 0x3f}, {0x10001, 0x2, 0x3, 0x24b}, {0x3, 0x4, 0x3, 0xc97e}, {0x6, 0xb1f6, 0x9, 0x5}, {0x8e, 0x800, 0x46, 0xfff}, {0x7fffffff, 0xd4c, 0x7fff, 0x3a62}, {0xfff, 0xffffffff, 0x4, 0xfff}, {0x8, 0xf0f, 0xc83, 0x9}, {0x4, 0x8, 0x3, 0x401}, {0x6, 0xcd4, 0xc0da, 0x7}, {0x101, 0x0, 0x7, 0x8}, {0xa94, 0xffffffff, 0x97, 0xe65c}, {0x101, 0x9, 0x5, 0x200}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x1000, 0x4, 0x4}, {0x31f1, 0x6, 0x38d0, 0x2}, {0x7, 0x800, 0x8001, 0x80000000}, {0x2, 0x80000000, 0x78a, 0x7ff}, {0x0, 0x6, 0xffffffff, 0x401}, {0x72, 0x1, 0x7, 0xfffff5f1}, {0x7, 0x6, 0x8, 0xc8}, {0x9, 0x7, 0x81, 0x80000000}, {0x17d90, 0x6, 0x5, 0x1}, {0x3, 0x80, 0x5, 0xffffd1fa}, {0x205, 0x6, 0x80000001, 0x3}, {0x260, 0x297, 0xa4, 0x9}, {0x2, 0x7, 0x10000, 0x1f}, {0x7, 0x8, 0x8000000, 0xc9}, {0x12, 0x7ff, 0xffff, 0x200}, {0x7, 0x400, 0x8, 0x1}, {0x0, 0x1, 0x800, 0x401}, {0x1ed44166, 0x3, 0x10001, 0x3}, {0x3f, 0x7, 0x100, 0xffffff00}, {0x3, 0x80, 0x2, 0xfffffe00}, {0x10001, 0x0, 0x5, 0x3}, {0xc8, 0x1, 0x8, 0x7fff}, {0x800, 0x10000, 0x1}, {0xf29, 0x9, 0xff, 0x7f}, {0x81, 0x5, 0x4, 0x4}, {0x42, 0x34, 0x370d, 0x81}, {0x896, 0x3, 0x0, 0x7}, {0x8001, 0x7e0000, 0x5, 0x80000001}, {0xfb79, 0x1, 0xffff0000, 0x5}, {0x1, 0xf419, 0x81, 0x10000}, {0x4, 0xfffffffe, 0x1ff, 0xff}, {0x1, 0x3, 0x6, 0xffff}, {0x7fff, 0x3}, {0x6e2d5d81, 0x9, 0x8, 0x4010000}, {0x6, 0xf3, 0x1, 0xdc51}, {0x2, 0x4, 0x7, 0x800}, {0x81, 0x1, 0x9, 0x1}, {0xfff, 0x10000, 0x5, 0x1eb}, {0x401, 0x6, 0x9, 0x7}, {0x1, 0x67, 0x0, 0x10000}, {0x20, 0xd447, 0x2, 0xa7}, {0x40, 0x4, 0x20}, {0xffffffff, 0x1b8, 0xa36, 0x2}, {0x1f, 0x7, 0x6, 0x8000}, {0x4, 0x0, 0xb2a7, 0x7}, {0x80000001, 0x4, 0x2}, {0x8, 0x81, 0x10000, 0xde}, {0x0, 0x10000, 0x8, 0xeea}, {0x0, 0x20, 0x7, 0x40}, {0x4, 0x3, 0xa2ab, 0x88}, {0x101, 0x3, 0x200, 0x40}, {0xff, 0xffff, 0x0, 0x5}, {0x3f, 0x5, 0x8000, 0x9}, {0x10004, 0x0, 0x8, 0x7}, {0x7ff, 0xff, 0xb80, 0x3}, {0x81, 0x25, 0x3, 0x9}, {0x40, 0x0, 0x4, 0x5}, {0x756, 0x5, 0x7, 0xfff}, {0x2926, 0x2, 0x0, 0x1}, {0xfffffff9, 0x81, 0x8, 0x7}, {0x7ff, 0x9, 0x80, 0x7}, {0x2, 0x1000, 0x4, 0x3}, {0x3, 0x0, 0x84, 0x5}, {0x102, 0x800, 0xaaea, 0x20}, {0x40, 0x2, 0x45d, 0x3}, {0xffffff7f, 0x7fff, 0x2, 0x8}, {0x7f, 0x9, 0x772, 0x8}, {0x9, 0xffffffff, 0x7fff}, {0x2, 0x8, 0x10000003, 0x4}, {0x4, 0xfffffff7, 0x0, 0x80}, {0x2, 0x3, 0xfffffff7, 0x1bf6}, {0x3, 0x3, 0x8, 0x7fff}, {0xb455, 0x8, 0x2}, {0x849, 0x100, 0x3, 0x5}, {0x2, 0x0, 0x10001, 0x10001}, {0x0, 0x4, 0x6, 0xff}, {0x8, 0x1f4, 0x8, 0x1}, {0x26a9, 0x60000000, 0x8, 0x4}, {0xf9, 0x6, 0x81, 0x18000000}, {0x6d1b, 0xffffffff, 0x5, 0x7}, {0xb34, 0x1ff, 0x400, 0x7}, {0x7ff, 0x40, 0x9, 0x8000}, {0x1, 0x2b, 0x8, 0xfffffffb}, {0x0, 0x2ed, 0x800, 0x7}, {0x5, 0xffffffff, 0xa87, 0x3}, {0x8, 0x1, 0x400, 0xffffd7e2}, {0x12a, 0x1, 0x7, 0x5}, {0x3, 0x101, 0x0, 0x7fff}, {0xc6, 0x6, 0x4, 0x4}, {0x2, 0x20000000, 0xcf73, 0x6}, {0xffffffff, 0x7ff, 0x200}, {0x9, 0x8, 0x1, 0x8}, {0x0, 0x200, 0x4, 0x7}, {0x10000000, 0x6, 0x400}, {0x5c96, 0x1f, 0x5, 0x40}, {0x5, 0xfffffffe, 0x7fffffff, 0x20}, {0xde, 0xd7, 0x401, 0x2}, {0x101, 0x5, 0xfffffff9, 0x4}, {0x6, 0xbc974896, 0x48d, 0x4}, {0x6, 0xa61c, 0x2, 0x7}, {0x7, 0x0, 0x4, 0x6}, {0x6, 0x0, 0x9, 0x81}, {0x8, 0x3, 0x5, 0x2}, {0x8, 0x800, 0x2, 0x7}, {0x52d1, 0x5, 0x3, 0x3ff}, {0x5, 0x5, 0xcb6, 0x6}, {0x9b, 0x7, 0x3ec, 0x10000}, {0x200, 0x7, 0x4, 0x7}, {0x4135, 0x9, 0x7f, 0x9}, {0x7ff, 0xbe, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x20}, {0x7, 0xfffffffb, 0x8000, 0x9}, {0x2, 0xd77, 0xa429, 0x4}, {0x8, 0x5, 0x19a, 0x767}, {0xe9, 0x20, 0x278, 0xfffffe01}, {0x6, 0x95, 0xbf88, 0x8001}, {0x4, 0x40, 0xff, 0xfffffff9}, {0x6, 0x8, 0x7, 0x7fff}, {0x7ff, 0x21, 0x8000, 0x7}, {0x854, 0x400, 0x1f, 0x3}, {0x0, 0x1, 0x100, 0x5}, {0xe568, 0xec, 0x1, 0xffff7938}, {0x3, 0x3f, 0x4, 0x6}, {0x0, 0x6, 0x4, 0x4d4e4a0a}, {0x6, 0x1000, 0x1ff, 0x3f}, {0x5, 0x2c7, 0x76, 0x1}, {0xfffffff7, 0x1, 0x0, 0x1}, {0x8, 0x5, 0xcf7d, 0x7}, {0x2, 0x7, 0x0, 0xf4a}, {0x6, 0x4, 0x40100000, 0x7}, {0x3, 0x4, 0xb3ff}, {0x7, 0x65, 0x423b, 0x5}, {0x8273, 0xf16, 0x158, 0x80000001}, {0x9, 0x0, 0x5, 0x9ffe}, {0x8, 0x1, 0x80, 0x81}, {0x400, 0x3, 0x7, 0x8001}, {0x3, 0x80, 0xe3b9, 0x4}, {0x7b2, 0x2, 0xa4, 0x20}, {0x8001, 0x0, 0x6, 0x8}, {0x9b, 0x0, 0x8, 0x8}, {0xffff, 0x2, 0x7, 0x4}, {0x7f, 0x30, 0x5, 0x5e9}, {0x3ff, 0xff, 0x2, 0x9}, {0x81, 0x40, 0xedc, 0x1000}, {0x1ff, 0x1, 0xd0, 0x401}, {0x9, 0x5704ca51, 0x100, 0xef}, {0x1, 0x3, 0x100, 0x7}, {0x5, 0x9, 0x9, 0x1}, {0xbe5, 0x0, 0x9, 0x200}, {0x80000000, 0x8001, 0x10000, 0x101}, {0x6, 0x8, 0x1, 0x80000001}, {0xb2, 0x7228, 0x9, 0x40}, {0x9, 0x81, 0x93, 0x9}, {0x9, 0x7, 0x6, 0x2}, {0x4000, 0x8, 0xd67, 0x1}, {0xfffffffb, 0x656, 0x5d9, 0x7}, {0x3, 0xd4, 0x6, 0x9}, {0x80, 0x1, 0x3f, 0x3}, {0x3, 0xfffffe00, 0x6, 0x9}, {0xffff, 0x80000001, 0x40, 0x80000000}, {0x7, 0x1, 0x7, 0x2}, {0x1f, 0x99, 0xffffffff, 0x7d29}, {0x8, 0x4, 0xff, 0x5}, {0x3, 0x8, 0xfffffff8, 0x6}, {0x404, 0x3, 0x1, 0x3ff}, {0x6, 0xffff, 0xfffffff9, 0x4}, {0x5, 0x0, 0x80000000, 0x400}, {0x5, 0xf17, 0x1, 0x9}, {0x4435, 0x7, 0x4, 0x9}, {0x4, 0x3be, 0x401, 0x6}, {0x80000001, 0x0, 0x3, 0x7ff}, {0x101, 0x9c2, 0x5, 0x1000}, {0x2, 0x9, 0x2, 0x1ff}, {0x8000, 0x200, 0x4800000, 0xfff}, {0x5, 0x4, 0x1, 0x7}, {0xe326, 0x1, 0x2, 0x1}, {0x6, 0x9, 0x4, 0x2}, {0x0, 0x4, 0x6, 0x3ff}, {0x4, 0x8, 0x5, 0x6}, {0x6, 0x7fffffff, 0x3f, 0x6}, {0x401, 0x7f, 0x3, 0xfffffffd}, {0x0, 0x8, 0x3, 0xf978}, {0x1f, 0x100, 0x7}, {0x6, 0x3, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x101}, {0x4, 0x8, 0x7}, {0x1000, 0x1000, 0x3, 0x3f}, {0x3, 0x9, 0x9, 0x2a89e679}, {0xae, 0x1, 0x5, 0x6}, {0x1, 0x9, 0x9, 0x7fff}, {0x5, 0x4, 0x1, 0xfffffff7}, {0xa6, 0x5, 0x9f, 0x2}, {0x9, 0x20, 0xc6, 0x4}, {0x4, 0x6, 0xff, 0x9}, {0x7, 0x7f41, 0x3, 0x8000}, {0x9, 0x6, 0x400, 0xebb}, {0x80000000, 0xfffffff7, 0x3ff, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x2, 0xffffffff, 0x5}, {0x7fff, 0x635, 0x7fffffff, 0x1ff}, {0x5, 0x8d, 0x1, 0x6}, {0xa9, 0x6, 0x7ff, 0x1}, {0xc000000, 0x3, 0x4, 0x2}, {0x1, 0x6, 0x80000001, 0x6}, {0x42, 0xffffffff, 0x5, 0x2e}, {0x3ff, 0x69f, 0x1, 0x6}, {0x5, 0x942a, 0x8, 0x8352}, {0x346eb548, 0x4d07, 0x100, 0x401}, {0xffff, 0x4, 0x1, 0xfff}, {0xfffffff9, 0x7, 0x6, 0x60bd}, {0x136e, 0x1, 0xd0df, 0x400}, {0x3, 0x7c000000, 0x2a3a, 0x200}, {0x9, 0x40, 0x200, 0x81}, {0x2, 0x8, 0xb9c, 0x7fffffff}, {0x2, 0x2717, 0x4, 0x5}, {0x2, 0x651, 0x5, 0x7}, {0x69f, 0xaac3, 0x8, 0x7ff}, {0x100, 0x3f, 0x6, 0xfffffffc}, {0xfffeffff, 0x1, 0x9, 0x7}, {0x3f89, 0x1, 0x0, 0x6}, {0xb02, 0x7f, 0x3a4, 0x1}, {0x401, 0x1ff, 0x9, 0x3}, {0x7, 0xffffffff, 0x7, 0x6}, {0x93, 0x7fff, 0x7, 0x8}, {0x4, 0x3, 0x2, 0x1ff}, {0x1, 0x9b65, 0xef, 0x2a36}, {0x2, 0x1, 0x4, 0x7ff}, {0x8, 0x2, 0x80000000, 0x2}, {0x80000001, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x9, 0xd2eb}, {0x0, 0x2, 0x8, 0x4}, {0x6, 0x4, 0x9, 0x9}, {0x3, 0x0, 0xfd7, 0x7}, {0x9bd, 0xffffffff, 0x2083, 0x101}, {0x8, 0xf40, 0x7, 0x5}, {0x4, 0x8, 0x3f, 0x4}, {0x0, 0x94b4, 0x80000001, 0xffffffff}, {0x0, 0x7f, 0x2c5, 0x20}, {0x4, 0x1, 0x6, 0x3}, {0xa3d, 0x850, 0xfffffff7, 0x8}, {0x81, 0x82e, 0x7, 0x2}, {0x6a5b47c2, 0x92a3d482, 0x7, 0x1}, {0x8791, 0x1, 0xfffffffc, 0xd4d}, {0x0, 0x2, 0x200, 0x1}, {0x8, 0x8, 0x5, 0x63de}, {0x800, 0x1, 0x4, 0x8}, {0x6, 0x620, 0x1d0b4854, 0xf42a}, {0x4, 0x101, 0xfffffff8, 0x824c}, {0x7, 0x0, 0x6}, {0x1ff, 0x7fff, 0x200, 0x5}, {0x81, 0x8, 0x4}, {0x2, 0x7, 0x800, 0x2}, {0xebd, 0xfffffffb, 0x7ff, 0x7}, {0xfc, 0xd3de, 0xb91, 0x796}, {0x6, 0x2, 0x2, 0x5}, {0x6, 0x445, 0x17, 0x6}, {0x0, 0x3, 0x10001, 0x7f}, {0x7, 0x8000, 0x2, 0x7}, {0x3, 0x0, 0x10001, 0x8}, {0xca, 0x4, 0x81b6, 0x6}, {0x8, 0x7, 0x75c}, {0x3, 0x5, 0x1, 0x3}, {0x10001, 0x81, 0x1000, 0x8}, {0x75d71962, 0x8, 0x8, 0x9}, {0x3, 0x5, 0x3f, 0x3}, {0x7, 0x400, 0x9, 0x7}, {0x400, 0x0, 0xfffffffc, 0x2}, {0x80000000, 0x5, 0x0, 0x12}, {0x189, 0x1, 0x80000001, 0x9}, {0xa0, 0x87, 0x3, 0x3ff}, {0x2, 0xffffffff, 0x0, 0x4d}, {0x6, 0x80000001, 0x1000, 0x8}, {0x2, 0x8, 0x8, 0x100}, {0x7278, 0x9ada, 0x9, 0x9}, {0x7, 0x0, 0xfffff000, 0x8db4}, {0x2, 0x5, 0xfff}, {0x5, 0x8001, 0x81, 0x9}, {0x0, 0x83, 0x7}, {0x80, 0x80, 0x1f, 0x8}, {0x2, 0x6, 0x7, 0x200}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0xaf41, 0x6, 0x3f}, {0x0, 0x3, 0xf1, 0xb9}, {0x0, 0x5a, 0x3, 0x3}, {0x8000, 0x81, 0x2, 0x22}, {0x0, 0xe5, 0x7, 0x8}, {0x7fff, 0xf85, 0x7fffffff}, {0x6, 0x1, 0x1, 0x3}, {0x9, 0x6, 0x1f, 0xd1}, {0x1f, 0x3, 0x7c000000, 0x5}, {0x2, 0x80000000, 0x9b, 0x1}, {0x5, 0x7, 0xffff, 0x78}, {0x8, 0x3, 0x7ff, 0xff}, {0x7fffffff, 0x8000, 0x7, 0x2}, {0x101, 0x1, 0x3ff, 0xccc3}, {0x5, 0x400, 0x7, 0xfff}, {0x8, 0x101, 0xfffffffe, 0x1}, {0x200, 0xfffff972, 0x148, 0x8}, {0xffffffff, 0x7fff, 0x7, 0x9}, {0x5f, 0x800, 0xef13, 0x1f}, {0x5d, 0x3, 0x10001, 0x5}, {0x4, 0x10000000, 0x7, 0x630}, {0x4, 0x9, 0x969, 0x2}, {0x36a2b83, 0x8000, 0x1, 0x8001}, {0x4, 0x1e4, 0x8001, 0x40}, {0x576e, 0x3, 0x7ff, 0x67}, {0xff, 0x52, 0x8, 0x2}, {0x2, 0x101, 0xfff, 0x80}, {0x5, 0x5, 0x6, 0x81}, {0x2, 0x70, 0xbd, 0x40}, {0x1, 0xfffffff9, 0x8, 0x3}, {0x9, 0xbdc, 0x0, 0x162}, {0x8, 0x7, 0xee5, 0x10001}, {0x2, 0x2, 0x2, 0x800}, {0x10001, 0x1dc4e23e, 0x80000001, 0x4d8}, {0x1c00000, 0xb0b9, 0x816, 0x7}, {0x20, 0x1, 0x22, 0x7}, {0x200, 0x8, 0x7, 0x2f1}, {0x7ff, 0x0, 0x9, 0x7}, {0x1000, 0x9, 0x627, 0x3f}, {0x7fffffff, 0x4, 0xac3d, 0x1}, {0x40, 0x4c51, 0x8, 0x9}, {0x744, 0x5, 0x9, 0x9}, {0x5, 0x7, 0x1000, 0x100}, {0x2, 0x9, 0x7ff, 0x2}, {0x1, 0xe7, 0x7fffffff, 0x1}, {0x101, 0xb, 0x0, 0xbb}, {0x1, 0x3, 0x1ff, 0x101}, {0x6, 0xfffff00d, 0x2a8, 0x3}, {0x40, 0x8d3, 0x8, 0x7}, {0x10001, 0x117, 0x1000000, 0x6}, {0x8, 0x1, 0x3f, 0x8}, {0x30, 0x5, 0x5, 0x6}, {0x0, 0xffffffff, 0x6, 0x1}, {0x2, 0x8001, 0x800, 0x5bb}, {0x400, 0x1, 0x7fff, 0x800}, {0xbbf3, 0x1, 0x7fffffff, 0x40}, {0xfffffffe, 0x400, 0x401, 0x2}, {0x400, 0x6, 0x357, 0x7ff}, {0x1, 0x83fb, 0x3, 0xe3a}, {0x6, 0x973, 0x685, 0x200}, {0x10000000, 0x1, 0x100, 0x5}, {0x3, 0xfffffffc, 0x0, 0x8001}, {0x1f, 0x6, 0x4, 0x7fffffff}, {0x8, 0x0, 0x1f, 0x3f}, {0x0, 0x81, 0xffffffff, 0x1000}, {0x9, 0xf4, 0x9, 0x4}, {0x2, 0x10000, 0x1800, 0x1}, {0x2, 0x9, 0x9, 0x2}, {0x81, 0x200, 0x6, 0x400}, {0x1, 0xeee, 0x40, 0x7}, {0x1, 0x6, 0x0, 0x2}, {0x4, 0x8, 0x0, 0x5}, {0x8, 0x22d, 0xfffffffb, 0x5}, {0x85, 0x1, 0x5, 0x4}, {0x3, 0x7479, 0x7ff, 0x8}, {0x80, 0xfff, 0xfffffff9, 0x3ff}, {0x1f, 0x5, 0x10001, 0x8}, {0x1, 0x5, 0x6, 0x7fff}, {0x20, 0x7, 0x400, 0x2}, {0x81, 0x6, 0x5, 0x5}, {0x4, 0x6, 0x0, 0x79c}, {0x10000, 0x8, 0x3, 0x2}, {0x2, 0x7, 0x3, 0x9}, {0x6, 0xffff9a51, 0x32a}, {0x7, 0x1ff, 0x6, 0x46}, {0x9f04, 0x0, 0x7fffffff, 0x7}, {0x800, 0x57, 0x0, 0xffffb493}, {0x3, 0x9, 0x9, 0x2}, {0x1, 0x6054, 0xfffffff7, 0x3}, {0x2, 0x7, 0x4, 0x81}, {0x0, 0x2, 0x7fffffff, 0x6}, {0xd, 0x8b3a, 0x7, 0x1}, {0x1, 0x4, 0x100, 0x1}, {0xec1, 0x2, 0x3, 0x1800}, {0x30c8, 0x4, 0x1, 0x7}, {0x200, 0x8af0, 0x7ff, 0x18ac}, {0x23, 0x2, 0x9, 0xb4}, {0xffffffff, 0x7, 0x1, 0x3f}, {0x6, 0x5, 0x33cb, 0xa}, {0x7, 0x40, 0x8, 0x7ff}, {0x7, 0x9, 0x5, 0x1f}, {0x7, 0x3ff, 0x7, 0xfffffffb}, {0x8, 0xd9, 0x4, 0xd6}, {0x4, 0x5, 0x6, 0x4}, {0x3, 0x100, 0x71, 0x6}, {0x640, 0x10001, 0x9, 0x400}, {0x87, 0x6, 0x80000000, 0x8}, {0x1f8b, 0x0, 0x200, 0x6}, {0x4, 0x10001, 0x4b, 0xa4c}, {0x0, 0xff, 0x800, 0x1}, {0x2, 0x8, 0x8f2, 0x7ff}, {0x8000, 0x80000001, 0xffff2bf8, 0x9fa9}, {0x6, 0xffff, 0x81, 0x3259d18d}, {0x1000, 0xf8d5, 0x7, 0x401}, {0x10001, 0x100, 0x0, 0x9}, {0x4, 0x1, 0x6, 0x1}, {0x6, 0x7fff, 0xfffffff5, 0x4369}, {0x9, 0x0, 0x7, 0x40}, {0x8, 0x1, 0x9, 0x3f}, {0x3ff, 0x5, 0x8001, 0x92bd}, {0x7, 0x6, 0x1, 0x2}, {0x1, 0x0, 0x20, 0x6}, {0x9, 0x1, 0x8, 0x200}, {0x80, 0xffffffff, 0x6, 0x7}, {0x3, 0x7, 0x8, 0x7f}, {0x1, 0x893, 0xffffffff, 0x7}, {0xfffffff7, 0x5, 0xa02a, 0x2}, {0x0, 0x880, 0x8000, 0x5}, {0x3, 0x7, 0x101, 0x401}, {0x4, 0x3ff, 0x7}, {0x6, 0x3, 0xfffffff9, 0x7ff}, {0xc22, 0x6f9, 0x4, 0x8001}, {0x1, 0x1, 0x4, 0x7fff}, {0x7, 0x2, 0x9}, {0x1f, 0x9, 0x49c, 0x21}, {0x0, 0x4, 0xffff}, {0x6, 0x4c47, 0x4, 0x80}, {0x8, 0x8, 0x2, 0x1ff}, {0x80, 0x8, 0x81, 0x400}, {0x100, 0x36, 0x7, 0x5f37}, {0x0, 0x1ff, 0x81, 0x101}, {0x4, 0x9b, 0x3, 0x6}, {0x8, 0x606e, 0x4, 0xd4c4}, {0x5, 0x1, 0x6, 0x400}, {0x9, 0x2, 0x20000000, 0x8}, {0x79, 0x1, 0xffffffff, 0x2}, {0x8, 0x0, 0x6, 0x5}, {0x4, 0x0, 0x7b4, 0x7ff}, {0x6, 0x2, 0xff, 0x2}, {0x3, 0x21, 0x7, 0x3}, {0x2, 0x0, 0x0, 0x5}, {0x7, 0x8, 0x80000000, 0x8}, {0x9696, 0x0, 0x4, 0x6}, {0x3ff, 0x401, 0x400, 0x3ff}, {0x2, 0x5, 0x9, 0xfff}, {0x4, 0x7f, 0x80000001, 0xe2}, {0x0, 0xd8b, 0x3, 0x81}, {0x8, 0xbe, 0x8, 0x800}, {0x4b4, 0x20, 0x1, 0x5}, {0x2, 0xffff, 0x6, 0x79b11c1b}, {0x0, 0x4, 0x56, 0x8}, {0x0, 0xffff0000, 0x4, 0x62}, {0x2, 0x6, 0x2, 0x4}, {0xffff, 0x1, 0x40a, 0x8}, {0x81, 0x2, 0xa1, 0x80000000}, {0x7, 0x7, 0xd9c, 0x4}, {0x7, 0x9, 0x1c45}, {0x233, 0x0, 0x0, 0xff}, {0x20002000, 0x3, 0x3, 0x2ac}, {0x8, 0x109, 0x6, 0xb7f0}, {0x7, 0x3, 0x5, 0x200}, {0x3, 0x6, 0x6997e228, 0x2}, {0xfffffff7, 0xfff, 0x5, 0x7}, {0xaea6, 0x8001, 0x3, 0x800}, {0x3, 0xf3f, 0x6, 0x3ff}, {0x9, 0x0, 0x1, 0xc}, {0x0, 0x7, 0x3b000000}, {0x6, 0x6, 0xfffffff7, 0x92}, {0x5, 0x9, 0xffff8000, 0xfffffffa}, {0x3, 0x3, 0xdd, 0x8000}, {0xfffffffa, 0x80000001, 0xdb, 0xffffffff}, {0x4, 0x2, 0x2, 0xfffffff9}, {0x5, 0x22a, 0x800, 0x8001}, {0x4, 0x1ffe0, 0x800, 0xe}, {0x6, 0x4, 0x101, 0x2}]}, 0x21e8) (async) 09:15:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000002300)) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000002340), 0x7, 0x400) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r5, 0x2}}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=@ret_submit={{0x3, 0x10001, 0x0, 0x1, 0x4}, 0x8, 0xe8, 0xed, 0x20d, 0xff4, 0x0, "0bb813f7522ea068525031d815ff1f6fc24b94e464d81ee17c0b500ee3da911aa0ccb9829b52dd14705a233ba689abb683612421774eb3dc93667b96338bbadeeff7c8ad9a294a0ef2b9c331d92c76dff95fd5493f210b526cd1d0f0f3f07837c146ed358ca9f7249fddee94b59febb5f1f6f0c79194d6342aeedc78fcb7f220878e3e5cc2ab9afa65429557302b6f2ba182999f694a13a1790e30c16141e61b9130fcc9b248ca1287e4aff9f694a0c851fd74a6d527631b56fcf35dbe5ae9847139c87f1231c4f276ef556d9794bd7144923eac1793195665e52e4e98035ef0e259375f6104e8ff", [{0x5, 0x0, 0x1, 0xfd2}, {0x100, 0x8, 0x7}, {0xd5, 0xfffffffa, 0x2, 0x81}, {0x10001, 0x687ade9b, 0x1, 0x5}, {0xe8f, 0x101, 0x8}, {0x7, 0x8, 0x2, 0x80000000}, {0x3, 0x6, 0x479, 0xff}, {0x5759, 0x8000, 0x1000, 0xfff}, {0x8796, 0xffffffff, 0x8, 0x6}, {0x5, 0x80000000, 0x5, 0x9}, {0xffffffff, 0x3252, 0x7fff, 0x8001}, {0x6de, 0x2, 0x3f, 0x4}, {0x2, 0xfffffbbb, 0x2dd, 0x57a}, {0x0, 0x2, 0xff, 0xe7}, {0xd01, 0x8, 0x4, 0xfffffff8}, {0x100, 0x9, 0x8000, 0x20}, {0x4, 0x4, 0xfffffffe, 0x8001}, {0xfffffff7, 0x18, 0x1, 0xeef}, {0x7ff, 0x6, 0x2c851033, 0x9}, {0x4, 0x2, 0x6}, {0x7, 0x3, 0x3, 0x2}, {0x3, 0xd1, 0x1, 0x9}, {0x0, 0xb6, 0x1, 0x6}, {0x7, 0x2, 0x6, 0x4}, {0xdc30, 0x7, 0x7fff, 0x1ff}, {0x1, 0x7, 0x7, 0x10001}, {0x10001, 0x9, 0x3, 0x5d5}, {0x0, 0x1, 0x7}, {0x1, 0x1f, 0x4, 0x6}, {0xf6, 0x40, 0x411, 0xffffffff}, {0x4, 0x57f, 0xffff}, {0x7ff, 0x3b6, 0x716}, {0x8, 0x8, 0x4}, {0x3ff, 0x1, 0x1, 0x10001}, {0x9, 0x7016, 0x3, 0x32}, {0x5, 0x7ff, 0xba, 0x9269}, {0x1, 0x8, 0x4, 0xcbb}, {0x6, 0x80000000, 0x8, 0x5}, {0x40, 0x8, 0x80, 0x100}, {0x6, 0x0, 0x8, 0x5}, {0x2, 0x1, 0x1, 0x200}, {0x1, 0x7, 0x10000, 0x6}, {0x6f, 0x4, 0x5, 0x7fff}, {0xf18, 0x81, 0x6, 0x4}, {0xad6b, 0xd64, 0x5, 0x4}, {0x81, 0x4, 0x800, 0x3f}, {0x10001, 0x2, 0x3, 0x24b}, {0x3, 0x4, 0x3, 0xc97e}, {0x6, 0xb1f6, 0x9, 0x5}, {0x8e, 0x800, 0x46, 0xfff}, {0x7fffffff, 0xd4c, 0x7fff, 0x3a62}, {0xfff, 0xffffffff, 0x4, 0xfff}, {0x8, 0xf0f, 0xc83, 0x9}, {0x4, 0x8, 0x3, 0x401}, {0x6, 0xcd4, 0xc0da, 0x7}, {0x101, 0x0, 0x7, 0x8}, {0xa94, 0xffffffff, 0x97, 0xe65c}, {0x101, 0x9, 0x5, 0x200}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x1000, 0x4, 0x4}, {0x31f1, 0x6, 0x38d0, 0x2}, {0x7, 0x800, 0x8001, 0x80000000}, {0x2, 0x80000000, 0x78a, 0x7ff}, {0x0, 0x6, 0xffffffff, 0x401}, {0x72, 0x1, 0x7, 0xfffff5f1}, {0x7, 0x6, 0x8, 0xc8}, {0x9, 0x7, 0x81, 0x80000000}, {0x17d90, 0x6, 0x5, 0x1}, {0x3, 0x80, 0x5, 0xffffd1fa}, {0x205, 0x6, 0x80000001, 0x3}, {0x260, 0x297, 0xa4, 0x9}, {0x2, 0x7, 0x10000, 0x1f}, {0x7, 0x8, 0x8000000, 0xc9}, {0x12, 0x7ff, 0xffff, 0x200}, {0x7, 0x400, 0x8, 0x1}, {0x0, 0x1, 0x800, 0x401}, {0x1ed44166, 0x3, 0x10001, 0x3}, {0x3f, 0x7, 0x100, 0xffffff00}, {0x3, 0x80, 0x2, 0xfffffe00}, {0x10001, 0x0, 0x5, 0x3}, {0xc8, 0x1, 0x8, 0x7fff}, {0x800, 0x10000, 0x1}, {0xf29, 0x9, 0xff, 0x7f}, {0x81, 0x5, 0x4, 0x4}, {0x42, 0x34, 0x370d, 0x81}, {0x896, 0x3, 0x0, 0x7}, {0x8001, 0x7e0000, 0x5, 0x80000001}, {0xfb79, 0x1, 0xffff0000, 0x5}, {0x1, 0xf419, 0x81, 0x10000}, {0x4, 0xfffffffe, 0x1ff, 0xff}, {0x1, 0x3, 0x6, 0xffff}, {0x7fff, 0x3}, {0x6e2d5d81, 0x9, 0x8, 0x4010000}, {0x6, 0xf3, 0x1, 0xdc51}, {0x2, 0x4, 0x7, 0x800}, {0x81, 0x1, 0x9, 0x1}, {0xfff, 0x10000, 0x5, 0x1eb}, {0x401, 0x6, 0x9, 0x7}, {0x1, 0x67, 0x0, 0x10000}, {0x20, 0xd447, 0x2, 0xa7}, {0x40, 0x4, 0x20}, {0xffffffff, 0x1b8, 0xa36, 0x2}, {0x1f, 0x7, 0x6, 0x8000}, {0x4, 0x0, 0xb2a7, 0x7}, {0x80000001, 0x4, 0x2}, {0x8, 0x81, 0x10000, 0xde}, {0x0, 0x10000, 0x8, 0xeea}, {0x0, 0x20, 0x7, 0x40}, {0x4, 0x3, 0xa2ab, 0x88}, {0x101, 0x3, 0x200, 0x40}, {0xff, 0xffff, 0x0, 0x5}, {0x3f, 0x5, 0x8000, 0x9}, {0x10004, 0x0, 0x8, 0x7}, {0x7ff, 0xff, 0xb80, 0x3}, {0x81, 0x25, 0x3, 0x9}, {0x40, 0x0, 0x4, 0x5}, {0x756, 0x5, 0x7, 0xfff}, {0x2926, 0x2, 0x0, 0x1}, {0xfffffff9, 0x81, 0x8, 0x7}, {0x7ff, 0x9, 0x80, 0x7}, {0x2, 0x1000, 0x4, 0x3}, {0x3, 0x0, 0x84, 0x5}, {0x102, 0x800, 0xaaea, 0x20}, {0x40, 0x2, 0x45d, 0x3}, {0xffffff7f, 0x7fff, 0x2, 0x8}, {0x7f, 0x9, 0x772, 0x8}, {0x9, 0xffffffff, 0x7fff}, {0x2, 0x8, 0x10000003, 0x4}, {0x4, 0xfffffff7, 0x0, 0x80}, {0x2, 0x3, 0xfffffff7, 0x1bf6}, {0x3, 0x3, 0x8, 0x7fff}, {0xb455, 0x8, 0x2}, {0x849, 0x100, 0x3, 0x5}, {0x2, 0x0, 0x10001, 0x10001}, {0x0, 0x4, 0x6, 0xff}, {0x8, 0x1f4, 0x8, 0x1}, {0x26a9, 0x60000000, 0x8, 0x4}, {0xf9, 0x6, 0x81, 0x18000000}, {0x6d1b, 0xffffffff, 0x5, 0x7}, {0xb34, 0x1ff, 0x400, 0x7}, {0x7ff, 0x40, 0x9, 0x8000}, {0x1, 0x2b, 0x8, 0xfffffffb}, {0x0, 0x2ed, 0x800, 0x7}, {0x5, 0xffffffff, 0xa87, 0x3}, {0x8, 0x1, 0x400, 0xffffd7e2}, {0x12a, 0x1, 0x7, 0x5}, {0x3, 0x101, 0x0, 0x7fff}, {0xc6, 0x6, 0x4, 0x4}, {0x2, 0x20000000, 0xcf73, 0x6}, {0xffffffff, 0x7ff, 0x200}, {0x9, 0x8, 0x1, 0x8}, {0x0, 0x200, 0x4, 0x7}, {0x10000000, 0x6, 0x400}, {0x5c96, 0x1f, 0x5, 0x40}, {0x5, 0xfffffffe, 0x7fffffff, 0x20}, {0xde, 0xd7, 0x401, 0x2}, {0x101, 0x5, 0xfffffff9, 0x4}, {0x6, 0xbc974896, 0x48d, 0x4}, {0x6, 0xa61c, 0x2, 0x7}, {0x7, 0x0, 0x4, 0x6}, {0x6, 0x0, 0x9, 0x81}, {0x8, 0x3, 0x5, 0x2}, {0x8, 0x800, 0x2, 0x7}, {0x52d1, 0x5, 0x3, 0x3ff}, {0x5, 0x5, 0xcb6, 0x6}, {0x9b, 0x7, 0x3ec, 0x10000}, {0x200, 0x7, 0x4, 0x7}, {0x4135, 0x9, 0x7f, 0x9}, {0x7ff, 0xbe, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x20}, {0x7, 0xfffffffb, 0x8000, 0x9}, {0x2, 0xd77, 0xa429, 0x4}, {0x8, 0x5, 0x19a, 0x767}, {0xe9, 0x20, 0x278, 0xfffffe01}, {0x6, 0x95, 0xbf88, 0x8001}, {0x4, 0x40, 0xff, 0xfffffff9}, {0x6, 0x8, 0x7, 0x7fff}, {0x7ff, 0x21, 0x8000, 0x7}, {0x854, 0x400, 0x1f, 0x3}, {0x0, 0x1, 0x100, 0x5}, {0xe568, 0xec, 0x1, 0xffff7938}, {0x3, 0x3f, 0x4, 0x6}, {0x0, 0x6, 0x4, 0x4d4e4a0a}, {0x6, 0x1000, 0x1ff, 0x3f}, {0x5, 0x2c7, 0x76, 0x1}, {0xfffffff7, 0x1, 0x0, 0x1}, {0x8, 0x5, 0xcf7d, 0x7}, {0x2, 0x7, 0x0, 0xf4a}, {0x6, 0x4, 0x40100000, 0x7}, {0x3, 0x4, 0xb3ff}, {0x7, 0x65, 0x423b, 0x5}, {0x8273, 0xf16, 0x158, 0x80000001}, {0x9, 0x0, 0x5, 0x9ffe}, {0x8, 0x1, 0x80, 0x81}, {0x400, 0x3, 0x7, 0x8001}, {0x3, 0x80, 0xe3b9, 0x4}, {0x7b2, 0x2, 0xa4, 0x20}, {0x8001, 0x0, 0x6, 0x8}, {0x9b, 0x0, 0x8, 0x8}, {0xffff, 0x2, 0x7, 0x4}, {0x7f, 0x30, 0x5, 0x5e9}, {0x3ff, 0xff, 0x2, 0x9}, {0x81, 0x40, 0xedc, 0x1000}, {0x1ff, 0x1, 0xd0, 0x401}, {0x9, 0x5704ca51, 0x100, 0xef}, {0x1, 0x3, 0x100, 0x7}, {0x5, 0x9, 0x9, 0x1}, {0xbe5, 0x0, 0x9, 0x200}, {0x80000000, 0x8001, 0x10000, 0x101}, {0x6, 0x8, 0x1, 0x80000001}, {0xb2, 0x7228, 0x9, 0x40}, {0x9, 0x81, 0x93, 0x9}, {0x9, 0x7, 0x6, 0x2}, {0x4000, 0x8, 0xd67, 0x1}, {0xfffffffb, 0x656, 0x5d9, 0x7}, {0x3, 0xd4, 0x6, 0x9}, {0x80, 0x1, 0x3f, 0x3}, {0x3, 0xfffffe00, 0x6, 0x9}, {0xffff, 0x80000001, 0x40, 0x80000000}, {0x7, 0x1, 0x7, 0x2}, {0x1f, 0x99, 0xffffffff, 0x7d29}, {0x8, 0x4, 0xff, 0x5}, {0x3, 0x8, 0xfffffff8, 0x6}, {0x404, 0x3, 0x1, 0x3ff}, {0x6, 0xffff, 0xfffffff9, 0x4}, {0x5, 0x0, 0x80000000, 0x400}, {0x5, 0xf17, 0x1, 0x9}, {0x4435, 0x7, 0x4, 0x9}, {0x4, 0x3be, 0x401, 0x6}, {0x80000001, 0x0, 0x3, 0x7ff}, {0x101, 0x9c2, 0x5, 0x1000}, {0x2, 0x9, 0x2, 0x1ff}, {0x8000, 0x200, 0x4800000, 0xfff}, {0x5, 0x4, 0x1, 0x7}, {0xe326, 0x1, 0x2, 0x1}, {0x6, 0x9, 0x4, 0x2}, {0x0, 0x4, 0x6, 0x3ff}, {0x4, 0x8, 0x5, 0x6}, {0x6, 0x7fffffff, 0x3f, 0x6}, {0x401, 0x7f, 0x3, 0xfffffffd}, {0x0, 0x8, 0x3, 0xf978}, {0x1f, 0x100, 0x7}, {0x6, 0x3, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x101}, {0x4, 0x8, 0x7}, {0x1000, 0x1000, 0x3, 0x3f}, {0x3, 0x9, 0x9, 0x2a89e679}, {0xae, 0x1, 0x5, 0x6}, {0x1, 0x9, 0x9, 0x7fff}, {0x5, 0x4, 0x1, 0xfffffff7}, {0xa6, 0x5, 0x9f, 0x2}, {0x9, 0x20, 0xc6, 0x4}, {0x4, 0x6, 0xff, 0x9}, {0x7, 0x7f41, 0x3, 0x8000}, {0x9, 0x6, 0x400, 0xebb}, {0x80000000, 0xfffffff7, 0x3ff, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x2, 0xffffffff, 0x5}, {0x7fff, 0x635, 0x7fffffff, 0x1ff}, {0x5, 0x8d, 0x1, 0x6}, {0xa9, 0x6, 0x7ff, 0x1}, {0xc000000, 0x3, 0x4, 0x2}, {0x1, 0x6, 0x80000001, 0x6}, {0x42, 0xffffffff, 0x5, 0x2e}, {0x3ff, 0x69f, 0x1, 0x6}, {0x5, 0x942a, 0x8, 0x8352}, {0x346eb548, 0x4d07, 0x100, 0x401}, {0xffff, 0x4, 0x1, 0xfff}, {0xfffffff9, 0x7, 0x6, 0x60bd}, {0x136e, 0x1, 0xd0df, 0x400}, {0x3, 0x7c000000, 0x2a3a, 0x200}, {0x9, 0x40, 0x200, 0x81}, {0x2, 0x8, 0xb9c, 0x7fffffff}, {0x2, 0x2717, 0x4, 0x5}, {0x2, 0x651, 0x5, 0x7}, {0x69f, 0xaac3, 0x8, 0x7ff}, {0x100, 0x3f, 0x6, 0xfffffffc}, {0xfffeffff, 0x1, 0x9, 0x7}, {0x3f89, 0x1, 0x0, 0x6}, {0xb02, 0x7f, 0x3a4, 0x1}, {0x401, 0x1ff, 0x9, 0x3}, {0x7, 0xffffffff, 0x7, 0x6}, {0x93, 0x7fff, 0x7, 0x8}, {0x4, 0x3, 0x2, 0x1ff}, {0x1, 0x9b65, 0xef, 0x2a36}, {0x2, 0x1, 0x4, 0x7ff}, {0x8, 0x2, 0x80000000, 0x2}, {0x80000001, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x9, 0xd2eb}, {0x0, 0x2, 0x8, 0x4}, {0x6, 0x4, 0x9, 0x9}, {0x3, 0x0, 0xfd7, 0x7}, {0x9bd, 0xffffffff, 0x2083, 0x101}, {0x8, 0xf40, 0x7, 0x5}, {0x4, 0x8, 0x3f, 0x4}, {0x0, 0x94b4, 0x80000001, 0xffffffff}, {0x0, 0x7f, 0x2c5, 0x20}, {0x4, 0x1, 0x6, 0x3}, {0xa3d, 0x850, 0xfffffff7, 0x8}, {0x81, 0x82e, 0x7, 0x2}, {0x6a5b47c2, 0x92a3d482, 0x7, 0x1}, {0x8791, 0x1, 0xfffffffc, 0xd4d}, {0x0, 0x2, 0x200, 0x1}, {0x8, 0x8, 0x5, 0x63de}, {0x800, 0x1, 0x4, 0x8}, {0x6, 0x620, 0x1d0b4854, 0xf42a}, {0x4, 0x101, 0xfffffff8, 0x824c}, {0x7, 0x0, 0x6}, {0x1ff, 0x7fff, 0x200, 0x5}, {0x81, 0x8, 0x4}, {0x2, 0x7, 0x800, 0x2}, {0xebd, 0xfffffffb, 0x7ff, 0x7}, {0xfc, 0xd3de, 0xb91, 0x796}, {0x6, 0x2, 0x2, 0x5}, {0x6, 0x445, 0x17, 0x6}, {0x0, 0x3, 0x10001, 0x7f}, {0x7, 0x8000, 0x2, 0x7}, {0x3, 0x0, 0x10001, 0x8}, {0xca, 0x4, 0x81b6, 0x6}, {0x8, 0x7, 0x75c}, {0x3, 0x5, 0x1, 0x3}, {0x10001, 0x81, 0x1000, 0x8}, {0x75d71962, 0x8, 0x8, 0x9}, {0x3, 0x5, 0x3f, 0x3}, {0x7, 0x400, 0x9, 0x7}, {0x400, 0x0, 0xfffffffc, 0x2}, {0x80000000, 0x5, 0x0, 0x12}, {0x189, 0x1, 0x80000001, 0x9}, {0xa0, 0x87, 0x3, 0x3ff}, {0x2, 0xffffffff, 0x0, 0x4d}, {0x6, 0x80000001, 0x1000, 0x8}, {0x2, 0x8, 0x8, 0x100}, {0x7278, 0x9ada, 0x9, 0x9}, {0x7, 0x0, 0xfffff000, 0x8db4}, {0x2, 0x5, 0xfff}, {0x5, 0x8001, 0x81, 0x9}, {0x0, 0x83, 0x7}, {0x80, 0x80, 0x1f, 0x8}, {0x2, 0x6, 0x7, 0x200}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0xaf41, 0x6, 0x3f}, {0x0, 0x3, 0xf1, 0xb9}, {0x0, 0x5a, 0x3, 0x3}, {0x8000, 0x81, 0x2, 0x22}, {0x0, 0xe5, 0x7, 0x8}, {0x7fff, 0xf85, 0x7fffffff}, {0x6, 0x1, 0x1, 0x3}, {0x9, 0x6, 0x1f, 0xd1}, {0x1f, 0x3, 0x7c000000, 0x5}, {0x2, 0x80000000, 0x9b, 0x1}, {0x5, 0x7, 0xffff, 0x78}, {0x8, 0x3, 0x7ff, 0xff}, {0x7fffffff, 0x8000, 0x7, 0x2}, {0x101, 0x1, 0x3ff, 0xccc3}, {0x5, 0x400, 0x7, 0xfff}, {0x8, 0x101, 0xfffffffe, 0x1}, {0x200, 0xfffff972, 0x148, 0x8}, {0xffffffff, 0x7fff, 0x7, 0x9}, {0x5f, 0x800, 0xef13, 0x1f}, {0x5d, 0x3, 0x10001, 0x5}, {0x4, 0x10000000, 0x7, 0x630}, {0x4, 0x9, 0x969, 0x2}, {0x36a2b83, 0x8000, 0x1, 0x8001}, {0x4, 0x1e4, 0x8001, 0x40}, {0x576e, 0x3, 0x7ff, 0x67}, {0xff, 0x52, 0x8, 0x2}, {0x2, 0x101, 0xfff, 0x80}, {0x5, 0x5, 0x6, 0x81}, {0x2, 0x70, 0xbd, 0x40}, {0x1, 0xfffffff9, 0x8, 0x3}, {0x9, 0xbdc, 0x0, 0x162}, {0x8, 0x7, 0xee5, 0x10001}, {0x2, 0x2, 0x2, 0x800}, {0x10001, 0x1dc4e23e, 0x80000001, 0x4d8}, {0x1c00000, 0xb0b9, 0x816, 0x7}, {0x20, 0x1, 0x22, 0x7}, {0x200, 0x8, 0x7, 0x2f1}, {0x7ff, 0x0, 0x9, 0x7}, {0x1000, 0x9, 0x627, 0x3f}, {0x7fffffff, 0x4, 0xac3d, 0x1}, {0x40, 0x4c51, 0x8, 0x9}, {0x744, 0x5, 0x9, 0x9}, {0x5, 0x7, 0x1000, 0x100}, {0x2, 0x9, 0x7ff, 0x2}, {0x1, 0xe7, 0x7fffffff, 0x1}, {0x101, 0xb, 0x0, 0xbb}, {0x1, 0x3, 0x1ff, 0x101}, {0x6, 0xfffff00d, 0x2a8, 0x3}, {0x40, 0x8d3, 0x8, 0x7}, {0x10001, 0x117, 0x1000000, 0x6}, {0x8, 0x1, 0x3f, 0x8}, {0x30, 0x5, 0x5, 0x6}, {0x0, 0xffffffff, 0x6, 0x1}, {0x2, 0x8001, 0x800, 0x5bb}, {0x400, 0x1, 0x7fff, 0x800}, {0xbbf3, 0x1, 0x7fffffff, 0x40}, {0xfffffffe, 0x400, 0x401, 0x2}, {0x400, 0x6, 0x357, 0x7ff}, {0x1, 0x83fb, 0x3, 0xe3a}, {0x6, 0x973, 0x685, 0x200}, {0x10000000, 0x1, 0x100, 0x5}, {0x3, 0xfffffffc, 0x0, 0x8001}, {0x1f, 0x6, 0x4, 0x7fffffff}, {0x8, 0x0, 0x1f, 0x3f}, {0x0, 0x81, 0xffffffff, 0x1000}, {0x9, 0xf4, 0x9, 0x4}, {0x2, 0x10000, 0x1800, 0x1}, {0x2, 0x9, 0x9, 0x2}, {0x81, 0x200, 0x6, 0x400}, {0x1, 0xeee, 0x40, 0x7}, {0x1, 0x6, 0x0, 0x2}, {0x4, 0x8, 0x0, 0x5}, {0x8, 0x22d, 0xfffffffb, 0x5}, {0x85, 0x1, 0x5, 0x4}, {0x3, 0x7479, 0x7ff, 0x8}, {0x80, 0xfff, 0xfffffff9, 0x3ff}, {0x1f, 0x5, 0x10001, 0x8}, {0x1, 0x5, 0x6, 0x7fff}, {0x20, 0x7, 0x400, 0x2}, {0x81, 0x6, 0x5, 0x5}, {0x4, 0x6, 0x0, 0x79c}, {0x10000, 0x8, 0x3, 0x2}, {0x2, 0x7, 0x3, 0x9}, {0x6, 0xffff9a51, 0x32a}, {0x7, 0x1ff, 0x6, 0x46}, {0x9f04, 0x0, 0x7fffffff, 0x7}, {0x800, 0x57, 0x0, 0xffffb493}, {0x3, 0x9, 0x9, 0x2}, {0x1, 0x6054, 0xfffffff7, 0x3}, {0x2, 0x7, 0x4, 0x81}, {0x0, 0x2, 0x7fffffff, 0x6}, {0xd, 0x8b3a, 0x7, 0x1}, {0x1, 0x4, 0x100, 0x1}, {0xec1, 0x2, 0x3, 0x1800}, {0x30c8, 0x4, 0x1, 0x7}, {0x200, 0x8af0, 0x7ff, 0x18ac}, {0x23, 0x2, 0x9, 0xb4}, {0xffffffff, 0x7, 0x1, 0x3f}, {0x6, 0x5, 0x33cb, 0xa}, {0x7, 0x40, 0x8, 0x7ff}, {0x7, 0x9, 0x5, 0x1f}, {0x7, 0x3ff, 0x7, 0xfffffffb}, {0x8, 0xd9, 0x4, 0xd6}, {0x4, 0x5, 0x6, 0x4}, {0x3, 0x100, 0x71, 0x6}, {0x640, 0x10001, 0x9, 0x400}, {0x87, 0x6, 0x80000000, 0x8}, {0x1f8b, 0x0, 0x200, 0x6}, {0x4, 0x10001, 0x4b, 0xa4c}, {0x0, 0xff, 0x800, 0x1}, {0x2, 0x8, 0x8f2, 0x7ff}, {0x8000, 0x80000001, 0xffff2bf8, 0x9fa9}, {0x6, 0xffff, 0x81, 0x3259d18d}, {0x1000, 0xf8d5, 0x7, 0x401}, {0x10001, 0x100, 0x0, 0x9}, {0x4, 0x1, 0x6, 0x1}, {0x6, 0x7fff, 0xfffffff5, 0x4369}, {0x9, 0x0, 0x7, 0x40}, {0x8, 0x1, 0x9, 0x3f}, {0x3ff, 0x5, 0x8001, 0x92bd}, {0x7, 0x6, 0x1, 0x2}, {0x1, 0x0, 0x20, 0x6}, {0x9, 0x1, 0x8, 0x200}, {0x80, 0xffffffff, 0x6, 0x7}, {0x3, 0x7, 0x8, 0x7f}, {0x1, 0x893, 0xffffffff, 0x7}, {0xfffffff7, 0x5, 0xa02a, 0x2}, {0x0, 0x880, 0x8000, 0x5}, {0x3, 0x7, 0x101, 0x401}, {0x4, 0x3ff, 0x7}, {0x6, 0x3, 0xfffffff9, 0x7ff}, {0xc22, 0x6f9, 0x4, 0x8001}, {0x1, 0x1, 0x4, 0x7fff}, {0x7, 0x2, 0x9}, {0x1f, 0x9, 0x49c, 0x21}, {0x0, 0x4, 0xffff}, {0x6, 0x4c47, 0x4, 0x80}, {0x8, 0x8, 0x2, 0x1ff}, {0x80, 0x8, 0x81, 0x400}, {0x100, 0x36, 0x7, 0x5f37}, {0x0, 0x1ff, 0x81, 0x101}, {0x4, 0x9b, 0x3, 0x6}, {0x8, 0x606e, 0x4, 0xd4c4}, {0x5, 0x1, 0x6, 0x400}, {0x9, 0x2, 0x20000000, 0x8}, {0x79, 0x1, 0xffffffff, 0x2}, {0x8, 0x0, 0x6, 0x5}, {0x4, 0x0, 0x7b4, 0x7ff}, {0x6, 0x2, 0xff, 0x2}, {0x3, 0x21, 0x7, 0x3}, {0x2, 0x0, 0x0, 0x5}, {0x7, 0x8, 0x80000000, 0x8}, {0x9696, 0x0, 0x4, 0x6}, {0x3ff, 0x401, 0x400, 0x3ff}, {0x2, 0x5, 0x9, 0xfff}, {0x4, 0x7f, 0x80000001, 0xe2}, {0x0, 0xd8b, 0x3, 0x81}, {0x8, 0xbe, 0x8, 0x800}, {0x4b4, 0x20, 0x1, 0x5}, {0x2, 0xffff, 0x6, 0x79b11c1b}, {0x0, 0x4, 0x56, 0x8}, {0x0, 0xffff0000, 0x4, 0x62}, {0x2, 0x6, 0x2, 0x4}, {0xffff, 0x1, 0x40a, 0x8}, {0x81, 0x2, 0xa1, 0x80000000}, {0x7, 0x7, 0xd9c, 0x4}, {0x7, 0x9, 0x1c45}, {0x233, 0x0, 0x0, 0xff}, {0x20002000, 0x3, 0x3, 0x2ac}, {0x8, 0x109, 0x6, 0xb7f0}, {0x7, 0x3, 0x5, 0x200}, {0x3, 0x6, 0x6997e228, 0x2}, {0xfffffff7, 0xfff, 0x5, 0x7}, {0xaea6, 0x8001, 0x3, 0x800}, {0x3, 0xf3f, 0x6, 0x3ff}, {0x9, 0x0, 0x1, 0xc}, {0x0, 0x7, 0x3b000000}, {0x6, 0x6, 0xfffffff7, 0x92}, {0x5, 0x9, 0xffff8000, 0xfffffffa}, {0x3, 0x3, 0xdd, 0x8000}, {0xfffffffa, 0x80000001, 0xdb, 0xffffffff}, {0x4, 0x2, 0x2, 0xfffffff9}, {0x5, 0x22a, 0x800, 0x8001}, {0x4, 0x1ffe0, 0x800, 0xe}, {0x6, 0x4, 0x101, 0x2}]}, 0x21e8) 09:15:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00./file0\x00']) 09:15:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000002300)) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000002340), 0x7, 0x400) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r5, 0x2}}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=@ret_submit={{0x3, 0x10001, 0x0, 0x1, 0x4}, 0x8, 0xe8, 0xed, 0x20d, 0xff4, 0x0, "0bb813f7522ea068525031d815ff1f6fc24b94e464d81ee17c0b500ee3da911aa0ccb9829b52dd14705a233ba689abb683612421774eb3dc93667b96338bbadeeff7c8ad9a294a0ef2b9c331d92c76dff95fd5493f210b526cd1d0f0f3f07837c146ed358ca9f7249fddee94b59febb5f1f6f0c79194d6342aeedc78fcb7f220878e3e5cc2ab9afa65429557302b6f2ba182999f694a13a1790e30c16141e61b9130fcc9b248ca1287e4aff9f694a0c851fd74a6d527631b56fcf35dbe5ae9847139c87f1231c4f276ef556d9794bd7144923eac1793195665e52e4e98035ef0e259375f6104e8ff", [{0x5, 0x0, 0x1, 0xfd2}, {0x100, 0x8, 0x7}, {0xd5, 0xfffffffa, 0x2, 0x81}, {0x10001, 0x687ade9b, 0x1, 0x5}, {0xe8f, 0x101, 0x8}, {0x7, 0x8, 0x2, 0x80000000}, {0x3, 0x6, 0x479, 0xff}, {0x5759, 0x8000, 0x1000, 0xfff}, {0x8796, 0xffffffff, 0x8, 0x6}, {0x5, 0x80000000, 0x5, 0x9}, {0xffffffff, 0x3252, 0x7fff, 0x8001}, {0x6de, 0x2, 0x3f, 0x4}, {0x2, 0xfffffbbb, 0x2dd, 0x57a}, {0x0, 0x2, 0xff, 0xe7}, {0xd01, 0x8, 0x4, 0xfffffff8}, {0x100, 0x9, 0x8000, 0x20}, {0x4, 0x4, 0xfffffffe, 0x8001}, {0xfffffff7, 0x18, 0x1, 0xeef}, {0x7ff, 0x6, 0x2c851033, 0x9}, {0x4, 0x2, 0x6}, {0x7, 0x3, 0x3, 0x2}, {0x3, 0xd1, 0x1, 0x9}, {0x0, 0xb6, 0x1, 0x6}, {0x7, 0x2, 0x6, 0x4}, {0xdc30, 0x7, 0x7fff, 0x1ff}, {0x1, 0x7, 0x7, 0x10001}, {0x10001, 0x9, 0x3, 0x5d5}, {0x0, 0x1, 0x7}, {0x1, 0x1f, 0x4, 0x6}, {0xf6, 0x40, 0x411, 0xffffffff}, {0x4, 0x57f, 0xffff}, {0x7ff, 0x3b6, 0x716}, {0x8, 0x8, 0x4}, {0x3ff, 0x1, 0x1, 0x10001}, {0x9, 0x7016, 0x3, 0x32}, {0x5, 0x7ff, 0xba, 0x9269}, {0x1, 0x8, 0x4, 0xcbb}, {0x6, 0x80000000, 0x8, 0x5}, {0x40, 0x8, 0x80, 0x100}, {0x6, 0x0, 0x8, 0x5}, {0x2, 0x1, 0x1, 0x200}, {0x1, 0x7, 0x10000, 0x6}, {0x6f, 0x4, 0x5, 0x7fff}, {0xf18, 0x81, 0x6, 0x4}, {0xad6b, 0xd64, 0x5, 0x4}, {0x81, 0x4, 0x800, 0x3f}, {0x10001, 0x2, 0x3, 0x24b}, {0x3, 0x4, 0x3, 0xc97e}, {0x6, 0xb1f6, 0x9, 0x5}, {0x8e, 0x800, 0x46, 0xfff}, {0x7fffffff, 0xd4c, 0x7fff, 0x3a62}, {0xfff, 0xffffffff, 0x4, 0xfff}, {0x8, 0xf0f, 0xc83, 0x9}, {0x4, 0x8, 0x3, 0x401}, {0x6, 0xcd4, 0xc0da, 0x7}, {0x101, 0x0, 0x7, 0x8}, {0xa94, 0xffffffff, 0x97, 0xe65c}, {0x101, 0x9, 0x5, 0x200}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x1000, 0x4, 0x4}, {0x31f1, 0x6, 0x38d0, 0x2}, {0x7, 0x800, 0x8001, 0x80000000}, {0x2, 0x80000000, 0x78a, 0x7ff}, {0x0, 0x6, 0xffffffff, 0x401}, {0x72, 0x1, 0x7, 0xfffff5f1}, {0x7, 0x6, 0x8, 0xc8}, {0x9, 0x7, 0x81, 0x80000000}, {0x17d90, 0x6, 0x5, 0x1}, {0x3, 0x80, 0x5, 0xffffd1fa}, {0x205, 0x6, 0x80000001, 0x3}, {0x260, 0x297, 0xa4, 0x9}, {0x2, 0x7, 0x10000, 0x1f}, {0x7, 0x8, 0x8000000, 0xc9}, {0x12, 0x7ff, 0xffff, 0x200}, {0x7, 0x400, 0x8, 0x1}, {0x0, 0x1, 0x800, 0x401}, {0x1ed44166, 0x3, 0x10001, 0x3}, {0x3f, 0x7, 0x100, 0xffffff00}, {0x3, 0x80, 0x2, 0xfffffe00}, {0x10001, 0x0, 0x5, 0x3}, {0xc8, 0x1, 0x8, 0x7fff}, {0x800, 0x10000, 0x1}, {0xf29, 0x9, 0xff, 0x7f}, {0x81, 0x5, 0x4, 0x4}, {0x42, 0x34, 0x370d, 0x81}, {0x896, 0x3, 0x0, 0x7}, {0x8001, 0x7e0000, 0x5, 0x80000001}, {0xfb79, 0x1, 0xffff0000, 0x5}, {0x1, 0xf419, 0x81, 0x10000}, {0x4, 0xfffffffe, 0x1ff, 0xff}, {0x1, 0x3, 0x6, 0xffff}, {0x7fff, 0x3}, {0x6e2d5d81, 0x9, 0x8, 0x4010000}, {0x6, 0xf3, 0x1, 0xdc51}, {0x2, 0x4, 0x7, 0x800}, {0x81, 0x1, 0x9, 0x1}, {0xfff, 0x10000, 0x5, 0x1eb}, {0x401, 0x6, 0x9, 0x7}, {0x1, 0x67, 0x0, 0x10000}, {0x20, 0xd447, 0x2, 0xa7}, {0x40, 0x4, 0x20}, {0xffffffff, 0x1b8, 0xa36, 0x2}, {0x1f, 0x7, 0x6, 0x8000}, {0x4, 0x0, 0xb2a7, 0x7}, {0x80000001, 0x4, 0x2}, {0x8, 0x81, 0x10000, 0xde}, {0x0, 0x10000, 0x8, 0xeea}, {0x0, 0x20, 0x7, 0x40}, {0x4, 0x3, 0xa2ab, 0x88}, {0x101, 0x3, 0x200, 0x40}, {0xff, 0xffff, 0x0, 0x5}, {0x3f, 0x5, 0x8000, 0x9}, {0x10004, 0x0, 0x8, 0x7}, {0x7ff, 0xff, 0xb80, 0x3}, {0x81, 0x25, 0x3, 0x9}, {0x40, 0x0, 0x4, 0x5}, {0x756, 0x5, 0x7, 0xfff}, {0x2926, 0x2, 0x0, 0x1}, {0xfffffff9, 0x81, 0x8, 0x7}, {0x7ff, 0x9, 0x80, 0x7}, {0x2, 0x1000, 0x4, 0x3}, {0x3, 0x0, 0x84, 0x5}, {0x102, 0x800, 0xaaea, 0x20}, {0x40, 0x2, 0x45d, 0x3}, {0xffffff7f, 0x7fff, 0x2, 0x8}, {0x7f, 0x9, 0x772, 0x8}, {0x9, 0xffffffff, 0x7fff}, {0x2, 0x8, 0x10000003, 0x4}, {0x4, 0xfffffff7, 0x0, 0x80}, {0x2, 0x3, 0xfffffff7, 0x1bf6}, {0x3, 0x3, 0x8, 0x7fff}, {0xb455, 0x8, 0x2}, {0x849, 0x100, 0x3, 0x5}, {0x2, 0x0, 0x10001, 0x10001}, {0x0, 0x4, 0x6, 0xff}, {0x8, 0x1f4, 0x8, 0x1}, {0x26a9, 0x60000000, 0x8, 0x4}, {0xf9, 0x6, 0x81, 0x18000000}, {0x6d1b, 0xffffffff, 0x5, 0x7}, {0xb34, 0x1ff, 0x400, 0x7}, {0x7ff, 0x40, 0x9, 0x8000}, {0x1, 0x2b, 0x8, 0xfffffffb}, {0x0, 0x2ed, 0x800, 0x7}, {0x5, 0xffffffff, 0xa87, 0x3}, {0x8, 0x1, 0x400, 0xffffd7e2}, {0x12a, 0x1, 0x7, 0x5}, {0x3, 0x101, 0x0, 0x7fff}, {0xc6, 0x6, 0x4, 0x4}, {0x2, 0x20000000, 0xcf73, 0x6}, {0xffffffff, 0x7ff, 0x200}, {0x9, 0x8, 0x1, 0x8}, {0x0, 0x200, 0x4, 0x7}, {0x10000000, 0x6, 0x400}, {0x5c96, 0x1f, 0x5, 0x40}, {0x5, 0xfffffffe, 0x7fffffff, 0x20}, {0xde, 0xd7, 0x401, 0x2}, {0x101, 0x5, 0xfffffff9, 0x4}, {0x6, 0xbc974896, 0x48d, 0x4}, {0x6, 0xa61c, 0x2, 0x7}, {0x7, 0x0, 0x4, 0x6}, {0x6, 0x0, 0x9, 0x81}, {0x8, 0x3, 0x5, 0x2}, {0x8, 0x800, 0x2, 0x7}, {0x52d1, 0x5, 0x3, 0x3ff}, {0x5, 0x5, 0xcb6, 0x6}, {0x9b, 0x7, 0x3ec, 0x10000}, {0x200, 0x7, 0x4, 0x7}, {0x4135, 0x9, 0x7f, 0x9}, {0x7ff, 0xbe, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x20}, {0x7, 0xfffffffb, 0x8000, 0x9}, {0x2, 0xd77, 0xa429, 0x4}, {0x8, 0x5, 0x19a, 0x767}, {0xe9, 0x20, 0x278, 0xfffffe01}, {0x6, 0x95, 0xbf88, 0x8001}, {0x4, 0x40, 0xff, 0xfffffff9}, {0x6, 0x8, 0x7, 0x7fff}, {0x7ff, 0x21, 0x8000, 0x7}, {0x854, 0x400, 0x1f, 0x3}, {0x0, 0x1, 0x100, 0x5}, {0xe568, 0xec, 0x1, 0xffff7938}, {0x3, 0x3f, 0x4, 0x6}, {0x0, 0x6, 0x4, 0x4d4e4a0a}, {0x6, 0x1000, 0x1ff, 0x3f}, {0x5, 0x2c7, 0x76, 0x1}, {0xfffffff7, 0x1, 0x0, 0x1}, {0x8, 0x5, 0xcf7d, 0x7}, {0x2, 0x7, 0x0, 0xf4a}, {0x6, 0x4, 0x40100000, 0x7}, {0x3, 0x4, 0xb3ff}, {0x7, 0x65, 0x423b, 0x5}, {0x8273, 0xf16, 0x158, 0x80000001}, {0x9, 0x0, 0x5, 0x9ffe}, {0x8, 0x1, 0x80, 0x81}, {0x400, 0x3, 0x7, 0x8001}, {0x3, 0x80, 0xe3b9, 0x4}, {0x7b2, 0x2, 0xa4, 0x20}, {0x8001, 0x0, 0x6, 0x8}, {0x9b, 0x0, 0x8, 0x8}, {0xffff, 0x2, 0x7, 0x4}, {0x7f, 0x30, 0x5, 0x5e9}, {0x3ff, 0xff, 0x2, 0x9}, {0x81, 0x40, 0xedc, 0x1000}, {0x1ff, 0x1, 0xd0, 0x401}, {0x9, 0x5704ca51, 0x100, 0xef}, {0x1, 0x3, 0x100, 0x7}, {0x5, 0x9, 0x9, 0x1}, {0xbe5, 0x0, 0x9, 0x200}, {0x80000000, 0x8001, 0x10000, 0x101}, {0x6, 0x8, 0x1, 0x80000001}, {0xb2, 0x7228, 0x9, 0x40}, {0x9, 0x81, 0x93, 0x9}, {0x9, 0x7, 0x6, 0x2}, {0x4000, 0x8, 0xd67, 0x1}, {0xfffffffb, 0x656, 0x5d9, 0x7}, {0x3, 0xd4, 0x6, 0x9}, {0x80, 0x1, 0x3f, 0x3}, {0x3, 0xfffffe00, 0x6, 0x9}, {0xffff, 0x80000001, 0x40, 0x80000000}, {0x7, 0x1, 0x7, 0x2}, {0x1f, 0x99, 0xffffffff, 0x7d29}, {0x8, 0x4, 0xff, 0x5}, {0x3, 0x8, 0xfffffff8, 0x6}, {0x404, 0x3, 0x1, 0x3ff}, {0x6, 0xffff, 0xfffffff9, 0x4}, {0x5, 0x0, 0x80000000, 0x400}, {0x5, 0xf17, 0x1, 0x9}, {0x4435, 0x7, 0x4, 0x9}, {0x4, 0x3be, 0x401, 0x6}, {0x80000001, 0x0, 0x3, 0x7ff}, {0x101, 0x9c2, 0x5, 0x1000}, {0x2, 0x9, 0x2, 0x1ff}, {0x8000, 0x200, 0x4800000, 0xfff}, {0x5, 0x4, 0x1, 0x7}, {0xe326, 0x1, 0x2, 0x1}, {0x6, 0x9, 0x4, 0x2}, {0x0, 0x4, 0x6, 0x3ff}, {0x4, 0x8, 0x5, 0x6}, {0x6, 0x7fffffff, 0x3f, 0x6}, {0x401, 0x7f, 0x3, 0xfffffffd}, {0x0, 0x8, 0x3, 0xf978}, {0x1f, 0x100, 0x7}, {0x6, 0x3, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x101}, {0x4, 0x8, 0x7}, {0x1000, 0x1000, 0x3, 0x3f}, {0x3, 0x9, 0x9, 0x2a89e679}, {0xae, 0x1, 0x5, 0x6}, {0x1, 0x9, 0x9, 0x7fff}, {0x5, 0x4, 0x1, 0xfffffff7}, {0xa6, 0x5, 0x9f, 0x2}, {0x9, 0x20, 0xc6, 0x4}, {0x4, 0x6, 0xff, 0x9}, {0x7, 0x7f41, 0x3, 0x8000}, {0x9, 0x6, 0x400, 0xebb}, {0x80000000, 0xfffffff7, 0x3ff, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x2, 0xffffffff, 0x5}, {0x7fff, 0x635, 0x7fffffff, 0x1ff}, {0x5, 0x8d, 0x1, 0x6}, {0xa9, 0x6, 0x7ff, 0x1}, {0xc000000, 0x3, 0x4, 0x2}, {0x1, 0x6, 0x80000001, 0x6}, {0x42, 0xffffffff, 0x5, 0x2e}, {0x3ff, 0x69f, 0x1, 0x6}, {0x5, 0x942a, 0x8, 0x8352}, {0x346eb548, 0x4d07, 0x100, 0x401}, {0xffff, 0x4, 0x1, 0xfff}, {0xfffffff9, 0x7, 0x6, 0x60bd}, {0x136e, 0x1, 0xd0df, 0x400}, {0x3, 0x7c000000, 0x2a3a, 0x200}, {0x9, 0x40, 0x200, 0x81}, {0x2, 0x8, 0xb9c, 0x7fffffff}, {0x2, 0x2717, 0x4, 0x5}, {0x2, 0x651, 0x5, 0x7}, {0x69f, 0xaac3, 0x8, 0x7ff}, {0x100, 0x3f, 0x6, 0xfffffffc}, {0xfffeffff, 0x1, 0x9, 0x7}, {0x3f89, 0x1, 0x0, 0x6}, {0xb02, 0x7f, 0x3a4, 0x1}, {0x401, 0x1ff, 0x9, 0x3}, {0x7, 0xffffffff, 0x7, 0x6}, {0x93, 0x7fff, 0x7, 0x8}, {0x4, 0x3, 0x2, 0x1ff}, {0x1, 0x9b65, 0xef, 0x2a36}, {0x2, 0x1, 0x4, 0x7ff}, {0x8, 0x2, 0x80000000, 0x2}, {0x80000001, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x9, 0xd2eb}, {0x0, 0x2, 0x8, 0x4}, {0x6, 0x4, 0x9, 0x9}, {0x3, 0x0, 0xfd7, 0x7}, {0x9bd, 0xffffffff, 0x2083, 0x101}, {0x8, 0xf40, 0x7, 0x5}, {0x4, 0x8, 0x3f, 0x4}, {0x0, 0x94b4, 0x80000001, 0xffffffff}, {0x0, 0x7f, 0x2c5, 0x20}, {0x4, 0x1, 0x6, 0x3}, {0xa3d, 0x850, 0xfffffff7, 0x8}, {0x81, 0x82e, 0x7, 0x2}, {0x6a5b47c2, 0x92a3d482, 0x7, 0x1}, {0x8791, 0x1, 0xfffffffc, 0xd4d}, {0x0, 0x2, 0x200, 0x1}, {0x8, 0x8, 0x5, 0x63de}, {0x800, 0x1, 0x4, 0x8}, {0x6, 0x620, 0x1d0b4854, 0xf42a}, {0x4, 0x101, 0xfffffff8, 0x824c}, {0x7, 0x0, 0x6}, {0x1ff, 0x7fff, 0x200, 0x5}, {0x81, 0x8, 0x4}, {0x2, 0x7, 0x800, 0x2}, {0xebd, 0xfffffffb, 0x7ff, 0x7}, {0xfc, 0xd3de, 0xb91, 0x796}, {0x6, 0x2, 0x2, 0x5}, {0x6, 0x445, 0x17, 0x6}, {0x0, 0x3, 0x10001, 0x7f}, {0x7, 0x8000, 0x2, 0x7}, {0x3, 0x0, 0x10001, 0x8}, {0xca, 0x4, 0x81b6, 0x6}, {0x8, 0x7, 0x75c}, {0x3, 0x5, 0x1, 0x3}, {0x10001, 0x81, 0x1000, 0x8}, {0x75d71962, 0x8, 0x8, 0x9}, {0x3, 0x5, 0x3f, 0x3}, {0x7, 0x400, 0x9, 0x7}, {0x400, 0x0, 0xfffffffc, 0x2}, {0x80000000, 0x5, 0x0, 0x12}, {0x189, 0x1, 0x80000001, 0x9}, {0xa0, 0x87, 0x3, 0x3ff}, {0x2, 0xffffffff, 0x0, 0x4d}, {0x6, 0x80000001, 0x1000, 0x8}, {0x2, 0x8, 0x8, 0x100}, {0x7278, 0x9ada, 0x9, 0x9}, {0x7, 0x0, 0xfffff000, 0x8db4}, {0x2, 0x5, 0xfff}, {0x5, 0x8001, 0x81, 0x9}, {0x0, 0x83, 0x7}, {0x80, 0x80, 0x1f, 0x8}, {0x2, 0x6, 0x7, 0x200}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0xaf41, 0x6, 0x3f}, {0x0, 0x3, 0xf1, 0xb9}, {0x0, 0x5a, 0x3, 0x3}, {0x8000, 0x81, 0x2, 0x22}, {0x0, 0xe5, 0x7, 0x8}, {0x7fff, 0xf85, 0x7fffffff}, {0x6, 0x1, 0x1, 0x3}, {0x9, 0x6, 0x1f, 0xd1}, {0x1f, 0x3, 0x7c000000, 0x5}, {0x2, 0x80000000, 0x9b, 0x1}, {0x5, 0x7, 0xffff, 0x78}, {0x8, 0x3, 0x7ff, 0xff}, {0x7fffffff, 0x8000, 0x7, 0x2}, {0x101, 0x1, 0x3ff, 0xccc3}, {0x5, 0x400, 0x7, 0xfff}, {0x8, 0x101, 0xfffffffe, 0x1}, {0x200, 0xfffff972, 0x148, 0x8}, {0xffffffff, 0x7fff, 0x7, 0x9}, {0x5f, 0x800, 0xef13, 0x1f}, {0x5d, 0x3, 0x10001, 0x5}, {0x4, 0x10000000, 0x7, 0x630}, {0x4, 0x9, 0x969, 0x2}, {0x36a2b83, 0x8000, 0x1, 0x8001}, {0x4, 0x1e4, 0x8001, 0x40}, {0x576e, 0x3, 0x7ff, 0x67}, {0xff, 0x52, 0x8, 0x2}, {0x2, 0x101, 0xfff, 0x80}, {0x5, 0x5, 0x6, 0x81}, {0x2, 0x70, 0xbd, 0x40}, {0x1, 0xfffffff9, 0x8, 0x3}, {0x9, 0xbdc, 0x0, 0x162}, {0x8, 0x7, 0xee5, 0x10001}, {0x2, 0x2, 0x2, 0x800}, {0x10001, 0x1dc4e23e, 0x80000001, 0x4d8}, {0x1c00000, 0xb0b9, 0x816, 0x7}, {0x20, 0x1, 0x22, 0x7}, {0x200, 0x8, 0x7, 0x2f1}, {0x7ff, 0x0, 0x9, 0x7}, {0x1000, 0x9, 0x627, 0x3f}, {0x7fffffff, 0x4, 0xac3d, 0x1}, {0x40, 0x4c51, 0x8, 0x9}, {0x744, 0x5, 0x9, 0x9}, {0x5, 0x7, 0x1000, 0x100}, {0x2, 0x9, 0x7ff, 0x2}, {0x1, 0xe7, 0x7fffffff, 0x1}, {0x101, 0xb, 0x0, 0xbb}, {0x1, 0x3, 0x1ff, 0x101}, {0x6, 0xfffff00d, 0x2a8, 0x3}, {0x40, 0x8d3, 0x8, 0x7}, {0x10001, 0x117, 0x1000000, 0x6}, {0x8, 0x1, 0x3f, 0x8}, {0x30, 0x5, 0x5, 0x6}, {0x0, 0xffffffff, 0x6, 0x1}, {0x2, 0x8001, 0x800, 0x5bb}, {0x400, 0x1, 0x7fff, 0x800}, {0xbbf3, 0x1, 0x7fffffff, 0x40}, {0xfffffffe, 0x400, 0x401, 0x2}, {0x400, 0x6, 0x357, 0x7ff}, {0x1, 0x83fb, 0x3, 0xe3a}, {0x6, 0x973, 0x685, 0x200}, {0x10000000, 0x1, 0x100, 0x5}, {0x3, 0xfffffffc, 0x0, 0x8001}, {0x1f, 0x6, 0x4, 0x7fffffff}, {0x8, 0x0, 0x1f, 0x3f}, {0x0, 0x81, 0xffffffff, 0x1000}, {0x9, 0xf4, 0x9, 0x4}, {0x2, 0x10000, 0x1800, 0x1}, {0x2, 0x9, 0x9, 0x2}, {0x81, 0x200, 0x6, 0x400}, {0x1, 0xeee, 0x40, 0x7}, {0x1, 0x6, 0x0, 0x2}, {0x4, 0x8, 0x0, 0x5}, {0x8, 0x22d, 0xfffffffb, 0x5}, {0x85, 0x1, 0x5, 0x4}, {0x3, 0x7479, 0x7ff, 0x8}, {0x80, 0xfff, 0xfffffff9, 0x3ff}, {0x1f, 0x5, 0x10001, 0x8}, {0x1, 0x5, 0x6, 0x7fff}, {0x20, 0x7, 0x400, 0x2}, {0x81, 0x6, 0x5, 0x5}, {0x4, 0x6, 0x0, 0x79c}, {0x10000, 0x8, 0x3, 0x2}, {0x2, 0x7, 0x3, 0x9}, {0x6, 0xffff9a51, 0x32a}, {0x7, 0x1ff, 0x6, 0x46}, {0x9f04, 0x0, 0x7fffffff, 0x7}, {0x800, 0x57, 0x0, 0xffffb493}, {0x3, 0x9, 0x9, 0x2}, {0x1, 0x6054, 0xfffffff7, 0x3}, {0x2, 0x7, 0x4, 0x81}, {0x0, 0x2, 0x7fffffff, 0x6}, {0xd, 0x8b3a, 0x7, 0x1}, {0x1, 0x4, 0x100, 0x1}, {0xec1, 0x2, 0x3, 0x1800}, {0x30c8, 0x4, 0x1, 0x7}, {0x200, 0x8af0, 0x7ff, 0x18ac}, {0x23, 0x2, 0x9, 0xb4}, {0xffffffff, 0x7, 0x1, 0x3f}, {0x6, 0x5, 0x33cb, 0xa}, {0x7, 0x40, 0x8, 0x7ff}, {0x7, 0x9, 0x5, 0x1f}, {0x7, 0x3ff, 0x7, 0xfffffffb}, {0x8, 0xd9, 0x4, 0xd6}, {0x4, 0x5, 0x6, 0x4}, {0x3, 0x100, 0x71, 0x6}, {0x640, 0x10001, 0x9, 0x400}, {0x87, 0x6, 0x80000000, 0x8}, {0x1f8b, 0x0, 0x200, 0x6}, {0x4, 0x10001, 0x4b, 0xa4c}, {0x0, 0xff, 0x800, 0x1}, {0x2, 0x8, 0x8f2, 0x7ff}, {0x8000, 0x80000001, 0xffff2bf8, 0x9fa9}, {0x6, 0xffff, 0x81, 0x3259d18d}, {0x1000, 0xf8d5, 0x7, 0x401}, {0x10001, 0x100, 0x0, 0x9}, {0x4, 0x1, 0x6, 0x1}, {0x6, 0x7fff, 0xfffffff5, 0x4369}, {0x9, 0x0, 0x7, 0x40}, {0x8, 0x1, 0x9, 0x3f}, {0x3ff, 0x5, 0x8001, 0x92bd}, {0x7, 0x6, 0x1, 0x2}, {0x1, 0x0, 0x20, 0x6}, {0x9, 0x1, 0x8, 0x200}, {0x80, 0xffffffff, 0x6, 0x7}, {0x3, 0x7, 0x8, 0x7f}, {0x1, 0x893, 0xffffffff, 0x7}, {0xfffffff7, 0x5, 0xa02a, 0x2}, {0x0, 0x880, 0x8000, 0x5}, {0x3, 0x7, 0x101, 0x401}, {0x4, 0x3ff, 0x7}, {0x6, 0x3, 0xfffffff9, 0x7ff}, {0xc22, 0x6f9, 0x4, 0x8001}, {0x1, 0x1, 0x4, 0x7fff}, {0x7, 0x2, 0x9}, {0x1f, 0x9, 0x49c, 0x21}, {0x0, 0x4, 0xffff}, {0x6, 0x4c47, 0x4, 0x80}, {0x8, 0x8, 0x2, 0x1ff}, {0x80, 0x8, 0x81, 0x400}, {0x100, 0x36, 0x7, 0x5f37}, {0x0, 0x1ff, 0x81, 0x101}, {0x4, 0x9b, 0x3, 0x6}, {0x8, 0x606e, 0x4, 0xd4c4}, {0x5, 0x1, 0x6, 0x400}, {0x9, 0x2, 0x20000000, 0x8}, {0x79, 0x1, 0xffffffff, 0x2}, {0x8, 0x0, 0x6, 0x5}, {0x4, 0x0, 0x7b4, 0x7ff}, {0x6, 0x2, 0xff, 0x2}, {0x3, 0x21, 0x7, 0x3}, {0x2, 0x0, 0x0, 0x5}, {0x7, 0x8, 0x80000000, 0x8}, {0x9696, 0x0, 0x4, 0x6}, {0x3ff, 0x401, 0x400, 0x3ff}, {0x2, 0x5, 0x9, 0xfff}, {0x4, 0x7f, 0x80000001, 0xe2}, {0x0, 0xd8b, 0x3, 0x81}, {0x8, 0xbe, 0x8, 0x800}, {0x4b4, 0x20, 0x1, 0x5}, {0x2, 0xffff, 0x6, 0x79b11c1b}, {0x0, 0x4, 0x56, 0x8}, {0x0, 0xffff0000, 0x4, 0x62}, {0x2, 0x6, 0x2, 0x4}, {0xffff, 0x1, 0x40a, 0x8}, {0x81, 0x2, 0xa1, 0x80000000}, {0x7, 0x7, 0xd9c, 0x4}, {0x7, 0x9, 0x1c45}, {0x233, 0x0, 0x0, 0xff}, {0x20002000, 0x3, 0x3, 0x2ac}, {0x8, 0x109, 0x6, 0xb7f0}, {0x7, 0x3, 0x5, 0x200}, {0x3, 0x6, 0x6997e228, 0x2}, {0xfffffff7, 0xfff, 0x5, 0x7}, {0xaea6, 0x8001, 0x3, 0x800}, {0x3, 0xf3f, 0x6, 0x3ff}, {0x9, 0x0, 0x1, 0xc}, {0x0, 0x7, 0x3b000000}, {0x6, 0x6, 0xfffffff7, 0x92}, {0x5, 0x9, 0xffff8000, 0xfffffffa}, {0x3, 0x3, 0xdd, 0x8000}, {0xfffffffa, 0x80000001, 0xdb, 0xffffffff}, {0x4, 0x2, 0x2, 0xfffffff9}, {0x5, 0x22a, 0x800, 0x8001}, {0x4, 0x1ffe0, 0x800, 0xe}, {0x6, 0x4, 0x101, 0x2}]}, 0x21e8) 09:15:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0xfffbfffd, 0x39555659, 0x1, @stepwise={0x5, 0x80000001, 0xffff, 0xff, 0xe994, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f66696c6530003d7c6f8ec8d564dc4f1d6d29bfbcb40262a90bf13e602a11"]) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x88001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5388cce002c4e61b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r6, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x52}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000011) 09:15:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000002300)) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000002340), 0x7, 0x400) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r5, 0x2}}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=@ret_submit={{0x3, 0x10001, 0x0, 0x1, 0x4}, 0x8, 0xe8, 0xed, 0x20d, 0xff4, 0x0, "0bb813f7522ea068525031d815ff1f6fc24b94e464d81ee17c0b500ee3da911aa0ccb9829b52dd14705a233ba689abb683612421774eb3dc93667b96338bbadeeff7c8ad9a294a0ef2b9c331d92c76dff95fd5493f210b526cd1d0f0f3f07837c146ed358ca9f7249fddee94b59febb5f1f6f0c79194d6342aeedc78fcb7f220878e3e5cc2ab9afa65429557302b6f2ba182999f694a13a1790e30c16141e61b9130fcc9b248ca1287e4aff9f694a0c851fd74a6d527631b56fcf35dbe5ae9847139c87f1231c4f276ef556d9794bd7144923eac1793195665e52e4e98035ef0e259375f6104e8ff", [{0x5, 0x0, 0x1, 0xfd2}, {0x100, 0x8, 0x7}, {0xd5, 0xfffffffa, 0x2, 0x81}, {0x10001, 0x687ade9b, 0x1, 0x5}, {0xe8f, 0x101, 0x8}, {0x7, 0x8, 0x2, 0x80000000}, {0x3, 0x6, 0x479, 0xff}, {0x5759, 0x8000, 0x1000, 0xfff}, {0x8796, 0xffffffff, 0x8, 0x6}, {0x5, 0x80000000, 0x5, 0x9}, {0xffffffff, 0x3252, 0x7fff, 0x8001}, {0x6de, 0x2, 0x3f, 0x4}, {0x2, 0xfffffbbb, 0x2dd, 0x57a}, {0x0, 0x2, 0xff, 0xe7}, {0xd01, 0x8, 0x4, 0xfffffff8}, {0x100, 0x9, 0x8000, 0x20}, {0x4, 0x4, 0xfffffffe, 0x8001}, {0xfffffff7, 0x18, 0x1, 0xeef}, {0x7ff, 0x6, 0x2c851033, 0x9}, {0x4, 0x2, 0x6}, {0x7, 0x3, 0x3, 0x2}, {0x3, 0xd1, 0x1, 0x9}, {0x0, 0xb6, 0x1, 0x6}, {0x7, 0x2, 0x6, 0x4}, {0xdc30, 0x7, 0x7fff, 0x1ff}, {0x1, 0x7, 0x7, 0x10001}, {0x10001, 0x9, 0x3, 0x5d5}, {0x0, 0x1, 0x7}, {0x1, 0x1f, 0x4, 0x6}, {0xf6, 0x40, 0x411, 0xffffffff}, {0x4, 0x57f, 0xffff}, {0x7ff, 0x3b6, 0x716}, {0x8, 0x8, 0x4}, {0x3ff, 0x1, 0x1, 0x10001}, {0x9, 0x7016, 0x3, 0x32}, {0x5, 0x7ff, 0xba, 0x9269}, {0x1, 0x8, 0x4, 0xcbb}, {0x6, 0x80000000, 0x8, 0x5}, {0x40, 0x8, 0x80, 0x100}, {0x6, 0x0, 0x8, 0x5}, {0x2, 0x1, 0x1, 0x200}, {0x1, 0x7, 0x10000, 0x6}, {0x6f, 0x4, 0x5, 0x7fff}, {0xf18, 0x81, 0x6, 0x4}, {0xad6b, 0xd64, 0x5, 0x4}, {0x81, 0x4, 0x800, 0x3f}, {0x10001, 0x2, 0x3, 0x24b}, {0x3, 0x4, 0x3, 0xc97e}, {0x6, 0xb1f6, 0x9, 0x5}, {0x8e, 0x800, 0x46, 0xfff}, {0x7fffffff, 0xd4c, 0x7fff, 0x3a62}, {0xfff, 0xffffffff, 0x4, 0xfff}, {0x8, 0xf0f, 0xc83, 0x9}, {0x4, 0x8, 0x3, 0x401}, {0x6, 0xcd4, 0xc0da, 0x7}, {0x101, 0x0, 0x7, 0x8}, {0xa94, 0xffffffff, 0x97, 0xe65c}, {0x101, 0x9, 0x5, 0x200}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x1000, 0x4, 0x4}, {0x31f1, 0x6, 0x38d0, 0x2}, {0x7, 0x800, 0x8001, 0x80000000}, {0x2, 0x80000000, 0x78a, 0x7ff}, {0x0, 0x6, 0xffffffff, 0x401}, {0x72, 0x1, 0x7, 0xfffff5f1}, {0x7, 0x6, 0x8, 0xc8}, {0x9, 0x7, 0x81, 0x80000000}, {0x17d90, 0x6, 0x5, 0x1}, {0x3, 0x80, 0x5, 0xffffd1fa}, {0x205, 0x6, 0x80000001, 0x3}, {0x260, 0x297, 0xa4, 0x9}, {0x2, 0x7, 0x10000, 0x1f}, {0x7, 0x8, 0x8000000, 0xc9}, {0x12, 0x7ff, 0xffff, 0x200}, {0x7, 0x400, 0x8, 0x1}, {0x0, 0x1, 0x800, 0x401}, {0x1ed44166, 0x3, 0x10001, 0x3}, {0x3f, 0x7, 0x100, 0xffffff00}, {0x3, 0x80, 0x2, 0xfffffe00}, {0x10001, 0x0, 0x5, 0x3}, {0xc8, 0x1, 0x8, 0x7fff}, {0x800, 0x10000, 0x1}, {0xf29, 0x9, 0xff, 0x7f}, {0x81, 0x5, 0x4, 0x4}, {0x42, 0x34, 0x370d, 0x81}, {0x896, 0x3, 0x0, 0x7}, {0x8001, 0x7e0000, 0x5, 0x80000001}, {0xfb79, 0x1, 0xffff0000, 0x5}, {0x1, 0xf419, 0x81, 0x10000}, {0x4, 0xfffffffe, 0x1ff, 0xff}, {0x1, 0x3, 0x6, 0xffff}, {0x7fff, 0x3}, {0x6e2d5d81, 0x9, 0x8, 0x4010000}, {0x6, 0xf3, 0x1, 0xdc51}, {0x2, 0x4, 0x7, 0x800}, {0x81, 0x1, 0x9, 0x1}, {0xfff, 0x10000, 0x5, 0x1eb}, {0x401, 0x6, 0x9, 0x7}, {0x1, 0x67, 0x0, 0x10000}, {0x20, 0xd447, 0x2, 0xa7}, {0x40, 0x4, 0x20}, {0xffffffff, 0x1b8, 0xa36, 0x2}, {0x1f, 0x7, 0x6, 0x8000}, {0x4, 0x0, 0xb2a7, 0x7}, {0x80000001, 0x4, 0x2}, {0x8, 0x81, 0x10000, 0xde}, {0x0, 0x10000, 0x8, 0xeea}, {0x0, 0x20, 0x7, 0x40}, {0x4, 0x3, 0xa2ab, 0x88}, {0x101, 0x3, 0x200, 0x40}, {0xff, 0xffff, 0x0, 0x5}, {0x3f, 0x5, 0x8000, 0x9}, {0x10004, 0x0, 0x8, 0x7}, {0x7ff, 0xff, 0xb80, 0x3}, {0x81, 0x25, 0x3, 0x9}, {0x40, 0x0, 0x4, 0x5}, {0x756, 0x5, 0x7, 0xfff}, {0x2926, 0x2, 0x0, 0x1}, {0xfffffff9, 0x81, 0x8, 0x7}, {0x7ff, 0x9, 0x80, 0x7}, {0x2, 0x1000, 0x4, 0x3}, {0x3, 0x0, 0x84, 0x5}, {0x102, 0x800, 0xaaea, 0x20}, {0x40, 0x2, 0x45d, 0x3}, {0xffffff7f, 0x7fff, 0x2, 0x8}, {0x7f, 0x9, 0x772, 0x8}, {0x9, 0xffffffff, 0x7fff}, {0x2, 0x8, 0x10000003, 0x4}, {0x4, 0xfffffff7, 0x0, 0x80}, {0x2, 0x3, 0xfffffff7, 0x1bf6}, {0x3, 0x3, 0x8, 0x7fff}, {0xb455, 0x8, 0x2}, {0x849, 0x100, 0x3, 0x5}, {0x2, 0x0, 0x10001, 0x10001}, {0x0, 0x4, 0x6, 0xff}, {0x8, 0x1f4, 0x8, 0x1}, {0x26a9, 0x60000000, 0x8, 0x4}, {0xf9, 0x6, 0x81, 0x18000000}, {0x6d1b, 0xffffffff, 0x5, 0x7}, {0xb34, 0x1ff, 0x400, 0x7}, {0x7ff, 0x40, 0x9, 0x8000}, {0x1, 0x2b, 0x8, 0xfffffffb}, {0x0, 0x2ed, 0x800, 0x7}, {0x5, 0xffffffff, 0xa87, 0x3}, {0x8, 0x1, 0x400, 0xffffd7e2}, {0x12a, 0x1, 0x7, 0x5}, {0x3, 0x101, 0x0, 0x7fff}, {0xc6, 0x6, 0x4, 0x4}, {0x2, 0x20000000, 0xcf73, 0x6}, {0xffffffff, 0x7ff, 0x200}, {0x9, 0x8, 0x1, 0x8}, {0x0, 0x200, 0x4, 0x7}, {0x10000000, 0x6, 0x400}, {0x5c96, 0x1f, 0x5, 0x40}, {0x5, 0xfffffffe, 0x7fffffff, 0x20}, {0xde, 0xd7, 0x401, 0x2}, {0x101, 0x5, 0xfffffff9, 0x4}, {0x6, 0xbc974896, 0x48d, 0x4}, {0x6, 0xa61c, 0x2, 0x7}, {0x7, 0x0, 0x4, 0x6}, {0x6, 0x0, 0x9, 0x81}, {0x8, 0x3, 0x5, 0x2}, {0x8, 0x800, 0x2, 0x7}, {0x52d1, 0x5, 0x3, 0x3ff}, {0x5, 0x5, 0xcb6, 0x6}, {0x9b, 0x7, 0x3ec, 0x10000}, {0x200, 0x7, 0x4, 0x7}, {0x4135, 0x9, 0x7f, 0x9}, {0x7ff, 0xbe, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x20}, {0x7, 0xfffffffb, 0x8000, 0x9}, {0x2, 0xd77, 0xa429, 0x4}, {0x8, 0x5, 0x19a, 0x767}, {0xe9, 0x20, 0x278, 0xfffffe01}, {0x6, 0x95, 0xbf88, 0x8001}, {0x4, 0x40, 0xff, 0xfffffff9}, {0x6, 0x8, 0x7, 0x7fff}, {0x7ff, 0x21, 0x8000, 0x7}, {0x854, 0x400, 0x1f, 0x3}, {0x0, 0x1, 0x100, 0x5}, {0xe568, 0xec, 0x1, 0xffff7938}, {0x3, 0x3f, 0x4, 0x6}, {0x0, 0x6, 0x4, 0x4d4e4a0a}, {0x6, 0x1000, 0x1ff, 0x3f}, {0x5, 0x2c7, 0x76, 0x1}, {0xfffffff7, 0x1, 0x0, 0x1}, {0x8, 0x5, 0xcf7d, 0x7}, {0x2, 0x7, 0x0, 0xf4a}, {0x6, 0x4, 0x40100000, 0x7}, {0x3, 0x4, 0xb3ff}, {0x7, 0x65, 0x423b, 0x5}, {0x8273, 0xf16, 0x158, 0x80000001}, {0x9, 0x0, 0x5, 0x9ffe}, {0x8, 0x1, 0x80, 0x81}, {0x400, 0x3, 0x7, 0x8001}, {0x3, 0x80, 0xe3b9, 0x4}, {0x7b2, 0x2, 0xa4, 0x20}, {0x8001, 0x0, 0x6, 0x8}, {0x9b, 0x0, 0x8, 0x8}, {0xffff, 0x2, 0x7, 0x4}, {0x7f, 0x30, 0x5, 0x5e9}, {0x3ff, 0xff, 0x2, 0x9}, {0x81, 0x40, 0xedc, 0x1000}, {0x1ff, 0x1, 0xd0, 0x401}, {0x9, 0x5704ca51, 0x100, 0xef}, {0x1, 0x3, 0x100, 0x7}, {0x5, 0x9, 0x9, 0x1}, {0xbe5, 0x0, 0x9, 0x200}, {0x80000000, 0x8001, 0x10000, 0x101}, {0x6, 0x8, 0x1, 0x80000001}, {0xb2, 0x7228, 0x9, 0x40}, {0x9, 0x81, 0x93, 0x9}, {0x9, 0x7, 0x6, 0x2}, {0x4000, 0x8, 0xd67, 0x1}, {0xfffffffb, 0x656, 0x5d9, 0x7}, {0x3, 0xd4, 0x6, 0x9}, {0x80, 0x1, 0x3f, 0x3}, {0x3, 0xfffffe00, 0x6, 0x9}, {0xffff, 0x80000001, 0x40, 0x80000000}, {0x7, 0x1, 0x7, 0x2}, {0x1f, 0x99, 0xffffffff, 0x7d29}, {0x8, 0x4, 0xff, 0x5}, {0x3, 0x8, 0xfffffff8, 0x6}, {0x404, 0x3, 0x1, 0x3ff}, {0x6, 0xffff, 0xfffffff9, 0x4}, {0x5, 0x0, 0x80000000, 0x400}, {0x5, 0xf17, 0x1, 0x9}, {0x4435, 0x7, 0x4, 0x9}, {0x4, 0x3be, 0x401, 0x6}, {0x80000001, 0x0, 0x3, 0x7ff}, {0x101, 0x9c2, 0x5, 0x1000}, {0x2, 0x9, 0x2, 0x1ff}, {0x8000, 0x200, 0x4800000, 0xfff}, {0x5, 0x4, 0x1, 0x7}, {0xe326, 0x1, 0x2, 0x1}, {0x6, 0x9, 0x4, 0x2}, {0x0, 0x4, 0x6, 0x3ff}, {0x4, 0x8, 0x5, 0x6}, {0x6, 0x7fffffff, 0x3f, 0x6}, {0x401, 0x7f, 0x3, 0xfffffffd}, {0x0, 0x8, 0x3, 0xf978}, {0x1f, 0x100, 0x7}, {0x6, 0x3, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x101}, {0x4, 0x8, 0x7}, {0x1000, 0x1000, 0x3, 0x3f}, {0x3, 0x9, 0x9, 0x2a89e679}, {0xae, 0x1, 0x5, 0x6}, {0x1, 0x9, 0x9, 0x7fff}, {0x5, 0x4, 0x1, 0xfffffff7}, {0xa6, 0x5, 0x9f, 0x2}, {0x9, 0x20, 0xc6, 0x4}, {0x4, 0x6, 0xff, 0x9}, {0x7, 0x7f41, 0x3, 0x8000}, {0x9, 0x6, 0x400, 0xebb}, {0x80000000, 0xfffffff7, 0x3ff, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x2, 0xffffffff, 0x5}, {0x7fff, 0x635, 0x7fffffff, 0x1ff}, {0x5, 0x8d, 0x1, 0x6}, {0xa9, 0x6, 0x7ff, 0x1}, {0xc000000, 0x3, 0x4, 0x2}, {0x1, 0x6, 0x80000001, 0x6}, {0x42, 0xffffffff, 0x5, 0x2e}, {0x3ff, 0x69f, 0x1, 0x6}, {0x5, 0x942a, 0x8, 0x8352}, {0x346eb548, 0x4d07, 0x100, 0x401}, {0xffff, 0x4, 0x1, 0xfff}, {0xfffffff9, 0x7, 0x6, 0x60bd}, {0x136e, 0x1, 0xd0df, 0x400}, {0x3, 0x7c000000, 0x2a3a, 0x200}, {0x9, 0x40, 0x200, 0x81}, {0x2, 0x8, 0xb9c, 0x7fffffff}, {0x2, 0x2717, 0x4, 0x5}, {0x2, 0x651, 0x5, 0x7}, {0x69f, 0xaac3, 0x8, 0x7ff}, {0x100, 0x3f, 0x6, 0xfffffffc}, {0xfffeffff, 0x1, 0x9, 0x7}, {0x3f89, 0x1, 0x0, 0x6}, {0xb02, 0x7f, 0x3a4, 0x1}, {0x401, 0x1ff, 0x9, 0x3}, {0x7, 0xffffffff, 0x7, 0x6}, {0x93, 0x7fff, 0x7, 0x8}, {0x4, 0x3, 0x2, 0x1ff}, {0x1, 0x9b65, 0xef, 0x2a36}, {0x2, 0x1, 0x4, 0x7ff}, {0x8, 0x2, 0x80000000, 0x2}, {0x80000001, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x9, 0xd2eb}, {0x0, 0x2, 0x8, 0x4}, {0x6, 0x4, 0x9, 0x9}, {0x3, 0x0, 0xfd7, 0x7}, {0x9bd, 0xffffffff, 0x2083, 0x101}, {0x8, 0xf40, 0x7, 0x5}, {0x4, 0x8, 0x3f, 0x4}, {0x0, 0x94b4, 0x80000001, 0xffffffff}, {0x0, 0x7f, 0x2c5, 0x20}, {0x4, 0x1, 0x6, 0x3}, {0xa3d, 0x850, 0xfffffff7, 0x8}, {0x81, 0x82e, 0x7, 0x2}, {0x6a5b47c2, 0x92a3d482, 0x7, 0x1}, {0x8791, 0x1, 0xfffffffc, 0xd4d}, {0x0, 0x2, 0x200, 0x1}, {0x8, 0x8, 0x5, 0x63de}, {0x800, 0x1, 0x4, 0x8}, {0x6, 0x620, 0x1d0b4854, 0xf42a}, {0x4, 0x101, 0xfffffff8, 0x824c}, {0x7, 0x0, 0x6}, {0x1ff, 0x7fff, 0x200, 0x5}, {0x81, 0x8, 0x4}, {0x2, 0x7, 0x800, 0x2}, {0xebd, 0xfffffffb, 0x7ff, 0x7}, {0xfc, 0xd3de, 0xb91, 0x796}, {0x6, 0x2, 0x2, 0x5}, {0x6, 0x445, 0x17, 0x6}, {0x0, 0x3, 0x10001, 0x7f}, {0x7, 0x8000, 0x2, 0x7}, {0x3, 0x0, 0x10001, 0x8}, {0xca, 0x4, 0x81b6, 0x6}, {0x8, 0x7, 0x75c}, {0x3, 0x5, 0x1, 0x3}, {0x10001, 0x81, 0x1000, 0x8}, {0x75d71962, 0x8, 0x8, 0x9}, {0x3, 0x5, 0x3f, 0x3}, {0x7, 0x400, 0x9, 0x7}, {0x400, 0x0, 0xfffffffc, 0x2}, {0x80000000, 0x5, 0x0, 0x12}, {0x189, 0x1, 0x80000001, 0x9}, {0xa0, 0x87, 0x3, 0x3ff}, {0x2, 0xffffffff, 0x0, 0x4d}, {0x6, 0x80000001, 0x1000, 0x8}, {0x2, 0x8, 0x8, 0x100}, {0x7278, 0x9ada, 0x9, 0x9}, {0x7, 0x0, 0xfffff000, 0x8db4}, {0x2, 0x5, 0xfff}, {0x5, 0x8001, 0x81, 0x9}, {0x0, 0x83, 0x7}, {0x80, 0x80, 0x1f, 0x8}, {0x2, 0x6, 0x7, 0x200}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0xaf41, 0x6, 0x3f}, {0x0, 0x3, 0xf1, 0xb9}, {0x0, 0x5a, 0x3, 0x3}, {0x8000, 0x81, 0x2, 0x22}, {0x0, 0xe5, 0x7, 0x8}, {0x7fff, 0xf85, 0x7fffffff}, {0x6, 0x1, 0x1, 0x3}, {0x9, 0x6, 0x1f, 0xd1}, {0x1f, 0x3, 0x7c000000, 0x5}, {0x2, 0x80000000, 0x9b, 0x1}, {0x5, 0x7, 0xffff, 0x78}, {0x8, 0x3, 0x7ff, 0xff}, {0x7fffffff, 0x8000, 0x7, 0x2}, {0x101, 0x1, 0x3ff, 0xccc3}, {0x5, 0x400, 0x7, 0xfff}, {0x8, 0x101, 0xfffffffe, 0x1}, {0x200, 0xfffff972, 0x148, 0x8}, {0xffffffff, 0x7fff, 0x7, 0x9}, {0x5f, 0x800, 0xef13, 0x1f}, {0x5d, 0x3, 0x10001, 0x5}, {0x4, 0x10000000, 0x7, 0x630}, {0x4, 0x9, 0x969, 0x2}, {0x36a2b83, 0x8000, 0x1, 0x8001}, {0x4, 0x1e4, 0x8001, 0x40}, {0x576e, 0x3, 0x7ff, 0x67}, {0xff, 0x52, 0x8, 0x2}, {0x2, 0x101, 0xfff, 0x80}, {0x5, 0x5, 0x6, 0x81}, {0x2, 0x70, 0xbd, 0x40}, {0x1, 0xfffffff9, 0x8, 0x3}, {0x9, 0xbdc, 0x0, 0x162}, {0x8, 0x7, 0xee5, 0x10001}, {0x2, 0x2, 0x2, 0x800}, {0x10001, 0x1dc4e23e, 0x80000001, 0x4d8}, {0x1c00000, 0xb0b9, 0x816, 0x7}, {0x20, 0x1, 0x22, 0x7}, {0x200, 0x8, 0x7, 0x2f1}, {0x7ff, 0x0, 0x9, 0x7}, {0x1000, 0x9, 0x627, 0x3f}, {0x7fffffff, 0x4, 0xac3d, 0x1}, {0x40, 0x4c51, 0x8, 0x9}, {0x744, 0x5, 0x9, 0x9}, {0x5, 0x7, 0x1000, 0x100}, {0x2, 0x9, 0x7ff, 0x2}, {0x1, 0xe7, 0x7fffffff, 0x1}, {0x101, 0xb, 0x0, 0xbb}, {0x1, 0x3, 0x1ff, 0x101}, {0x6, 0xfffff00d, 0x2a8, 0x3}, {0x40, 0x8d3, 0x8, 0x7}, {0x10001, 0x117, 0x1000000, 0x6}, {0x8, 0x1, 0x3f, 0x8}, {0x30, 0x5, 0x5, 0x6}, {0x0, 0xffffffff, 0x6, 0x1}, {0x2, 0x8001, 0x800, 0x5bb}, {0x400, 0x1, 0x7fff, 0x800}, {0xbbf3, 0x1, 0x7fffffff, 0x40}, {0xfffffffe, 0x400, 0x401, 0x2}, {0x400, 0x6, 0x357, 0x7ff}, {0x1, 0x83fb, 0x3, 0xe3a}, {0x6, 0x973, 0x685, 0x200}, {0x10000000, 0x1, 0x100, 0x5}, {0x3, 0xfffffffc, 0x0, 0x8001}, {0x1f, 0x6, 0x4, 0x7fffffff}, {0x8, 0x0, 0x1f, 0x3f}, {0x0, 0x81, 0xffffffff, 0x1000}, {0x9, 0xf4, 0x9, 0x4}, {0x2, 0x10000, 0x1800, 0x1}, {0x2, 0x9, 0x9, 0x2}, {0x81, 0x200, 0x6, 0x400}, {0x1, 0xeee, 0x40, 0x7}, {0x1, 0x6, 0x0, 0x2}, {0x4, 0x8, 0x0, 0x5}, {0x8, 0x22d, 0xfffffffb, 0x5}, {0x85, 0x1, 0x5, 0x4}, {0x3, 0x7479, 0x7ff, 0x8}, {0x80, 0xfff, 0xfffffff9, 0x3ff}, {0x1f, 0x5, 0x10001, 0x8}, {0x1, 0x5, 0x6, 0x7fff}, {0x20, 0x7, 0x400, 0x2}, {0x81, 0x6, 0x5, 0x5}, {0x4, 0x6, 0x0, 0x79c}, {0x10000, 0x8, 0x3, 0x2}, {0x2, 0x7, 0x3, 0x9}, {0x6, 0xffff9a51, 0x32a}, {0x7, 0x1ff, 0x6, 0x46}, {0x9f04, 0x0, 0x7fffffff, 0x7}, {0x800, 0x57, 0x0, 0xffffb493}, {0x3, 0x9, 0x9, 0x2}, {0x1, 0x6054, 0xfffffff7, 0x3}, {0x2, 0x7, 0x4, 0x81}, {0x0, 0x2, 0x7fffffff, 0x6}, {0xd, 0x8b3a, 0x7, 0x1}, {0x1, 0x4, 0x100, 0x1}, {0xec1, 0x2, 0x3, 0x1800}, {0x30c8, 0x4, 0x1, 0x7}, {0x200, 0x8af0, 0x7ff, 0x18ac}, {0x23, 0x2, 0x9, 0xb4}, {0xffffffff, 0x7, 0x1, 0x3f}, {0x6, 0x5, 0x33cb, 0xa}, {0x7, 0x40, 0x8, 0x7ff}, {0x7, 0x9, 0x5, 0x1f}, {0x7, 0x3ff, 0x7, 0xfffffffb}, {0x8, 0xd9, 0x4, 0xd6}, {0x4, 0x5, 0x6, 0x4}, {0x3, 0x100, 0x71, 0x6}, {0x640, 0x10001, 0x9, 0x400}, {0x87, 0x6, 0x80000000, 0x8}, {0x1f8b, 0x0, 0x200, 0x6}, {0x4, 0x10001, 0x4b, 0xa4c}, {0x0, 0xff, 0x800, 0x1}, {0x2, 0x8, 0x8f2, 0x7ff}, {0x8000, 0x80000001, 0xffff2bf8, 0x9fa9}, {0x6, 0xffff, 0x81, 0x3259d18d}, {0x1000, 0xf8d5, 0x7, 0x401}, {0x10001, 0x100, 0x0, 0x9}, {0x4, 0x1, 0x6, 0x1}, {0x6, 0x7fff, 0xfffffff5, 0x4369}, {0x9, 0x0, 0x7, 0x40}, {0x8, 0x1, 0x9, 0x3f}, {0x3ff, 0x5, 0x8001, 0x92bd}, {0x7, 0x6, 0x1, 0x2}, {0x1, 0x0, 0x20, 0x6}, {0x9, 0x1, 0x8, 0x200}, {0x80, 0xffffffff, 0x6, 0x7}, {0x3, 0x7, 0x8, 0x7f}, {0x1, 0x893, 0xffffffff, 0x7}, {0xfffffff7, 0x5, 0xa02a, 0x2}, {0x0, 0x880, 0x8000, 0x5}, {0x3, 0x7, 0x101, 0x401}, {0x4, 0x3ff, 0x7}, {0x6, 0x3, 0xfffffff9, 0x7ff}, {0xc22, 0x6f9, 0x4, 0x8001}, {0x1, 0x1, 0x4, 0x7fff}, {0x7, 0x2, 0x9}, {0x1f, 0x9, 0x49c, 0x21}, {0x0, 0x4, 0xffff}, {0x6, 0x4c47, 0x4, 0x80}, {0x8, 0x8, 0x2, 0x1ff}, {0x80, 0x8, 0x81, 0x400}, {0x100, 0x36, 0x7, 0x5f37}, {0x0, 0x1ff, 0x81, 0x101}, {0x4, 0x9b, 0x3, 0x6}, {0x8, 0x606e, 0x4, 0xd4c4}, {0x5, 0x1, 0x6, 0x400}, {0x9, 0x2, 0x20000000, 0x8}, {0x79, 0x1, 0xffffffff, 0x2}, {0x8, 0x0, 0x6, 0x5}, {0x4, 0x0, 0x7b4, 0x7ff}, {0x6, 0x2, 0xff, 0x2}, {0x3, 0x21, 0x7, 0x3}, {0x2, 0x0, 0x0, 0x5}, {0x7, 0x8, 0x80000000, 0x8}, {0x9696, 0x0, 0x4, 0x6}, {0x3ff, 0x401, 0x400, 0x3ff}, {0x2, 0x5, 0x9, 0xfff}, {0x4, 0x7f, 0x80000001, 0xe2}, {0x0, 0xd8b, 0x3, 0x81}, {0x8, 0xbe, 0x8, 0x800}, {0x4b4, 0x20, 0x1, 0x5}, {0x2, 0xffff, 0x6, 0x79b11c1b}, {0x0, 0x4, 0x56, 0x8}, {0x0, 0xffff0000, 0x4, 0x62}, {0x2, 0x6, 0x2, 0x4}, {0xffff, 0x1, 0x40a, 0x8}, {0x81, 0x2, 0xa1, 0x80000000}, {0x7, 0x7, 0xd9c, 0x4}, {0x7, 0x9, 0x1c45}, {0x233, 0x0, 0x0, 0xff}, {0x20002000, 0x3, 0x3, 0x2ac}, {0x8, 0x109, 0x6, 0xb7f0}, {0x7, 0x3, 0x5, 0x200}, {0x3, 0x6, 0x6997e228, 0x2}, {0xfffffff7, 0xfff, 0x5, 0x7}, {0xaea6, 0x8001, 0x3, 0x800}, {0x3, 0xf3f, 0x6, 0x3ff}, {0x9, 0x0, 0x1, 0xc}, {0x0, 0x7, 0x3b000000}, {0x6, 0x6, 0xfffffff7, 0x92}, {0x5, 0x9, 0xffff8000, 0xfffffffa}, {0x3, 0x3, 0xdd, 0x8000}, {0xfffffffa, 0x80000001, 0xdb, 0xffffffff}, {0x4, 0x2, 0x2, 0xfffffff9}, {0x5, 0x22a, 0x800, 0x8001}, {0x4, 0x1ffe0, 0x800, 0xe}, {0x6, 0x4, 0x101, 0x2}]}, 0x21e8) 09:15:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) r2 = socket(0x1f, 0xa, 0x20) sendmsg$AUDIT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x800, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x880) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x10000, @mcast1, 0xffff8001}}}, 0x90) 09:15:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 33) 09:15:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x5, 0x0, 0x0, @stepwise={0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 09:15:09 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000002300)) (async) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000002340), 0x7, 0x400) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r5, 0x2}}, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) write$usbip_server(0xffffffffffffffff, &(0x7f00000000c0)=@ret_submit={{0x3, 0x10001, 0x0, 0x1, 0x4}, 0x8, 0xe8, 0xed, 0x20d, 0xff4, 0x0, "0bb813f7522ea068525031d815ff1f6fc24b94e464d81ee17c0b500ee3da911aa0ccb9829b52dd14705a233ba689abb683612421774eb3dc93667b96338bbadeeff7c8ad9a294a0ef2b9c331d92c76dff95fd5493f210b526cd1d0f0f3f07837c146ed358ca9f7249fddee94b59febb5f1f6f0c79194d6342aeedc78fcb7f220878e3e5cc2ab9afa65429557302b6f2ba182999f694a13a1790e30c16141e61b9130fcc9b248ca1287e4aff9f694a0c851fd74a6d527631b56fcf35dbe5ae9847139c87f1231c4f276ef556d9794bd7144923eac1793195665e52e4e98035ef0e259375f6104e8ff", [{0x5, 0x0, 0x1, 0xfd2}, {0x100, 0x8, 0x7}, {0xd5, 0xfffffffa, 0x2, 0x81}, {0x10001, 0x687ade9b, 0x1, 0x5}, {0xe8f, 0x101, 0x8}, {0x7, 0x8, 0x2, 0x80000000}, {0x3, 0x6, 0x479, 0xff}, {0x5759, 0x8000, 0x1000, 0xfff}, {0x8796, 0xffffffff, 0x8, 0x6}, {0x5, 0x80000000, 0x5, 0x9}, {0xffffffff, 0x3252, 0x7fff, 0x8001}, {0x6de, 0x2, 0x3f, 0x4}, {0x2, 0xfffffbbb, 0x2dd, 0x57a}, {0x0, 0x2, 0xff, 0xe7}, {0xd01, 0x8, 0x4, 0xfffffff8}, {0x100, 0x9, 0x8000, 0x20}, {0x4, 0x4, 0xfffffffe, 0x8001}, {0xfffffff7, 0x18, 0x1, 0xeef}, {0x7ff, 0x6, 0x2c851033, 0x9}, {0x4, 0x2, 0x6}, {0x7, 0x3, 0x3, 0x2}, {0x3, 0xd1, 0x1, 0x9}, {0x0, 0xb6, 0x1, 0x6}, {0x7, 0x2, 0x6, 0x4}, {0xdc30, 0x7, 0x7fff, 0x1ff}, {0x1, 0x7, 0x7, 0x10001}, {0x10001, 0x9, 0x3, 0x5d5}, {0x0, 0x1, 0x7}, {0x1, 0x1f, 0x4, 0x6}, {0xf6, 0x40, 0x411, 0xffffffff}, {0x4, 0x57f, 0xffff}, {0x7ff, 0x3b6, 0x716}, {0x8, 0x8, 0x4}, {0x3ff, 0x1, 0x1, 0x10001}, {0x9, 0x7016, 0x3, 0x32}, {0x5, 0x7ff, 0xba, 0x9269}, {0x1, 0x8, 0x4, 0xcbb}, {0x6, 0x80000000, 0x8, 0x5}, {0x40, 0x8, 0x80, 0x100}, {0x6, 0x0, 0x8, 0x5}, {0x2, 0x1, 0x1, 0x200}, {0x1, 0x7, 0x10000, 0x6}, {0x6f, 0x4, 0x5, 0x7fff}, {0xf18, 0x81, 0x6, 0x4}, {0xad6b, 0xd64, 0x5, 0x4}, {0x81, 0x4, 0x800, 0x3f}, {0x10001, 0x2, 0x3, 0x24b}, {0x3, 0x4, 0x3, 0xc97e}, {0x6, 0xb1f6, 0x9, 0x5}, {0x8e, 0x800, 0x46, 0xfff}, {0x7fffffff, 0xd4c, 0x7fff, 0x3a62}, {0xfff, 0xffffffff, 0x4, 0xfff}, {0x8, 0xf0f, 0xc83, 0x9}, {0x4, 0x8, 0x3, 0x401}, {0x6, 0xcd4, 0xc0da, 0x7}, {0x101, 0x0, 0x7, 0x8}, {0xa94, 0xffffffff, 0x97, 0xe65c}, {0x101, 0x9, 0x5, 0x200}, {0x3, 0x5, 0x0, 0x4}, {0x4, 0x1000, 0x4, 0x4}, {0x31f1, 0x6, 0x38d0, 0x2}, {0x7, 0x800, 0x8001, 0x80000000}, {0x2, 0x80000000, 0x78a, 0x7ff}, {0x0, 0x6, 0xffffffff, 0x401}, {0x72, 0x1, 0x7, 0xfffff5f1}, {0x7, 0x6, 0x8, 0xc8}, {0x9, 0x7, 0x81, 0x80000000}, {0x17d90, 0x6, 0x5, 0x1}, {0x3, 0x80, 0x5, 0xffffd1fa}, {0x205, 0x6, 0x80000001, 0x3}, {0x260, 0x297, 0xa4, 0x9}, {0x2, 0x7, 0x10000, 0x1f}, {0x7, 0x8, 0x8000000, 0xc9}, {0x12, 0x7ff, 0xffff, 0x200}, {0x7, 0x400, 0x8, 0x1}, {0x0, 0x1, 0x800, 0x401}, {0x1ed44166, 0x3, 0x10001, 0x3}, {0x3f, 0x7, 0x100, 0xffffff00}, {0x3, 0x80, 0x2, 0xfffffe00}, {0x10001, 0x0, 0x5, 0x3}, {0xc8, 0x1, 0x8, 0x7fff}, {0x800, 0x10000, 0x1}, {0xf29, 0x9, 0xff, 0x7f}, {0x81, 0x5, 0x4, 0x4}, {0x42, 0x34, 0x370d, 0x81}, {0x896, 0x3, 0x0, 0x7}, {0x8001, 0x7e0000, 0x5, 0x80000001}, {0xfb79, 0x1, 0xffff0000, 0x5}, {0x1, 0xf419, 0x81, 0x10000}, {0x4, 0xfffffffe, 0x1ff, 0xff}, {0x1, 0x3, 0x6, 0xffff}, {0x7fff, 0x3}, {0x6e2d5d81, 0x9, 0x8, 0x4010000}, {0x6, 0xf3, 0x1, 0xdc51}, {0x2, 0x4, 0x7, 0x800}, {0x81, 0x1, 0x9, 0x1}, {0xfff, 0x10000, 0x5, 0x1eb}, {0x401, 0x6, 0x9, 0x7}, {0x1, 0x67, 0x0, 0x10000}, {0x20, 0xd447, 0x2, 0xa7}, {0x40, 0x4, 0x20}, {0xffffffff, 0x1b8, 0xa36, 0x2}, {0x1f, 0x7, 0x6, 0x8000}, {0x4, 0x0, 0xb2a7, 0x7}, {0x80000001, 0x4, 0x2}, {0x8, 0x81, 0x10000, 0xde}, {0x0, 0x10000, 0x8, 0xeea}, {0x0, 0x20, 0x7, 0x40}, {0x4, 0x3, 0xa2ab, 0x88}, {0x101, 0x3, 0x200, 0x40}, {0xff, 0xffff, 0x0, 0x5}, {0x3f, 0x5, 0x8000, 0x9}, {0x10004, 0x0, 0x8, 0x7}, {0x7ff, 0xff, 0xb80, 0x3}, {0x81, 0x25, 0x3, 0x9}, {0x40, 0x0, 0x4, 0x5}, {0x756, 0x5, 0x7, 0xfff}, {0x2926, 0x2, 0x0, 0x1}, {0xfffffff9, 0x81, 0x8, 0x7}, {0x7ff, 0x9, 0x80, 0x7}, {0x2, 0x1000, 0x4, 0x3}, {0x3, 0x0, 0x84, 0x5}, {0x102, 0x800, 0xaaea, 0x20}, {0x40, 0x2, 0x45d, 0x3}, {0xffffff7f, 0x7fff, 0x2, 0x8}, {0x7f, 0x9, 0x772, 0x8}, {0x9, 0xffffffff, 0x7fff}, {0x2, 0x8, 0x10000003, 0x4}, {0x4, 0xfffffff7, 0x0, 0x80}, {0x2, 0x3, 0xfffffff7, 0x1bf6}, {0x3, 0x3, 0x8, 0x7fff}, {0xb455, 0x8, 0x2}, {0x849, 0x100, 0x3, 0x5}, {0x2, 0x0, 0x10001, 0x10001}, {0x0, 0x4, 0x6, 0xff}, {0x8, 0x1f4, 0x8, 0x1}, {0x26a9, 0x60000000, 0x8, 0x4}, {0xf9, 0x6, 0x81, 0x18000000}, {0x6d1b, 0xffffffff, 0x5, 0x7}, {0xb34, 0x1ff, 0x400, 0x7}, {0x7ff, 0x40, 0x9, 0x8000}, {0x1, 0x2b, 0x8, 0xfffffffb}, {0x0, 0x2ed, 0x800, 0x7}, {0x5, 0xffffffff, 0xa87, 0x3}, {0x8, 0x1, 0x400, 0xffffd7e2}, {0x12a, 0x1, 0x7, 0x5}, {0x3, 0x101, 0x0, 0x7fff}, {0xc6, 0x6, 0x4, 0x4}, {0x2, 0x20000000, 0xcf73, 0x6}, {0xffffffff, 0x7ff, 0x200}, {0x9, 0x8, 0x1, 0x8}, {0x0, 0x200, 0x4, 0x7}, {0x10000000, 0x6, 0x400}, {0x5c96, 0x1f, 0x5, 0x40}, {0x5, 0xfffffffe, 0x7fffffff, 0x20}, {0xde, 0xd7, 0x401, 0x2}, {0x101, 0x5, 0xfffffff9, 0x4}, {0x6, 0xbc974896, 0x48d, 0x4}, {0x6, 0xa61c, 0x2, 0x7}, {0x7, 0x0, 0x4, 0x6}, {0x6, 0x0, 0x9, 0x81}, {0x8, 0x3, 0x5, 0x2}, {0x8, 0x800, 0x2, 0x7}, {0x52d1, 0x5, 0x3, 0x3ff}, {0x5, 0x5, 0xcb6, 0x6}, {0x9b, 0x7, 0x3ec, 0x10000}, {0x200, 0x7, 0x4, 0x7}, {0x4135, 0x9, 0x7f, 0x9}, {0x7ff, 0xbe, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x20}, {0x7, 0xfffffffb, 0x8000, 0x9}, {0x2, 0xd77, 0xa429, 0x4}, {0x8, 0x5, 0x19a, 0x767}, {0xe9, 0x20, 0x278, 0xfffffe01}, {0x6, 0x95, 0xbf88, 0x8001}, {0x4, 0x40, 0xff, 0xfffffff9}, {0x6, 0x8, 0x7, 0x7fff}, {0x7ff, 0x21, 0x8000, 0x7}, {0x854, 0x400, 0x1f, 0x3}, {0x0, 0x1, 0x100, 0x5}, {0xe568, 0xec, 0x1, 0xffff7938}, {0x3, 0x3f, 0x4, 0x6}, {0x0, 0x6, 0x4, 0x4d4e4a0a}, {0x6, 0x1000, 0x1ff, 0x3f}, {0x5, 0x2c7, 0x76, 0x1}, {0xfffffff7, 0x1, 0x0, 0x1}, {0x8, 0x5, 0xcf7d, 0x7}, {0x2, 0x7, 0x0, 0xf4a}, {0x6, 0x4, 0x40100000, 0x7}, {0x3, 0x4, 0xb3ff}, {0x7, 0x65, 0x423b, 0x5}, {0x8273, 0xf16, 0x158, 0x80000001}, {0x9, 0x0, 0x5, 0x9ffe}, {0x8, 0x1, 0x80, 0x81}, {0x400, 0x3, 0x7, 0x8001}, {0x3, 0x80, 0xe3b9, 0x4}, {0x7b2, 0x2, 0xa4, 0x20}, {0x8001, 0x0, 0x6, 0x8}, {0x9b, 0x0, 0x8, 0x8}, {0xffff, 0x2, 0x7, 0x4}, {0x7f, 0x30, 0x5, 0x5e9}, {0x3ff, 0xff, 0x2, 0x9}, {0x81, 0x40, 0xedc, 0x1000}, {0x1ff, 0x1, 0xd0, 0x401}, {0x9, 0x5704ca51, 0x100, 0xef}, {0x1, 0x3, 0x100, 0x7}, {0x5, 0x9, 0x9, 0x1}, {0xbe5, 0x0, 0x9, 0x200}, {0x80000000, 0x8001, 0x10000, 0x101}, {0x6, 0x8, 0x1, 0x80000001}, {0xb2, 0x7228, 0x9, 0x40}, {0x9, 0x81, 0x93, 0x9}, {0x9, 0x7, 0x6, 0x2}, {0x4000, 0x8, 0xd67, 0x1}, {0xfffffffb, 0x656, 0x5d9, 0x7}, {0x3, 0xd4, 0x6, 0x9}, {0x80, 0x1, 0x3f, 0x3}, {0x3, 0xfffffe00, 0x6, 0x9}, {0xffff, 0x80000001, 0x40, 0x80000000}, {0x7, 0x1, 0x7, 0x2}, {0x1f, 0x99, 0xffffffff, 0x7d29}, {0x8, 0x4, 0xff, 0x5}, {0x3, 0x8, 0xfffffff8, 0x6}, {0x404, 0x3, 0x1, 0x3ff}, {0x6, 0xffff, 0xfffffff9, 0x4}, {0x5, 0x0, 0x80000000, 0x400}, {0x5, 0xf17, 0x1, 0x9}, {0x4435, 0x7, 0x4, 0x9}, {0x4, 0x3be, 0x401, 0x6}, {0x80000001, 0x0, 0x3, 0x7ff}, {0x101, 0x9c2, 0x5, 0x1000}, {0x2, 0x9, 0x2, 0x1ff}, {0x8000, 0x200, 0x4800000, 0xfff}, {0x5, 0x4, 0x1, 0x7}, {0xe326, 0x1, 0x2, 0x1}, {0x6, 0x9, 0x4, 0x2}, {0x0, 0x4, 0x6, 0x3ff}, {0x4, 0x8, 0x5, 0x6}, {0x6, 0x7fffffff, 0x3f, 0x6}, {0x401, 0x7f, 0x3, 0xfffffffd}, {0x0, 0x8, 0x3, 0xf978}, {0x1f, 0x100, 0x7}, {0x6, 0x3, 0x7, 0x6}, {0x1, 0x2, 0x8, 0x101}, {0x4, 0x8, 0x7}, {0x1000, 0x1000, 0x3, 0x3f}, {0x3, 0x9, 0x9, 0x2a89e679}, {0xae, 0x1, 0x5, 0x6}, {0x1, 0x9, 0x9, 0x7fff}, {0x5, 0x4, 0x1, 0xfffffff7}, {0xa6, 0x5, 0x9f, 0x2}, {0x9, 0x20, 0xc6, 0x4}, {0x4, 0x6, 0xff, 0x9}, {0x7, 0x7f41, 0x3, 0x8000}, {0x9, 0x6, 0x400, 0xebb}, {0x80000000, 0xfffffff7, 0x3ff, 0x2}, {0x1, 0x0, 0x0, 0x1}, {0x2, 0xffffffff, 0x5}, {0x7fff, 0x635, 0x7fffffff, 0x1ff}, {0x5, 0x8d, 0x1, 0x6}, {0xa9, 0x6, 0x7ff, 0x1}, {0xc000000, 0x3, 0x4, 0x2}, {0x1, 0x6, 0x80000001, 0x6}, {0x42, 0xffffffff, 0x5, 0x2e}, {0x3ff, 0x69f, 0x1, 0x6}, {0x5, 0x942a, 0x8, 0x8352}, {0x346eb548, 0x4d07, 0x100, 0x401}, {0xffff, 0x4, 0x1, 0xfff}, {0xfffffff9, 0x7, 0x6, 0x60bd}, {0x136e, 0x1, 0xd0df, 0x400}, {0x3, 0x7c000000, 0x2a3a, 0x200}, {0x9, 0x40, 0x200, 0x81}, {0x2, 0x8, 0xb9c, 0x7fffffff}, {0x2, 0x2717, 0x4, 0x5}, {0x2, 0x651, 0x5, 0x7}, {0x69f, 0xaac3, 0x8, 0x7ff}, {0x100, 0x3f, 0x6, 0xfffffffc}, {0xfffeffff, 0x1, 0x9, 0x7}, {0x3f89, 0x1, 0x0, 0x6}, {0xb02, 0x7f, 0x3a4, 0x1}, {0x401, 0x1ff, 0x9, 0x3}, {0x7, 0xffffffff, 0x7, 0x6}, {0x93, 0x7fff, 0x7, 0x8}, {0x4, 0x3, 0x2, 0x1ff}, {0x1, 0x9b65, 0xef, 0x2a36}, {0x2, 0x1, 0x4, 0x7ff}, {0x8, 0x2, 0x80000000, 0x2}, {0x80000001, 0x4, 0x5, 0x4}, {0x0, 0x4, 0x9, 0xd2eb}, {0x0, 0x2, 0x8, 0x4}, {0x6, 0x4, 0x9, 0x9}, {0x3, 0x0, 0xfd7, 0x7}, {0x9bd, 0xffffffff, 0x2083, 0x101}, {0x8, 0xf40, 0x7, 0x5}, {0x4, 0x8, 0x3f, 0x4}, {0x0, 0x94b4, 0x80000001, 0xffffffff}, {0x0, 0x7f, 0x2c5, 0x20}, {0x4, 0x1, 0x6, 0x3}, {0xa3d, 0x850, 0xfffffff7, 0x8}, {0x81, 0x82e, 0x7, 0x2}, {0x6a5b47c2, 0x92a3d482, 0x7, 0x1}, {0x8791, 0x1, 0xfffffffc, 0xd4d}, {0x0, 0x2, 0x200, 0x1}, {0x8, 0x8, 0x5, 0x63de}, {0x800, 0x1, 0x4, 0x8}, {0x6, 0x620, 0x1d0b4854, 0xf42a}, {0x4, 0x101, 0xfffffff8, 0x824c}, {0x7, 0x0, 0x6}, {0x1ff, 0x7fff, 0x200, 0x5}, {0x81, 0x8, 0x4}, {0x2, 0x7, 0x800, 0x2}, {0xebd, 0xfffffffb, 0x7ff, 0x7}, {0xfc, 0xd3de, 0xb91, 0x796}, {0x6, 0x2, 0x2, 0x5}, {0x6, 0x445, 0x17, 0x6}, {0x0, 0x3, 0x10001, 0x7f}, {0x7, 0x8000, 0x2, 0x7}, {0x3, 0x0, 0x10001, 0x8}, {0xca, 0x4, 0x81b6, 0x6}, {0x8, 0x7, 0x75c}, {0x3, 0x5, 0x1, 0x3}, {0x10001, 0x81, 0x1000, 0x8}, {0x75d71962, 0x8, 0x8, 0x9}, {0x3, 0x5, 0x3f, 0x3}, {0x7, 0x400, 0x9, 0x7}, {0x400, 0x0, 0xfffffffc, 0x2}, {0x80000000, 0x5, 0x0, 0x12}, {0x189, 0x1, 0x80000001, 0x9}, {0xa0, 0x87, 0x3, 0x3ff}, {0x2, 0xffffffff, 0x0, 0x4d}, {0x6, 0x80000001, 0x1000, 0x8}, {0x2, 0x8, 0x8, 0x100}, {0x7278, 0x9ada, 0x9, 0x9}, {0x7, 0x0, 0xfffff000, 0x8db4}, {0x2, 0x5, 0xfff}, {0x5, 0x8001, 0x81, 0x9}, {0x0, 0x83, 0x7}, {0x80, 0x80, 0x1f, 0x8}, {0x2, 0x6, 0x7, 0x200}, {0x0, 0x5, 0x5, 0x5}, {0x4, 0xaf41, 0x6, 0x3f}, {0x0, 0x3, 0xf1, 0xb9}, {0x0, 0x5a, 0x3, 0x3}, {0x8000, 0x81, 0x2, 0x22}, {0x0, 0xe5, 0x7, 0x8}, {0x7fff, 0xf85, 0x7fffffff}, {0x6, 0x1, 0x1, 0x3}, {0x9, 0x6, 0x1f, 0xd1}, {0x1f, 0x3, 0x7c000000, 0x5}, {0x2, 0x80000000, 0x9b, 0x1}, {0x5, 0x7, 0xffff, 0x78}, {0x8, 0x3, 0x7ff, 0xff}, {0x7fffffff, 0x8000, 0x7, 0x2}, {0x101, 0x1, 0x3ff, 0xccc3}, {0x5, 0x400, 0x7, 0xfff}, {0x8, 0x101, 0xfffffffe, 0x1}, {0x200, 0xfffff972, 0x148, 0x8}, {0xffffffff, 0x7fff, 0x7, 0x9}, {0x5f, 0x800, 0xef13, 0x1f}, {0x5d, 0x3, 0x10001, 0x5}, {0x4, 0x10000000, 0x7, 0x630}, {0x4, 0x9, 0x969, 0x2}, {0x36a2b83, 0x8000, 0x1, 0x8001}, {0x4, 0x1e4, 0x8001, 0x40}, {0x576e, 0x3, 0x7ff, 0x67}, {0xff, 0x52, 0x8, 0x2}, {0x2, 0x101, 0xfff, 0x80}, {0x5, 0x5, 0x6, 0x81}, {0x2, 0x70, 0xbd, 0x40}, {0x1, 0xfffffff9, 0x8, 0x3}, {0x9, 0xbdc, 0x0, 0x162}, {0x8, 0x7, 0xee5, 0x10001}, {0x2, 0x2, 0x2, 0x800}, {0x10001, 0x1dc4e23e, 0x80000001, 0x4d8}, {0x1c00000, 0xb0b9, 0x816, 0x7}, {0x20, 0x1, 0x22, 0x7}, {0x200, 0x8, 0x7, 0x2f1}, {0x7ff, 0x0, 0x9, 0x7}, {0x1000, 0x9, 0x627, 0x3f}, {0x7fffffff, 0x4, 0xac3d, 0x1}, {0x40, 0x4c51, 0x8, 0x9}, {0x744, 0x5, 0x9, 0x9}, {0x5, 0x7, 0x1000, 0x100}, {0x2, 0x9, 0x7ff, 0x2}, {0x1, 0xe7, 0x7fffffff, 0x1}, {0x101, 0xb, 0x0, 0xbb}, {0x1, 0x3, 0x1ff, 0x101}, {0x6, 0xfffff00d, 0x2a8, 0x3}, {0x40, 0x8d3, 0x8, 0x7}, {0x10001, 0x117, 0x1000000, 0x6}, {0x8, 0x1, 0x3f, 0x8}, {0x30, 0x5, 0x5, 0x6}, {0x0, 0xffffffff, 0x6, 0x1}, {0x2, 0x8001, 0x800, 0x5bb}, {0x400, 0x1, 0x7fff, 0x800}, {0xbbf3, 0x1, 0x7fffffff, 0x40}, {0xfffffffe, 0x400, 0x401, 0x2}, {0x400, 0x6, 0x357, 0x7ff}, {0x1, 0x83fb, 0x3, 0xe3a}, {0x6, 0x973, 0x685, 0x200}, {0x10000000, 0x1, 0x100, 0x5}, {0x3, 0xfffffffc, 0x0, 0x8001}, {0x1f, 0x6, 0x4, 0x7fffffff}, {0x8, 0x0, 0x1f, 0x3f}, {0x0, 0x81, 0xffffffff, 0x1000}, {0x9, 0xf4, 0x9, 0x4}, {0x2, 0x10000, 0x1800, 0x1}, {0x2, 0x9, 0x9, 0x2}, {0x81, 0x200, 0x6, 0x400}, {0x1, 0xeee, 0x40, 0x7}, {0x1, 0x6, 0x0, 0x2}, {0x4, 0x8, 0x0, 0x5}, {0x8, 0x22d, 0xfffffffb, 0x5}, {0x85, 0x1, 0x5, 0x4}, {0x3, 0x7479, 0x7ff, 0x8}, {0x80, 0xfff, 0xfffffff9, 0x3ff}, {0x1f, 0x5, 0x10001, 0x8}, {0x1, 0x5, 0x6, 0x7fff}, {0x20, 0x7, 0x400, 0x2}, {0x81, 0x6, 0x5, 0x5}, {0x4, 0x6, 0x0, 0x79c}, {0x10000, 0x8, 0x3, 0x2}, {0x2, 0x7, 0x3, 0x9}, {0x6, 0xffff9a51, 0x32a}, {0x7, 0x1ff, 0x6, 0x46}, {0x9f04, 0x0, 0x7fffffff, 0x7}, {0x800, 0x57, 0x0, 0xffffb493}, {0x3, 0x9, 0x9, 0x2}, {0x1, 0x6054, 0xfffffff7, 0x3}, {0x2, 0x7, 0x4, 0x81}, {0x0, 0x2, 0x7fffffff, 0x6}, {0xd, 0x8b3a, 0x7, 0x1}, {0x1, 0x4, 0x100, 0x1}, {0xec1, 0x2, 0x3, 0x1800}, {0x30c8, 0x4, 0x1, 0x7}, {0x200, 0x8af0, 0x7ff, 0x18ac}, {0x23, 0x2, 0x9, 0xb4}, {0xffffffff, 0x7, 0x1, 0x3f}, {0x6, 0x5, 0x33cb, 0xa}, {0x7, 0x40, 0x8, 0x7ff}, {0x7, 0x9, 0x5, 0x1f}, {0x7, 0x3ff, 0x7, 0xfffffffb}, {0x8, 0xd9, 0x4, 0xd6}, {0x4, 0x5, 0x6, 0x4}, {0x3, 0x100, 0x71, 0x6}, {0x640, 0x10001, 0x9, 0x400}, {0x87, 0x6, 0x80000000, 0x8}, {0x1f8b, 0x0, 0x200, 0x6}, {0x4, 0x10001, 0x4b, 0xa4c}, {0x0, 0xff, 0x800, 0x1}, {0x2, 0x8, 0x8f2, 0x7ff}, {0x8000, 0x80000001, 0xffff2bf8, 0x9fa9}, {0x6, 0xffff, 0x81, 0x3259d18d}, {0x1000, 0xf8d5, 0x7, 0x401}, {0x10001, 0x100, 0x0, 0x9}, {0x4, 0x1, 0x6, 0x1}, {0x6, 0x7fff, 0xfffffff5, 0x4369}, {0x9, 0x0, 0x7, 0x40}, {0x8, 0x1, 0x9, 0x3f}, {0x3ff, 0x5, 0x8001, 0x92bd}, {0x7, 0x6, 0x1, 0x2}, {0x1, 0x0, 0x20, 0x6}, {0x9, 0x1, 0x8, 0x200}, {0x80, 0xffffffff, 0x6, 0x7}, {0x3, 0x7, 0x8, 0x7f}, {0x1, 0x893, 0xffffffff, 0x7}, {0xfffffff7, 0x5, 0xa02a, 0x2}, {0x0, 0x880, 0x8000, 0x5}, {0x3, 0x7, 0x101, 0x401}, {0x4, 0x3ff, 0x7}, {0x6, 0x3, 0xfffffff9, 0x7ff}, {0xc22, 0x6f9, 0x4, 0x8001}, {0x1, 0x1, 0x4, 0x7fff}, {0x7, 0x2, 0x9}, {0x1f, 0x9, 0x49c, 0x21}, {0x0, 0x4, 0xffff}, {0x6, 0x4c47, 0x4, 0x80}, {0x8, 0x8, 0x2, 0x1ff}, {0x80, 0x8, 0x81, 0x400}, {0x100, 0x36, 0x7, 0x5f37}, {0x0, 0x1ff, 0x81, 0x101}, {0x4, 0x9b, 0x3, 0x6}, {0x8, 0x606e, 0x4, 0xd4c4}, {0x5, 0x1, 0x6, 0x400}, {0x9, 0x2, 0x20000000, 0x8}, {0x79, 0x1, 0xffffffff, 0x2}, {0x8, 0x0, 0x6, 0x5}, {0x4, 0x0, 0x7b4, 0x7ff}, {0x6, 0x2, 0xff, 0x2}, {0x3, 0x21, 0x7, 0x3}, {0x2, 0x0, 0x0, 0x5}, {0x7, 0x8, 0x80000000, 0x8}, {0x9696, 0x0, 0x4, 0x6}, {0x3ff, 0x401, 0x400, 0x3ff}, {0x2, 0x5, 0x9, 0xfff}, {0x4, 0x7f, 0x80000001, 0xe2}, {0x0, 0xd8b, 0x3, 0x81}, {0x8, 0xbe, 0x8, 0x800}, {0x4b4, 0x20, 0x1, 0x5}, {0x2, 0xffff, 0x6, 0x79b11c1b}, {0x0, 0x4, 0x56, 0x8}, {0x0, 0xffff0000, 0x4, 0x62}, {0x2, 0x6, 0x2, 0x4}, {0xffff, 0x1, 0x40a, 0x8}, {0x81, 0x2, 0xa1, 0x80000000}, {0x7, 0x7, 0xd9c, 0x4}, {0x7, 0x9, 0x1c45}, {0x233, 0x0, 0x0, 0xff}, {0x20002000, 0x3, 0x3, 0x2ac}, {0x8, 0x109, 0x6, 0xb7f0}, {0x7, 0x3, 0x5, 0x200}, {0x3, 0x6, 0x6997e228, 0x2}, {0xfffffff7, 0xfff, 0x5, 0x7}, {0xaea6, 0x8001, 0x3, 0x800}, {0x3, 0xf3f, 0x6, 0x3ff}, {0x9, 0x0, 0x1, 0xc}, {0x0, 0x7, 0x3b000000}, {0x6, 0x6, 0xfffffff7, 0x92}, {0x5, 0x9, 0xffff8000, 0xfffffffa}, {0x3, 0x3, 0xdd, 0x8000}, {0xfffffffa, 0x80000001, 0xdb, 0xffffffff}, {0x4, 0x2, 0x2, 0xfffffff9}, {0x5, 0x22a, 0x800, 0x8001}, {0x4, 0x1ffe0, 0x800, 0xe}, {0x6, 0x4, 0x101, 0x2}]}, 0x21e8) 09:15:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) [ 915.998451] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:09 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0xfffbfffd, 0x39555659, 0x1, @stepwise={0x5, 0x80000001, 0xffff, 0xff, 0xe994, 0x6}}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f66696c6530003d7c6f8ec8d564dc4f1d6d29bfbcb40262a90bf13e602a11"]) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) (async) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x88001) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) (async) r8 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r8, 0x0, 0x0) (async) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5388cce002c4e61b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r6, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x52}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000011) 09:15:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x5, 0x0, 0x0, @stepwise={0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x5, 0x0, 0x0, @stepwise={0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) 09:15:09 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 09:15:09 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) r2 = socket(0x1f, 0xa, 0x20) sendmsg$AUDIT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x800, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x10000, @mcast1, 0xffff8001}}}, 0x90) [ 916.079946] FAULT_INJECTION: forcing a failure. [ 916.079946] name failslab, interval 1, probability 0, space 0, times 0 [ 916.110421] CPU: 0 PID: 14083 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 916.118326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.127680] Call Trace: [ 916.130272] dump_stack+0x1b2/0x281 [ 916.133920] should_fail.cold+0x10a/0x149 [ 916.133946] should_failslab+0xd6/0x130 [ 916.133960] kmem_cache_alloc_node_trace+0x25a/0x400 [ 916.133974] __kmalloc_node+0x38/0x70 [ 916.133986] sbitmap_init_node+0x10c/0x3d0 [ 916.134002] blk_mq_realloc_hw_ctxs+0x59b/0xe00 [ 916.134023] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 916.134033] ? blkcg_init_queue+0x19f/0x410 [ 916.134044] ? blk_alloc_queue_node+0x82f/0xb40 [ 916.134056] blk_mq_init_queue+0x5a/0x90 09:15:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x9) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x68d1413f, 0x0, 0x4, 0x100000, 0xfffc, {0x77359400}, {0x7, 0xc, 0x20, 0x60, 0x1, 0x8, "b405e70b"}, 0x69b4, 0x1, {&(0x7f0000000080)=[{0x45, 0x5, {0x800}, 0x2}, {0xfb, 0x8001, {0x9c}, 0x7f}]}, 0x7ff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x1, "57bfd7d3559532365c4607000000905c32d9b28795c57e8505566cd3d3f7f886"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x400, 0x7f}) 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) r2 = socket(0x1f, 0xa, 0x20) sendmsg$AUDIT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x800, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x880) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e21, 0x10000, @mcast1, 0xffff8001}}}, 0x90) 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x464, 0x704, 0x70bd2b, 0x25dfdbfc, "d2e0409a654256bb13f9d0acebca541acb1857f49baf27426fefa77a631783adbf297669b0c8a83a0a6c6887215354a49a1b2817635d21e3d43cba5c94e5189f61b4a5b7cd417073d5e33173173ff6ffc00d80526c081a1c33ea6dec3af2c7e21ee85ca20ddc3a159f0a372f372c2b55fd3945380eb4a5f11f39a3c96a4f83b681798e4409598580a96f972fea4f3c621925f0fc27f184c305974ae36cbc54e9bdb979bac8ce4613f9b43c8f190f2014985852f7bdd849622e40c7", ["", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x1}}, 0x20) 09:15:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) [ 916.134067] loop_add+0x303/0x830 [ 916.134078] ? loop_queue_rq+0x280/0x280 [ 916.134085] ? loop_queue_work+0x21e0/0x21e0 [ 916.134099] loop_control_ioctl+0x11a/0x3f0 [ 916.134108] ? loop_lookup+0x190/0x190 [ 916.134116] ? SyS_write+0x1b7/0x210 [ 916.134127] ? loop_lookup+0x190/0x190 [ 916.134137] do_vfs_ioctl+0x75a/0xff0 [ 916.134148] ? lock_acquire+0x170/0x3f0 [ 916.134156] ? ioctl_preallocate+0x1a0/0x1a0 [ 916.134169] ? __fget+0x2df/0x460 [ 916.134180] ? do_vfs_ioctl+0xff0/0xff0 [ 916.134190] ? security_file_ioctl+0x83/0xb0 09:15:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 34) 09:15:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 09:15:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x5, 0x0, 0x0, @stepwise={0x0, 0x2}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x5, 0x0, 0x0, @stepwise={0x0, 0x2}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) [ 916.134200] SyS_ioctl+0x7f/0xb0 [ 916.134207] ? do_vfs_ioctl+0xff0/0xff0 [ 916.134218] do_syscall_64+0x1d5/0x640 [ 916.241207] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 916.241217] RIP: 0033:0x7f8002e8f059 [ 916.250104] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:15:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0xfffbfffd, 0x39555659, 0x1, @stepwise={0x5, 0x80000001, 0xffff, 0xff, 0xe994, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f66696c6530003d7c6f8ec8d564dc4f1d6d29bfbcb40262a90bf13e602a11"]) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x88001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) r8 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r8, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5388cce002c4e61b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r6, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x52}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000011) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0xfffbfffd, 0x39555659, 0x1, @stepwise={0x5, 0x80000001, 0xffff, 0xff, 0xe994, 0x6}}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f66696c6530003d7c6f8ec8d564dc4f1d6d29bfbcb40262a90bf13e602a11"]) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSGL2CALL(r2, 0x89e5, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x88001) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r8, 0x0, 0x0) (async) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5388cce002c4e61b}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r6, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8}, {0x8, 0x1, r8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x52}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '/dev/nbd#\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000011) (async) 09:15:10 executing program 4: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x2) [ 916.250116] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 09:15:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x5}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x81, 0xfffff387}}) 09:15:10 executing program 4: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x2) 09:15:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 35) [ 916.250122] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 916.250128] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.250133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.250139] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 916.328876] FAULT_INJECTION: forcing a failure. [ 916.328876] name failslab, interval 1, probability 0, space 0, times 0 [ 916.328889] CPU: 0 PID: 14132 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 916.328895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.328899] Call Trace: [ 916.328911] dump_stack+0x1b2/0x281 [ 916.328926] should_fail.cold+0x10a/0x149 [ 916.328941] should_failslab+0xd6/0x130 [ 916.328954] kmem_cache_alloc_node_trace+0x25a/0x400 [ 916.328971] blk_alloc_flush_queue+0x4f/0x2b0 [ 916.328984] blk_mq_realloc_hw_ctxs+0x6ab/0xe00 [ 916.329004] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 916.329014] ? blkcg_init_queue+0x19f/0x410 [ 916.329024] ? blk_alloc_queue_node+0x82f/0xb40 [ 916.329036] blk_mq_init_queue+0x5a/0x90 [ 916.329047] loop_add+0x303/0x830 [ 916.329057] ? loop_queue_rq+0x280/0x280 [ 916.329065] ? loop_queue_work+0x21e0/0x21e0 [ 916.329079] loop_control_ioctl+0x11a/0x3f0 [ 916.329088] ? loop_lookup+0x190/0x190 [ 916.329097] ? SyS_write+0x1b7/0x210 [ 916.329109] ? loop_lookup+0x190/0x190 [ 916.329119] do_vfs_ioctl+0x75a/0xff0 [ 916.329129] ? lock_acquire+0x170/0x3f0 [ 916.329139] ? ioctl_preallocate+0x1a0/0x1a0 [ 916.329151] ? __fget+0x2df/0x460 [ 916.329162] ? do_vfs_ioctl+0xff0/0xff0 [ 916.329173] ? security_file_ioctl+0x83/0xb0 [ 916.329183] SyS_ioctl+0x7f/0xb0 [ 916.329190] ? do_vfs_ioctl+0xff0/0xff0 [ 916.329201] do_syscall_64+0x1d5/0x640 [ 916.329216] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 916.329223] RIP: 0033:0x7f8002e8f059 [ 916.329229] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.329239] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 916.329244] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 916.329250] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.329255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.329261] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 916.365320] FAULT_INJECTION: forcing a failure. [ 916.365320] name failslab, interval 1, probability 0, space 0, times 0 [ 916.553428] CPU: 1 PID: 14141 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 916.553433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.553436] Call Trace: [ 916.553452] dump_stack+0x1b2/0x281 [ 916.553468] should_fail.cold+0x10a/0x149 [ 916.553482] should_failslab+0xd6/0x130 [ 916.553496] kmem_cache_alloc_node_trace+0x25a/0x400 [ 916.553509] __kmalloc_node+0x38/0x70 [ 916.553522] blk_alloc_flush_queue+0xf7/0x2b0 [ 916.553534] blk_mq_realloc_hw_ctxs+0x6ab/0xe00 [ 916.553553] blk_mq_init_allocated_queue+0x20c/0xfd0 [ 916.553562] ? blkcg_init_queue+0x19f/0x410 [ 916.553573] ? blk_alloc_queue_node+0x82f/0xb40 [ 916.553584] blk_mq_init_queue+0x5a/0x90 [ 916.553595] loop_add+0x303/0x830 [ 916.624777] ? loop_queue_rq+0x280/0x280 [ 916.624784] ? loop_queue_work+0x21e0/0x21e0 [ 916.624797] loop_control_ioctl+0x11a/0x3f0 [ 916.637552] ? loop_lookup+0x190/0x190 [ 916.637561] ? SyS_write+0x1b7/0x210 [ 916.637574] ? loop_lookup+0x190/0x190 [ 916.649004] do_vfs_ioctl+0x75a/0xff0 [ 916.652784] ? lock_acquire+0x170/0x3f0 [ 916.656737] ? ioctl_preallocate+0x1a0/0x1a0 [ 916.661259] ? __fget+0x2df/0x460 [ 916.664776] ? do_vfs_ioctl+0xff0/0xff0 [ 916.668726] ? security_file_ioctl+0x83/0xb0 [ 916.673117] SyS_ioctl+0x7f/0xb0 [ 916.676460] ? do_vfs_ioctl+0xff0/0xff0 [ 916.680509] do_syscall_64+0x1d5/0x640 [ 916.684379] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 916.689544] RIP: 0033:0x7f8002e8f059 [ 916.693233] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.700937] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 09:15:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async, rerun: 64) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x9) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x68d1413f, 0x0, 0x4, 0x100000, 0xfffc, {0x77359400}, {0x7, 0xc, 0x20, 0x60, 0x1, 0x8, "b405e70b"}, 0x69b4, 0x1, {&(0x7f0000000080)=[{0x45, 0x5, {0x800}, 0x2}, {0xfb, 0x8001, {0x9c}, 0x7f}]}, 0x7ff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x1, "57bfd7d3559532365c4607000000905c32d9b28795c57e8505566cd3d3f7f886"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x400, 0x7f}) 09:15:10 executing program 4: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x2) 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x464, 0x704, 0x70bd2b, 0x25dfdbfc, "d2e0409a654256bb13f9d0acebca541acb1857f49baf27426fefa77a631783adbf297669b0c8a83a0a6c6887215354a49a1b2817635d21e3d43cba5c94e5189f61b4a5b7cd417073d5e33173173ff6ffc00d80526c081a1c33ea6dec3af2c7e21ee85ca20ddc3a159f0a372f372c2b55fd3945380eb4a5f11f39a3c96a4f83b681798e4409598580a96f972fea4f3c621925f0fc27f184c305974ae36cbc54e9bdb979bac8ce4613f9b43c8f190f2014985852f7bdd849622e40c7", ["", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x1}}, 0x20) 09:15:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x5}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x81, 0xfffff387}}) 09:15:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @generic={0x0, "c700061b41f06e56b542d2a35736"}, @generic={0x0, "2e298455e8ffbce9292f3f29c53c"}, @phonet}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 36) [ 916.708193] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 916.715615] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.722865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.730110] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 09:15:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x5}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x81, 0xfffff387}}) 09:15:10 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000180)=0x9) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)=@multiplanar_mmap={0x68d1413f, 0x0, 0x4, 0x100000, 0xfffc, {0x77359400}, {0x7, 0xc, 0x20, 0x60, 0x1, 0x8, "b405e70b"}, 0x69b4, 0x1, {&(0x7f0000000080)=[{0x45, 0x5, {0x800}, 0x2}, {0xfb, 0x8001, {0x9c}, 0x7f}]}, 0x7ff}) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x1, "57bfd7d3559532365c4607000000905c32d9b28795c57e8505566cd3d3f7f886"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x400, 0x7f}) 09:15:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @generic={0x0, "c700061b41f06e56b542d2a35736"}, @generic={0x0, "2e298455e8ffbce9292f3f29c53c"}, @phonet}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x464, 0x704, 0x70bd2b, 0x25dfdbfc, "d2e0409a654256bb13f9d0acebca541acb1857f49baf27426fefa77a631783adbf297669b0c8a83a0a6c6887215354a49a1b2817635d21e3d43cba5c94e5189f61b4a5b7cd417073d5e33173173ff6ffc00d80526c081a1c33ea6dec3af2c7e21ee85ca20ddc3a159f0a372f372c2b55fd3945380eb4a5f11f39a3c96a4f83b681798e4409598580a96f972fea4f3c621925f0fc27f184c305974ae36cbc54e9bdb979bac8ce4613f9b43c8f190f2014985852f7bdd849622e40c7", ["", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x1}}, 0x20) 09:15:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) [ 916.810689] FAULT_INJECTION: forcing a failure. [ 916.810689] name failslab, interval 1, probability 0, space 0, times 0 [ 916.840176] CPU: 0 PID: 14173 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 916.848115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.848121] Call Trace: 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @win={{0x2e2b8cf1, 0x0, 0xffffffff, 0xffffffff}, 0x9, 0x2, &(0x7f0000000080)={{0x2, 0x100, 0x400, 0xe4d}, &(0x7f0000000040)={{0xf7, 0x9, 0x7, 0xb60}}}, 0x5, &(0x7f00000000c0)="1169147143d1ce908ac598f5b155c0c5292dde1ef2b3872bcc902ca5aa4720d85fcd57e2b6d7a6b2a72827530cc2d16930c4c5807e4595bfece4034e15a4ec90846793815ed973c457f9382b9d5b114b58cda5e3d12721071c81700b61c70db4f08de45f361c2e3354a18ed6b2db8219088f58acbbe5480dcf74798d22f137cce7045b94737236296b232817b01f84ed2274bd6cc1d431f068eadf771d6bcebe16", 0x4}}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x4) 09:15:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @win={{0x2e2b8cf1, 0x0, 0xffffffff, 0xffffffff}, 0x9, 0x2, &(0x7f0000000080)={{0x2, 0x100, 0x400, 0xe4d}, &(0x7f0000000040)={{0xf7, 0x9, 0x7, 0xb60}}}, 0x5, &(0x7f00000000c0)="1169147143d1ce908ac598f5b155c0c5292dde1ef2b3872bcc902ca5aa4720d85fcd57e2b6d7a6b2a72827530cc2d16930c4c5807e4595bfece4034e15a4ec90846793815ed973c457f9382b9d5b114b58cda5e3d12721071c81700b61c70db4f08de45f361c2e3354a18ed6b2db8219088f58acbbe5480dcf74798d22f137cce7045b94737236296b232817b01f84ed2274bd6cc1d431f068eadf771d6bcebe16", 0x4}}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x4) 09:15:10 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x2) [ 916.860062] dump_stack+0x1b2/0x281 [ 916.863694] should_fail.cold+0x10a/0x149 [ 916.868024] should_failslab+0xd6/0x130 [ 916.871998] kmem_cache_alloc_node_trace+0x25a/0x400 [ 916.877102] blk_mq_init_tags+0x5e/0x280 [ 916.881170] blk_mq_alloc_rq_map+0x90/0x220 [ 916.885497] blk_mq_sched_alloc_tags+0xaa/0x240 [ 916.890171] blk_mq_init_sched+0x18d/0x4a0 [ 916.894409] ? _raw_spin_unlock+0x29/0x40 [ 916.898564] elevator_init+0x2ee/0x410 [ 916.902460] blk_mq_sched_init+0x28/0x40 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @win={{0x2e2b8cf1, 0x0, 0xffffffff, 0xffffffff}, 0x9, 0x2, &(0x7f0000000080)={{0x2, 0x100, 0x400, 0xe4d}, &(0x7f0000000040)={{0xf7, 0x9, 0x7, 0xb60}}}, 0x5, &(0x7f00000000c0)="1169147143d1ce908ac598f5b155c0c5292dde1ef2b3872bcc902ca5aa4720d85fcd57e2b6d7a6b2a72827530cc2d16930c4c5807e4595bfece4034e15a4ec90846793815ed973c457f9382b9d5b114b58cda5e3d12721071c81700b61c70db4f08de45f361c2e3354a18ed6b2db8219088f58acbbe5480dcf74798d22f137cce7045b94737236296b232817b01f84ed2274bd6cc1d431f068eadf771d6bcebe16", 0x4}}) (async, rerun: 64) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0x4) [ 916.906523] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 916.911630] blk_mq_init_queue+0x5a/0x90 [ 916.915689] loop_add+0x303/0x830 [ 916.919138] ? loop_queue_rq+0x280/0x280 [ 916.923192] ? loop_queue_work+0x21e0/0x21e0 [ 916.927606] loop_control_ioctl+0x11a/0x3f0 [ 916.931928] ? loop_lookup+0x190/0x190 [ 916.935813] ? SyS_write+0x1b7/0x210 [ 916.939523] ? loop_lookup+0x190/0x190 [ 916.943409] do_vfs_ioctl+0x75a/0xff0 [ 916.947216] ? lock_acquire+0x170/0x3f0 [ 916.951186] ? ioctl_preallocate+0x1a0/0x1a0 [ 916.955684] ? __fget+0x2df/0x460 [ 916.959141] ? do_vfs_ioctl+0xff0/0xff0 [ 916.963109] ? security_file_ioctl+0x83/0xb0 [ 916.967513] SyS_ioctl+0x7f/0xb0 [ 916.970874] ? do_vfs_ioctl+0xff0/0xff0 [ 916.974847] do_syscall_64+0x1d5/0x640 [ 916.978746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 916.978755] RIP: 0033:0x7f8002e8f059 [ 916.987636] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 916.987646] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 09:15:10 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 37) 09:15:10 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x2) 09:15:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x2, @sdr={0x30314752}}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x400000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x5875, 0xe2, &(0x7f00000000c0)={0x1, 0x10, 0x0, 0xa0, 0x20}, 0x8, 0x7, 0xfff, 0x0, 0xffffa8c0, 0x4, &(0x7f0000000100)="8a592d1c4fa0cf1caeba763a429a99205cdfe3a7f28ef42155e1b7463e9a3ad61ba7aa5d78b209b7fb133d51dbf3da772f97e853d0ac5392fa784507576fdc3a0cf891a30f611070f34b639de6aa2f9590945f3ded2dd5a8ae15a9042e"}) read$eventfd(r1, &(0x7f0000000080), 0x8) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4, 0x400) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0xf}, 0x5, 0x0, &(0x7f0000000200)="68c3c7e7e9e245966654ecccdb2427a2629abb76808454e4d61d350cd1f92674df63f83d95c3064f60d3772c99364fe0278351249d263bdc19f33c3536547be1b402b6c4c6345937be827bb171a5ccd2446725bd9706d1f6", 0x58, 0x5, 0x800, 0x2a, 0x100, 0x7ff, &(0x7f0000000380)="f3151530fd6304942d3106ea", [{0x0, 0x0, 0x20}, {0x5, 0x66c4, 0xfffffffa}, {0x6, 0x8000, 0x6}, {0x5, 0x0, 0x7fffffff}, {0x8, 0x80000001, 0x5}, {0x81, 0x767, 0x2aa}, {0x4, 0x8, 0x8}, {0x401, 0x2, 0x100}, {0x9, 0x80000001, 0x800}, {0x6, 0x80, 0x10000}, {0x1e51200, 0x3, 0xd19}, {0x2, 0x9, 0x1}, {0x40, 0xfff, 0x8}, {0x5, 0x4, 0x4}, {0xfffffff7, 0xaf94, 0x7}, {0x80000000, 0x2, 0xe7}, {0x1c3, 0x10001, 0xfff}, {0xffff, 0x7ff, 0x401}, {0x1, 0x1f, 0x5}, {0x1, 0x6, 0x5}, {0x7, 0xfffffbff, 0x81}, {0x8, 0x2, 0x6}, {0x7fffffff, 0x69e5, 0x97f3}, {0x33, 0x9, 0x8}, {0x8000, 0x6ce, 0x8}, {0xffffffe1, 0x2, 0x401}, {0x0, 0xfffeffff}, {0xffff8001, 0x200, 0xfffffffe}, {0x5, 0x9, 0x8001}, {0x93, 0x0, 0x66}, {0x4, 0x776f1d24, 0x7}, {0x6d, 0x6, 0x9}, {0x81, 0x7, 0x80}, {0x76, 0x8, 0x2}, {0x1000, 0xfff, 0x8}, {0x4, 0x1, 0xffffffff}, {0x8, 0x2, 0x45}, {0xfffffffd, 0x7f, 0x1}, {0x1, 0x3, 0x1}, {0x1, 0x0, 0x8e}, {0x2, 0x80000001, 0x73}, {0x3f, 0x8000, 0x2}]}) 09:15:10 executing program 3: memfd_create(&(0x7f00000000c0)='{\x00', 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) 09:15:10 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @generic={0x0, "c700061b41f06e56b542d2a35736"}, @generic={0x0, "2e298455e8ffbce9292f3f29c53c"}, @phonet}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @generic={0x0, "c700061b41f06e56b542d2a35736"}, @generic={0x0, "2e298455e8ffbce9292f3f29c53c"}, @phonet}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) 09:15:10 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x2) [ 916.987651] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 916.987656] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 916.987661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.987665] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:10 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) [ 917.069564] FAULT_INJECTION: forcing a failure. [ 917.069564] name failslab, interval 1, probability 0, space 0, times 0 [ 917.091224] CPU: 0 PID: 14214 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 917.099129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.108488] Call Trace: [ 917.108503] dump_stack+0x1b2/0x281 [ 917.108517] should_fail.cold+0x10a/0x149 09:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x2, @sdr={0x30314752}}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x400000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x5875, 0xe2, &(0x7f00000000c0)={0x1, 0x10, 0x0, 0xa0, 0x20}, 0x8, 0x7, 0xfff, 0x0, 0xffffa8c0, 0x4, &(0x7f0000000100)="8a592d1c4fa0cf1caeba763a429a99205cdfe3a7f28ef42155e1b7463e9a3ad61ba7aa5d78b209b7fb133d51dbf3da772f97e853d0ac5392fa784507576fdc3a0cf891a30f611070f34b639de6aa2f9590945f3ded2dd5a8ae15a9042e"}) read$eventfd(r1, &(0x7f0000000080), 0x8) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4, 0x400) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0xf}, 0x5, 0x0, &(0x7f0000000200)="68c3c7e7e9e245966654ecccdb2427a2629abb76808454e4d61d350cd1f92674df63f83d95c3064f60d3772c99364fe0278351249d263bdc19f33c3536547be1b402b6c4c6345937be827bb171a5ccd2446725bd9706d1f6", 0x58, 0x5, 0x800, 0x2a, 0x100, 0x7ff, &(0x7f0000000380)="f3151530fd6304942d3106ea", [{0x0, 0x0, 0x20}, {0x5, 0x66c4, 0xfffffffa}, {0x6, 0x8000, 0x6}, {0x5, 0x0, 0x7fffffff}, {0x8, 0x80000001, 0x5}, {0x81, 0x767, 0x2aa}, {0x4, 0x8, 0x8}, {0x401, 0x2, 0x100}, {0x9, 0x80000001, 0x800}, {0x6, 0x80, 0x10000}, {0x1e51200, 0x3, 0xd19}, {0x2, 0x9, 0x1}, {0x40, 0xfff, 0x8}, {0x5, 0x4, 0x4}, {0xfffffff7, 0xaf94, 0x7}, {0x80000000, 0x2, 0xe7}, {0x1c3, 0x10001, 0xfff}, {0xffff, 0x7ff, 0x401}, {0x1, 0x1f, 0x5}, {0x1, 0x6, 0x5}, {0x7, 0xfffffbff, 0x81}, {0x8, 0x2, 0x6}, {0x7fffffff, 0x69e5, 0x97f3}, {0x33, 0x9, 0x8}, {0x8000, 0x6ce, 0x8}, {0xffffffe1, 0x2, 0x401}, {0x0, 0xfffeffff}, {0xffff8001, 0x200, 0xfffffffe}, {0x5, 0x9, 0x8001}, {0x93, 0x0, 0x66}, {0x4, 0x776f1d24, 0x7}, {0x6d, 0x6, 0x9}, {0x81, 0x7, 0x80}, {0x76, 0x8, 0x2}, {0x1000, 0xfff, 0x8}, {0x4, 0x1, 0xffffffff}, {0x8, 0x2, 0x45}, {0xfffffffd, 0x7f, 0x1}, {0x1, 0x3, 0x1}, {0x1, 0x0, 0x8e}, {0x2, 0x80000001, 0x73}, {0x3f, 0x8000, 0x2}]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x2, @sdr={0x30314752}}) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x400000) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x5875, 0xe2, &(0x7f00000000c0)={0x1, 0x10, 0x0, 0xa0, 0x20}, 0x8, 0x7, 0xfff, 0x0, 0xffffa8c0, 0x4, &(0x7f0000000100)="8a592d1c4fa0cf1caeba763a429a99205cdfe3a7f28ef42155e1b7463e9a3ad61ba7aa5d78b209b7fb133d51dbf3da772f97e853d0ac5392fa784507576fdc3a0cf891a30f611070f34b639de6aa2f9590945f3ded2dd5a8ae15a9042e"}) (async) read$eventfd(r1, &(0x7f0000000080), 0x8) (async) syz_open_dev$vcsn(&(0x7f00000001c0), 0x4, 0x400) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0xf}, 0x5, 0x0, &(0x7f0000000200)="68c3c7e7e9e245966654ecccdb2427a2629abb76808454e4d61d350cd1f92674df63f83d95c3064f60d3772c99364fe0278351249d263bdc19f33c3536547be1b402b6c4c6345937be827bb171a5ccd2446725bd9706d1f6", 0x58, 0x5, 0x800, 0x2a, 0x100, 0x7ff, &(0x7f0000000380)="f3151530fd6304942d3106ea", [{0x0, 0x0, 0x20}, {0x5, 0x66c4, 0xfffffffa}, {0x6, 0x8000, 0x6}, {0x5, 0x0, 0x7fffffff}, {0x8, 0x80000001, 0x5}, {0x81, 0x767, 0x2aa}, {0x4, 0x8, 0x8}, {0x401, 0x2, 0x100}, {0x9, 0x80000001, 0x800}, {0x6, 0x80, 0x10000}, {0x1e51200, 0x3, 0xd19}, {0x2, 0x9, 0x1}, {0x40, 0xfff, 0x8}, {0x5, 0x4, 0x4}, {0xfffffff7, 0xaf94, 0x7}, {0x80000000, 0x2, 0xe7}, {0x1c3, 0x10001, 0xfff}, {0xffff, 0x7ff, 0x401}, {0x1, 0x1f, 0x5}, {0x1, 0x6, 0x5}, {0x7, 0xfffffbff, 0x81}, {0x8, 0x2, 0x6}, {0x7fffffff, 0x69e5, 0x97f3}, {0x33, 0x9, 0x8}, {0x8000, 0x6ce, 0x8}, {0xffffffe1, 0x2, 0x401}, {0x0, 0xfffeffff}, {0xffff8001, 0x200, 0xfffffffe}, {0x5, 0x9, 0x8001}, {0x93, 0x0, 0x66}, {0x4, 0x776f1d24, 0x7}, {0x6d, 0x6, 0x9}, {0x81, 0x7, 0x80}, {0x76, 0x8, 0x2}, {0x1000, 0xfff, 0x8}, {0x4, 0x1, 0xffffffff}, {0x8, 0x2, 0x45}, {0xfffffffd, 0x7f, 0x1}, {0x1, 0x3, 0x1}, {0x1, 0x0, 0x8e}, {0x2, 0x80000001, 0x73}, {0x3f, 0x8000, 0x2}]}) (async) 09:15:11 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x2, @sdr={0x30314752}}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x400000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x5875, 0xe2, &(0x7f00000000c0)={0x1, 0x10, 0x0, 0xa0, 0x20}, 0x8, 0x7, 0xfff, 0x0, 0xffffa8c0, 0x4, &(0x7f0000000100)="8a592d1c4fa0cf1caeba763a429a99205cdfe3a7f28ef42155e1b7463e9a3ad61ba7aa5d78b209b7fb133d51dbf3da772f97e853d0ac5392fa784507576fdc3a0cf891a30f611070f34b639de6aa2f9590945f3ded2dd5a8ae15a9042e"}) read$eventfd(r1, &(0x7f0000000080), 0x8) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4, 0x400) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0xf}, 0x5, 0x0, &(0x7f0000000200)="68c3c7e7e9e245966654ecccdb2427a2629abb76808454e4d61d350cd1f92674df63f83d95c3064f60d3772c99364fe0278351249d263bdc19f33c3536547be1b402b6c4c6345937be827bb171a5ccd2446725bd9706d1f6", 0x58, 0x5, 0x800, 0x2a, 0x100, 0x7ff, &(0x7f0000000380)="f3151530fd6304942d3106ea", [{0x0, 0x0, 0x20}, {0x5, 0x66c4, 0xfffffffa}, {0x6, 0x8000, 0x6}, {0x5, 0x0, 0x7fffffff}, {0x8, 0x80000001, 0x5}, {0x81, 0x767, 0x2aa}, {0x4, 0x8, 0x8}, {0x401, 0x2, 0x100}, {0x9, 0x80000001, 0x800}, {0x6, 0x80, 0x10000}, {0x1e51200, 0x3, 0xd19}, {0x2, 0x9, 0x1}, {0x40, 0xfff, 0x8}, {0x5, 0x4, 0x4}, {0xfffffff7, 0xaf94, 0x7}, {0x80000000, 0x2, 0xe7}, {0x1c3, 0x10001, 0xfff}, {0xffff, 0x7ff, 0x401}, {0x1, 0x1f, 0x5}, {0x1, 0x6, 0x5}, {0x7, 0xfffffbff, 0x81}, {0x8, 0x2, 0x6}, {0x7fffffff, 0x69e5, 0x97f3}, {0x33, 0x9, 0x8}, {0x8000, 0x6ce, 0x8}, {0xffffffe1, 0x2, 0x401}, {0x0, 0xfffeffff}, {0xffff8001, 0x200, 0xfffffffe}, {0x5, 0x9, 0x8001}, {0x93, 0x0, 0x66}, {0x4, 0x776f1d24, 0x7}, {0x6d, 0x6, 0x9}, {0x81, 0x7, 0x80}, {0x76, 0x8, 0x2}, {0x1000, 0xfff, 0x8}, {0x4, 0x1, 0xffffffff}, {0x8, 0x2, 0x45}, {0xfffffffd, 0x7f, 0x1}, {0x1, 0x3, 0x1}, {0x1, 0x0, 0x8e}, {0x2, 0x80000001, 0x73}, {0x3f, 0x8000, 0x2}]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x2, @sdr={0x30314752}}) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x400000) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x5875, 0xe2, &(0x7f00000000c0)={0x1, 0x10, 0x0, 0xa0, 0x20}, 0x8, 0x7, 0xfff, 0x0, 0xffffa8c0, 0x4, &(0x7f0000000100)="8a592d1c4fa0cf1caeba763a429a99205cdfe3a7f28ef42155e1b7463e9a3ad61ba7aa5d78b209b7fb133d51dbf3da772f97e853d0ac5392fa784507576fdc3a0cf891a30f611070f34b639de6aa2f9590945f3ded2dd5a8ae15a9042e"}) (async) read$eventfd(r1, &(0x7f0000000080), 0x8) (async) syz_open_dev$vcsn(&(0x7f00000001c0), 0x4, 0x400) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_iso={0x0, {0xf}, 0x5, 0x0, &(0x7f0000000200)="68c3c7e7e9e245966654ecccdb2427a2629abb76808454e4d61d350cd1f92674df63f83d95c3064f60d3772c99364fe0278351249d263bdc19f33c3536547be1b402b6c4c6345937be827bb171a5ccd2446725bd9706d1f6", 0x58, 0x5, 0x800, 0x2a, 0x100, 0x7ff, &(0x7f0000000380)="f3151530fd6304942d3106ea", [{0x0, 0x0, 0x20}, {0x5, 0x66c4, 0xfffffffa}, {0x6, 0x8000, 0x6}, {0x5, 0x0, 0x7fffffff}, {0x8, 0x80000001, 0x5}, {0x81, 0x767, 0x2aa}, {0x4, 0x8, 0x8}, {0x401, 0x2, 0x100}, {0x9, 0x80000001, 0x800}, {0x6, 0x80, 0x10000}, {0x1e51200, 0x3, 0xd19}, {0x2, 0x9, 0x1}, {0x40, 0xfff, 0x8}, {0x5, 0x4, 0x4}, {0xfffffff7, 0xaf94, 0x7}, {0x80000000, 0x2, 0xe7}, {0x1c3, 0x10001, 0xfff}, {0xffff, 0x7ff, 0x401}, {0x1, 0x1f, 0x5}, {0x1, 0x6, 0x5}, {0x7, 0xfffffbff, 0x81}, {0x8, 0x2, 0x6}, {0x7fffffff, 0x69e5, 0x97f3}, {0x33, 0x9, 0x8}, {0x8000, 0x6ce, 0x8}, {0xffffffe1, 0x2, 0x401}, {0x0, 0xfffeffff}, {0xffff8001, 0x200, 0xfffffffe}, {0x5, 0x9, 0x8001}, {0x93, 0x0, 0x66}, {0x4, 0x776f1d24, 0x7}, {0x6d, 0x6, 0x9}, {0x81, 0x7, 0x80}, {0x76, 0x8, 0x2}, {0x1000, 0xfff, 0x8}, {0x4, 0x1, 0xffffffff}, {0x8, 0x2, 0x45}, {0xfffffffd, 0x7f, 0x1}, {0x1, 0x3, 0x1}, {0x1, 0x0, 0x8e}, {0x2, 0x80000001, 0x73}, {0x3f, 0x8000, 0x2}]}) (async) [ 917.118858] should_failslab+0xd6/0x130 [ 917.122848] kmem_cache_alloc_node_trace+0x25a/0x400 [ 917.127956] __kmalloc_node+0x38/0x70 [ 917.131771] sbitmap_init_node+0x10c/0x3d0 [ 917.131784] sbitmap_queue_init_node+0x37/0x5d0 [ 917.140697] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 917.140710] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 917.150984] blk_mq_init_tags+0xf4/0x280 [ 917.155056] blk_mq_alloc_rq_map+0x90/0x220 [ 917.159376] blk_mq_sched_alloc_tags+0xaa/0x240 [ 917.164048] blk_mq_init_sched+0x18d/0x4a0 09:15:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 09:15:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 38) 09:15:11 executing program 3: memfd_create(&(0x7f00000000c0)='{\x00', 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) memfd_create(&(0x7f00000000c0)='{\x00', 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) (async) 09:15:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) [ 917.168280] ? _raw_spin_unlock+0x29/0x40 [ 917.172434] elevator_init+0x2ee/0x410 [ 917.176320] blk_mq_sched_init+0x28/0x40 [ 917.180389] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 917.180408] blk_mq_init_queue+0x5a/0x90 [ 917.180419] loop_add+0x303/0x830 [ 917.180431] ? loop_queue_rq+0x280/0x280 09:15:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 09:15:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) [ 917.180438] ? loop_queue_work+0x21e0/0x21e0 09:15:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 09:15:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 39) 09:15:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) 09:15:11 executing program 2: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x4, 0x7fffffff}}) socket$nl_audit(0x10, 0x3, 0x9) [ 917.180452] loop_control_ioctl+0x11a/0x3f0 [ 917.180460] ? loop_lookup+0x190/0x190 [ 917.180470] ? SyS_write+0x1b7/0x210 [ 917.180481] ? loop_lookup+0x190/0x190 [ 917.180490] do_vfs_ioctl+0x75a/0xff0 [ 917.180501] ? lock_acquire+0x170/0x3f0 [ 917.180510] ? ioctl_preallocate+0x1a0/0x1a0 [ 917.180523] ? __fget+0x2df/0x460 [ 917.180534] ? do_vfs_ioctl+0xff0/0xff0 [ 917.180546] ? security_file_ioctl+0x83/0xb0 [ 917.180556] SyS_ioctl+0x7f/0xb0 [ 917.180564] ? do_vfs_ioctl+0xff0/0xff0 [ 917.180576] do_syscall_64+0x1d5/0x640 [ 917.180592] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 917.180600] RIP: 0033:0x7f8002e8f059 [ 917.180606] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.180617] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 917.180623] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 917.180628] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.180633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 917.180639] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 917.256950] FAULT_INJECTION: forcing a failure. [ 917.256950] name failslab, interval 1, probability 0, space 0, times 0 [ 917.256963] CPU: 1 PID: 14254 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 917.256969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.256973] Call Trace: [ 917.256986] dump_stack+0x1b2/0x281 [ 917.257001] should_fail.cold+0x10a/0x149 [ 917.257016] should_failslab+0xd6/0x130 [ 917.257033] kmem_cache_alloc_node_trace+0x25a/0x400 [ 917.257049] sbitmap_queue_init_node+0x27f/0x5d0 [ 917.257062] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 917.257077] blk_mq_init_tags+0xf4/0x280 [ 917.257089] blk_mq_alloc_rq_map+0x90/0x220 [ 917.257103] blk_mq_sched_alloc_tags+0xaa/0x240 [ 917.257115] blk_mq_init_sched+0x18d/0x4a0 [ 917.257124] ? _raw_spin_unlock+0x29/0x40 [ 917.257139] elevator_init+0x2ee/0x410 [ 917.257149] blk_mq_sched_init+0x28/0x40 [ 917.257160] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 917.257176] blk_mq_init_queue+0x5a/0x90 [ 917.257187] loop_add+0x303/0x830 [ 917.257198] ? loop_queue_rq+0x280/0x280 [ 917.257205] ? loop_queue_work+0x21e0/0x21e0 [ 917.257219] loop_control_ioctl+0x11a/0x3f0 [ 917.257228] ? loop_lookup+0x190/0x190 [ 917.257236] ? SyS_write+0x1b7/0x210 [ 917.257249] ? loop_lookup+0x190/0x190 [ 917.257258] do_vfs_ioctl+0x75a/0xff0 [ 917.257268] ? lock_acquire+0x170/0x3f0 [ 917.257277] ? ioctl_preallocate+0x1a0/0x1a0 [ 917.257290] ? __fget+0x2df/0x460 [ 917.257301] ? do_vfs_ioctl+0xff0/0xff0 [ 917.257312] ? security_file_ioctl+0x83/0xb0 [ 917.257330] SyS_ioctl+0x7f/0xb0 [ 917.257338] ? do_vfs_ioctl+0xff0/0xff0 [ 917.257350] do_syscall_64+0x1d5/0x640 [ 917.257366] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 917.257374] RIP: 0033:0x7f8002e8f059 [ 917.257379] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.257390] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 917.257395] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 917.257400] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.257405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 917.257411] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 917.307079] FAULT_INJECTION: forcing a failure. [ 917.307079] name failslab, interval 1, probability 0, space 0, times 0 [ 917.307091] CPU: 1 PID: 14267 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 917.307098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.307101] Call Trace: [ 917.307115] dump_stack+0x1b2/0x281 [ 917.307132] should_fail.cold+0x10a/0x149 [ 917.307147] should_failslab+0xd6/0x130 [ 917.307159] kmem_cache_alloc_node_trace+0x25a/0x400 [ 917.307174] sbitmap_queue_init_node+0x27f/0x5d0 [ 917.307187] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 917.307203] blk_mq_init_tags+0x14b/0x280 [ 917.307216] blk_mq_alloc_rq_map+0x90/0x220 [ 917.307229] blk_mq_sched_alloc_tags+0xaa/0x240 [ 917.307242] blk_mq_init_sched+0x18d/0x4a0 [ 917.307251] ? _raw_spin_unlock+0x29/0x40 [ 917.307266] elevator_init+0x2ee/0x410 [ 917.307277] blk_mq_sched_init+0x28/0x40 [ 917.307288] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 917.307304] blk_mq_init_queue+0x5a/0x90 [ 917.307323] loop_add+0x303/0x830 [ 917.307334] ? loop_queue_rq+0x280/0x280 [ 917.307343] ? loop_queue_work+0x21e0/0x21e0 [ 917.307358] loop_control_ioctl+0x11a/0x3f0 [ 917.307367] ? loop_lookup+0x190/0x190 [ 917.307377] ? SyS_write+0x1b7/0x210 [ 917.307391] ? loop_lookup+0x190/0x190 [ 917.307402] do_vfs_ioctl+0x75a/0xff0 [ 917.307413] ? lock_acquire+0x170/0x3f0 [ 917.307423] ? ioctl_preallocate+0x1a0/0x1a0 [ 917.307440] ? __fget+0x2df/0x460 [ 917.307451] ? do_vfs_ioctl+0xff0/0xff0 [ 917.307462] ? security_file_ioctl+0x83/0xb0 [ 917.307472] SyS_ioctl+0x7f/0xb0 [ 917.307480] ? do_vfs_ioctl+0xff0/0xff0 [ 917.307492] do_syscall_64+0x1d5/0x640 [ 917.307507] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 917.307515] RIP: 0033:0x7f8002e8f059 [ 917.307520] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.307530] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 09:15:11 executing program 5: socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_userptr={0x3ff, 0x2, 0x4, 0xe000, 0x40, {0x77359400}, {0x4, 0xc, 0x9, 0xf3, 0x0, 0x1, "d1a2c995"}, 0x0, 0x2, {&(0x7f00000001c0)=[{0x3, 0x80000001, {&(0x7f0000000140)}}, {0x94, 0x5, {&(0x7f0000000180)}, 0x800}]}, 0x100}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x74048, 0x1, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0x1, 0x6, 0xc5, "6708e531"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x882, 0x8, {0x7}, 0x9}, {0x7, 0xcc46, {0x9}, 0x7}]}, 0xdc3}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:11 executing program 3: memfd_create(&(0x7f00000000c0)='{\x00', 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)) 09:15:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 40) 09:15:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 09:15:11 executing program 2: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x4, 0x7fffffff}}) (async) socket$nl_audit(0x10, 0x3, 0x9) 09:15:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) [ 917.307536] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 917.307542] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.307547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 917.307553] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:11 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)) 09:15:11 executing program 5: socket$nl_audit(0x10, 0x3, 0x9) (async) r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_userptr={0x3ff, 0x2, 0x4, 0xe000, 0x40, {0x77359400}, {0x4, 0xc, 0x9, 0xf3, 0x0, 0x1, "d1a2c995"}, 0x0, 0x2, {&(0x7f00000001c0)=[{0x3, 0x80000001, {&(0x7f0000000140)}}, {0x94, 0x5, {&(0x7f0000000180)}, 0x800}]}, 0x100}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x74048, 0x1, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0x1, 0x6, 0xc5, "6708e531"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x882, 0x8, {0x7}, 0x9}, {0x7, 0xcc46, {0x9}, 0x7}]}, 0xdc3}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:11 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="0100eeff0000000093669f20", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) r2 = socket$inet_sctp(0x2, 0x4, 0x84) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xffffffff, 0x48524742, 0x1, @stepwise={0x4, 0x7fffffff, 0x20, 0x1000, 0x7}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) [ 917.868303] FAULT_INJECTION: forcing a failure. [ 917.868303] name failslab, interval 1, probability 0, space 0, times 0 [ 917.887903] CPU: 1 PID: 14277 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 917.895899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.905261] Call Trace: 09:15:11 executing program 2: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x4, 0x7fffffff}}) socket$nl_audit(0x10, 0x3, 0x9) 09:15:11 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_userptr={0x3ff, 0x2, 0x4, 0xe000, 0x40, {0x77359400}, {0x4, 0xc, 0x9, 0xf3, 0x0, 0x1, "d1a2c995"}, 0x0, 0x2, {&(0x7f00000001c0)=[{0x3, 0x80000001, {&(0x7f0000000140)}}, {0x94, 0x5, {&(0x7f0000000180)}, 0x800}]}, 0x100}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x74048, 0x1, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0x1, 0x6, 0xc5, "6708e531"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x882, 0x8, {0x7}, 0x9}, {0x7, 0xcc46, {0x9}, 0x7}]}, 0xdc3}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) [ 917.905278] dump_stack+0x1b2/0x281 09:15:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 41) 09:15:11 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x63ea, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x480000, 0x5}}) [ 917.905293] should_fail.cold+0x10a/0x149 [ 917.905306] should_failslab+0xd6/0x130 [ 917.905319] kmem_cache_alloc_node_trace+0x25a/0x400 09:15:11 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r2, 0x9) 09:15:11 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getown(r2, 0x9) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) fcntl$getown(r2, 0x9) (async) [ 917.905332] __kmalloc_node+0x38/0x70 [ 917.905345] blk_mq_alloc_rq_map+0xd2/0x220 [ 917.905358] blk_mq_sched_alloc_tags+0xaa/0x240 [ 917.905371] blk_mq_init_sched+0x18d/0x4a0 [ 917.905381] ? _raw_spin_unlock+0x29/0x40 [ 917.905397] elevator_init+0x2ee/0x410 [ 917.905408] blk_mq_sched_init+0x28/0x40 [ 917.905418] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 917.905435] blk_mq_init_queue+0x5a/0x90 [ 917.905446] loop_add+0x303/0x830 [ 917.905457] ? loop_queue_rq+0x280/0x280 [ 917.905464] ? loop_queue_work+0x21e0/0x21e0 09:15:11 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) fcntl$getown(r2, 0x9) [ 917.905478] loop_control_ioctl+0x11a/0x3f0 [ 917.905488] ? loop_lookup+0x190/0x190 [ 917.905497] ? SyS_write+0x1b7/0x210 [ 917.905509] ? loop_lookup+0x190/0x190 [ 917.905519] do_vfs_ioctl+0x75a/0xff0 [ 917.905531] ? lock_acquire+0x170/0x3f0 [ 917.905541] ? ioctl_preallocate+0x1a0/0x1a0 [ 917.905554] ? __fget+0x2df/0x460 [ 917.905564] ? do_vfs_ioctl+0xff0/0xff0 [ 917.905576] ? security_file_ioctl+0x83/0xb0 [ 917.905586] SyS_ioctl+0x7f/0xb0 [ 917.905594] ? do_vfs_ioctl+0xff0/0xff0 [ 917.905605] do_syscall_64+0x1d5/0x640 [ 917.905620] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 917.905629] RIP: 0033:0x7f8002e8f059 [ 917.905634] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.905644] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 917.905650] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 917.905656] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.905661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:15:12 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0xe8, 0x13, 0x800, 0x70bd2d, 0x25dfdbff, {{'cbc-aes-aesni\x00'}, '\x00', '\x00', 0x2000, 0x400}, [{0x8, 0x1, 0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x85800000, 0x3, 0x3, {0x6, @raw_data="234d330a40c6123a0bb12b6c5b5a0d53efe846a366d6f75867589cffbe6092623ec50c30de551a0a90168447264d47f7d5b7d72e32f380b9d9c8230f0cb7e49ba138c30761afaaa09a8ceaaec866eeb54e8a05b2d868afdd09660b9b5ee0ae8b5b1dc8750c44da9cb7c09b8e069486a1194e59cba4a5d43d6b94a4ec0be6e6131b170a4a6cd0411ced11be6e7c0bfd30f330187b60439feac1b4d41b670a95a0eb6f79e1828f280a984fef4c9bc4cdee3929c62e259b0286a0c573a2a5d52d054ece71dcab27fc70"}, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 917.905667] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 917.997206] FAULT_INJECTION: forcing a failure. [ 917.997206] name failslab, interval 1, probability 0, space 0, times 0 [ 917.997218] CPU: 0 PID: 14303 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 917.997224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.997227] Call Trace: [ 917.997242] dump_stack+0x1b2/0x281 [ 917.997257] should_fail.cold+0x10a/0x149 [ 917.997279] should_failslab+0xd6/0x130 [ 917.997294] kmem_cache_alloc_node_trace+0x25a/0x400 [ 917.997308] __kmalloc_node+0x38/0x70 [ 917.997320] blk_mq_alloc_rq_map+0x113/0x220 [ 917.997332] blk_mq_sched_alloc_tags+0xaa/0x240 [ 917.997346] blk_mq_init_sched+0x18d/0x4a0 [ 917.997355] ? _raw_spin_unlock+0x29/0x40 [ 917.997370] elevator_init+0x2ee/0x410 [ 917.997379] blk_mq_sched_init+0x28/0x40 [ 917.997389] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 917.997404] blk_mq_init_queue+0x5a/0x90 [ 917.997414] loop_add+0x303/0x830 [ 917.997423] ? loop_queue_rq+0x280/0x280 [ 917.997430] ? loop_queue_work+0x21e0/0x21e0 [ 917.997443] loop_control_ioctl+0x11a/0x3f0 [ 917.997451] ? loop_lookup+0x190/0x190 [ 917.997458] ? SyS_write+0x1b7/0x210 [ 917.997469] ? loop_lookup+0x190/0x190 [ 917.997478] do_vfs_ioctl+0x75a/0xff0 [ 917.997487] ? lock_acquire+0x170/0x3f0 [ 917.997497] ? ioctl_preallocate+0x1a0/0x1a0 [ 917.997510] ? __fget+0x2df/0x460 [ 917.997520] ? do_vfs_ioctl+0xff0/0xff0 [ 917.997530] ? security_file_ioctl+0x83/0xb0 [ 917.997541] SyS_ioctl+0x7f/0xb0 [ 918.292302] ? do_vfs_ioctl+0xff0/0xff0 [ 918.292314] do_syscall_64+0x1d5/0x640 [ 918.292329] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 918.305342] RIP: 0033:0x7f8002e8f059 [ 918.305347] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.316788] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 918.316794] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 918.316799] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.316807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 09:15:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="0100eeff0000000093669f20", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x4, 0x84) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xffffffff, 0x48524742, 0x1, @stepwise={0x4, 0x7fffffff, 0x20, 0x1000, 0x7}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) 09:15:12 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x63ea, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x480000, 0x5}}) 09:15:12 executing program 5: socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_userptr={0x3ff, 0x2, 0x4, 0xe000, 0x40, {0x77359400}, {0x4, 0xc, 0x9, 0xf3, 0x0, 0x1, "d1a2c995"}, 0x0, 0x2, {&(0x7f00000001c0)=[{0x3, 0x80000001, {&(0x7f0000000140)}}, {0x94, 0x5, {&(0x7f0000000180)}, 0x800}]}, 0x100}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x74048, 0x1, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0x1, 0x6, 0xc5, "6708e531"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x882, 0x8, {0x7}, 0x9}, {0x7, 0xcc46, {0x9}, 0x7}]}, 0xdc3}) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) socket$nl_audit(0x10, 0x3, 0x9) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_userptr={0x3ff, 0x2, 0x4, 0xe000, 0x40, {0x77359400}, {0x4, 0xc, 0x9, 0xf3, 0x0, 0x1, "d1a2c995"}, 0x0, 0x2, {&(0x7f00000001c0)=[{0x3, 0x80000001, {&(0x7f0000000140)}}, {0x94, 0x5, {&(0x7f0000000180)}, 0x800}]}, 0x100}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x13f, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r4, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x8, 0x0, 0x4, 0x74048, 0x1, {0x0, 0x2710}, {0x3, 0xc, 0x1, 0x1, 0x6, 0xc5, "6708e531"}, 0x7, 0x1, {&(0x7f0000000040)=[{0x882, 0x8, {0x7}, 0x9}, {0x7, 0xcc46, {0x9}, 0x7}]}, 0xdc3}) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) 09:15:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 42) 09:15:12 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0xe8, 0x13, 0x800, 0x70bd2d, 0x25dfdbff, {{'cbc-aes-aesni\x00'}, '\x00', '\x00', 0x2000, 0x400}, [{0x8, 0x1, 0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x85800000, 0x3, 0x3, {0x6, @raw_data="234d330a40c6123a0bb12b6c5b5a0d53efe846a366d6f75867589cffbe6092623ec50c30de551a0a90168447264d47f7d5b7d72e32f380b9d9c8230f0cb7e49ba138c30761afaaa09a8ceaaec866eeb54e8a05b2d868afdd09660b9b5ee0ae8b5b1dc8750c44da9cb7c09b8e069486a1194e59cba4a5d43d6b94a4ec0be6e6131b170a4a6cd0411ced11be6e7c0bfd30f330187b60439feac1b4d41b670a95a0eb6f79e1828f280a984fef4c9bc4cdee3929c62e259b0286a0c573a2a5d52d054ece71dcab27fc70"}, 0x1}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 918.345871] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="0100eeff0000000093669f20", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) r2 = socket$inet_sctp(0x2, 0x4, 0x84) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xffffffff, 0x48524742, 0x1, @stepwise={0x4, 0x7fffffff, 0x20, 0x1000, 0x7}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) 09:15:12 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x63ea, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x480000, 0x5}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x63ea, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @discrete={0x480000, 0x5}}) (async) [ 918.406265] FAULT_INJECTION: forcing a failure. [ 918.406265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 918.432356] CPU: 0 PID: 14339 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 918.440278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.440282] Call Trace: [ 918.440299] dump_stack+0x1b2/0x281 09:15:12 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0xe8, 0x13, 0x800, 0x70bd2d, 0x25dfdbff, {{'cbc-aes-aesni\x00'}, '\x00', '\x00', 0x2000, 0x400}, [{0x8, 0x1, 0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x85800000, 0x3, 0x3, {0x6, @raw_data="234d330a40c6123a0bb12b6c5b5a0d53efe846a366d6f75867589cffbe6092623ec50c30de551a0a90168447264d47f7d5b7d72e32f380b9d9c8230f0cb7e49ba138c30761afaaa09a8ceaaec866eeb54e8a05b2d868afdd09660b9b5ee0ae8b5b1dc8750c44da9cb7c09b8e069486a1194e59cba4a5d43d6b94a4ec0be6e6131b170a4a6cd0411ced11be6e7c0bfd30f330187b60439feac1b4d41b670a95a0eb6f79e1828f280a984fef4c9bc4cdee3929c62e259b0286a0c573a2a5d52d054ece71dcab27fc70"}, 0x1}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 918.440316] should_fail.cold+0x10a/0x149 [ 918.440331] __alloc_pages_nodemask+0x22c/0x2720 [ 918.440339] ? kasan_kmalloc+0xeb/0x160 [ 918.440350] ? blk_mq_alloc_rq_map+0x113/0x220 [ 918.440359] ? blk_mq_sched_alloc_tags+0xaa/0x240 [ 918.440369] ? elevator_init+0x2ee/0x410 [ 918.440378] ? blk_mq_sched_init+0x28/0x40 [ 918.440387] ? blk_mq_init_allocated_queue+0xca0/0xfd0 [ 918.440397] ? loop_control_ioctl+0x11a/0x3f0 [ 918.440405] ? do_vfs_ioctl+0x75a/0xff0 [ 918.440414] ? do_syscall_64+0x1d5/0x640 [ 918.440423] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 918.440433] ? __mutex_unlock_slowpath+0x75/0x770 [ 918.440443] ? fs_reclaim_release+0xd0/0x110 [ 918.440455] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 918.440472] ? __lockdep_init_map+0x100/0x560 [ 918.440482] ? _find_next_bit+0xdb/0x100 [ 918.440494] ? __cpu_to_node+0x7b/0xa0 [ 918.440505] ? blk_mq_hw_queue_to_node+0x9f/0xf0 [ 918.440517] blk_mq_alloc_rqs+0x227/0x6d0 [ 918.440532] ? blk_mq_alloc_rq_map+0x9d/0x220 [ 918.440545] blk_mq_sched_alloc_tags+0x112/0x240 [ 918.440558] blk_mq_init_sched+0x18d/0x4a0 [ 918.440566] ? _raw_spin_unlock+0x29/0x40 [ 918.440580] elevator_init+0x2ee/0x410 [ 918.440591] blk_mq_sched_init+0x28/0x40 [ 918.440602] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 918.440618] blk_mq_init_queue+0x5a/0x90 [ 918.440627] loop_add+0x303/0x830 [ 918.440638] ? loop_queue_rq+0x280/0x280 [ 918.440645] ? loop_queue_work+0x21e0/0x21e0 [ 918.440659] loop_control_ioctl+0x11a/0x3f0 [ 918.440668] ? loop_lookup+0x190/0x190 [ 918.440677] ? SyS_write+0x1b7/0x210 [ 918.440689] ? loop_lookup+0x190/0x190 [ 918.440698] do_vfs_ioctl+0x75a/0xff0 [ 918.440708] ? lock_acquire+0x170/0x3f0 [ 918.440718] ? ioctl_preallocate+0x1a0/0x1a0 [ 918.619664] ? __fget+0x2df/0x460 [ 918.619676] ? do_vfs_ioctl+0xff0/0xff0 [ 918.627436] ? security_file_ioctl+0x83/0xb0 [ 918.631843] SyS_ioctl+0x7f/0xb0 [ 918.635194] ? do_vfs_ioctl+0xff0/0xff0 [ 918.639153] do_syscall_64+0x1d5/0x640 [ 918.643022] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 918.648193] RIP: 0033:0x7f8002e8f059 09:15:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x44c, 0x3f3, 0x0, 0x70bd2b, 0x25dfdbfe, {0x7, 0x2, 0x33, [0x6, 0x28c, 0x0, 0x401, 0x2, 0x8, 0x3b2, 0x6a77, 0x0, 0xffff, 0x3, 0x9, 0x4, 0x7a0, 0x7, 0x8001, 0x7fff, 0x800, 0x3, 0xfffffff9, 0x5, 0x8000, 0x3, 0xff, 0x279, 0x7, 0x4b59, 0x1, 0x7, 0x1, 0x6d41, 0x80, 0xfff, 0x2, 0x8, 0x7ff, 0x8, 0x80000000, 0x101, 0x1, 0x800, 0xfff, 0x9, 0x600000, 0x9, 0x6, 0xfff, 0x9ab5, 0x1, 0x7, 0x2e, 0x800006, 0xffffffff, 0x80, 0xfff, 0x3, 0x1, 0x8, 0x6, 0x9, 0x5, 0x80000000, 0x110000, 0x4], [0x4, 0x0, 0x4, 0x1000, 0x9, 0x8, 0xffff, 0x7, 0x4, 0x5, 0x401, 0x4, 0x0, 0x9, 0x8, 0x8000, 0xe0, 0x2, 0x7, 0x100, 0x1, 0x80000000, 0x6, 0x8, 0xfffffffc, 0x8, 0xfff, 0x80000001, 0x0, 0xb70, 0x1, 0x8, 0x9c6, 0x9e3, 0xa3, 0x9, 0x9, 0x8, 0x2, 0x9, 0x5, 0xfffffff7, 0xfffffffd, 0x6829, 0xfff, 0xd8, 0x8, 0x10001, 0x3, 0xffff, 0x10000, 0x9d, 0x56b7, 0x1, 0x7f, 0x3ff, 0x5, 0x9, 0x9, 0x7, 0x9, 0x4, 0xdb8e, 0x6], [0x7fff, 0x2, 0x9, 0x5f, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8, 0x9, 0xee9, 0x46b, 0x10001, 0x6, 0xaa8, 0xc2fe, 0x4, 0x2, 0x5, 0x8, 0x401, 0x7, 0x8001, 0x7, 0x800, 0xff, 0x81, 0x2, 0xfffeffff, 0xfff, 0x9, 0x1, 0x4, 0x800, 0x0, 0x3f, 0xbfee, 0x3ff, 0x4, 0x4, 0x5, 0x433c, 0x20, 0xce, 0x1f, 0x6, 0xdfdf, 0x200, 0x40, 0x1, 0x0, 0x80000000, 0xff, 0x5ef, 0x1, 0x1, 0x3, 0x4, 0x7, 0x3, 0x9, 0x7, 0x9], [0x7b33, 0x80000000, 0x7fffffff, 0x8, 0xbb, 0x8, 0x0, 0x38000, 0x1, 0x80, 0x5, 0x7, 0xa20, 0x1ff, 0x6617, 0x9, 0x8, 0x12, 0x8, 0x800, 0xfffffe04, 0x1, 0x100, 0x9, 0x6, 0xee1, 0x2, 0x5, 0x5, 0x7d9, 0x204, 0x6, 0x5, 0x1ff, 0x40, 0x7, 0x50f92f0e, 0x0, 0x6e59, 0x7fffffff, 0x8, 0x1, 0x7, 0x7, 0x5, 0x101, 0x0, 0x5, 0x2, 0x3, 0xfffffffa, 0x100, 0x2, 0x2, 0x1, 0x2, 0x4, 0x3, 0x4, 0xfffffff8, 0xa0, 0x1, 0x8d6, 0x1], 0x2a, ['\x00', '):!-[-.\'\x00', '{{\x00', '\\${[$--@!-\x00', '/dev/vim2m\x00', '\x00', '\x00', '&\x17\x00', '\x00', '\x00']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x4}}) 09:15:12 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="0100eeff0000000093669f20", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x4, 0x84) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xffffffff, 0x48524742, 0x1, @stepwise={0x4, 0x7fffffff, 0x20, 0x1000, 0x7}}) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) 09:15:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x464, 0x704, 0x70bd2b, 0x25dfdbfc, "d2e0409a654256bb13f9d0acebca541acb1857f49baf27426fefa77a631783adbf297669b0c8a83a0a6c6887215354a49a1b2817635d21e3d43cba5c94e5189f61b4a5b7cd417073d5e33173173ff6ffc00d80526c081a1c33ea6dec3af2c7e21ee85ca20ddc3a159f0a372f372c2b55fd3945380eb4a5f11f39a3c96a4f83b681798e4409598580a96f972fea4f3c621925f0fc27f184c305974ae36cbc54e9bdb979bac8ce4613f9b43c8f190f2014985852f7bdd849622e40c7", ["", "", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106, 0x1}}, 0x20) [ 918.651879] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.659562] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 918.666810] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 918.674059] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.681315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.688601] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:12 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x1, 0x34565559, 0x962fca12e1c0bc78, @stepwise={0x6, 0x5, 0x7f, 0x0, 0x0, 0x9}}) 09:15:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 43) 09:15:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x4}}) socket$inet6_dccp(0xa, 0x6, 0x0) (async) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x4}}) (async) 09:15:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x44c, 0x3f3, 0x0, 0x70bd2b, 0x25dfdbfe, {0x7, 0x2, 0x33, [0x6, 0x28c, 0x0, 0x401, 0x2, 0x8, 0x3b2, 0x6a77, 0x0, 0xffff, 0x3, 0x9, 0x4, 0x7a0, 0x7, 0x8001, 0x7fff, 0x800, 0x3, 0xfffffff9, 0x5, 0x8000, 0x3, 0xff, 0x279, 0x7, 0x4b59, 0x1, 0x7, 0x1, 0x6d41, 0x80, 0xfff, 0x2, 0x8, 0x7ff, 0x8, 0x80000000, 0x101, 0x1, 0x800, 0xfff, 0x9, 0x600000, 0x9, 0x6, 0xfff, 0x9ab5, 0x1, 0x7, 0x2e, 0x800006, 0xffffffff, 0x80, 0xfff, 0x3, 0x1, 0x8, 0x6, 0x9, 0x5, 0x80000000, 0x110000, 0x4], [0x4, 0x0, 0x4, 0x1000, 0x9, 0x8, 0xffff, 0x7, 0x4, 0x5, 0x401, 0x4, 0x0, 0x9, 0x8, 0x8000, 0xe0, 0x2, 0x7, 0x100, 0x1, 0x80000000, 0x6, 0x8, 0xfffffffc, 0x8, 0xfff, 0x80000001, 0x0, 0xb70, 0x1, 0x8, 0x9c6, 0x9e3, 0xa3, 0x9, 0x9, 0x8, 0x2, 0x9, 0x5, 0xfffffff7, 0xfffffffd, 0x6829, 0xfff, 0xd8, 0x8, 0x10001, 0x3, 0xffff, 0x10000, 0x9d, 0x56b7, 0x1, 0x7f, 0x3ff, 0x5, 0x9, 0x9, 0x7, 0x9, 0x4, 0xdb8e, 0x6], [0x7fff, 0x2, 0x9, 0x5f, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8, 0x9, 0xee9, 0x46b, 0x10001, 0x6, 0xaa8, 0xc2fe, 0x4, 0x2, 0x5, 0x8, 0x401, 0x7, 0x8001, 0x7, 0x800, 0xff, 0x81, 0x2, 0xfffeffff, 0xfff, 0x9, 0x1, 0x4, 0x800, 0x0, 0x3f, 0xbfee, 0x3ff, 0x4, 0x4, 0x5, 0x433c, 0x20, 0xce, 0x1f, 0x6, 0xdfdf, 0x200, 0x40, 0x1, 0x0, 0x80000000, 0xff, 0x5ef, 0x1, 0x1, 0x3, 0x4, 0x7, 0x3, 0x9, 0x7, 0x9], [0x7b33, 0x80000000, 0x7fffffff, 0x8, 0xbb, 0x8, 0x0, 0x38000, 0x1, 0x80, 0x5, 0x7, 0xa20, 0x1ff, 0x6617, 0x9, 0x8, 0x12, 0x8, 0x800, 0xfffffe04, 0x1, 0x100, 0x9, 0x6, 0xee1, 0x2, 0x5, 0x5, 0x7d9, 0x204, 0x6, 0x5, 0x1ff, 0x40, 0x7, 0x50f92f0e, 0x0, 0x6e59, 0x7fffffff, 0x8, 0x1, 0x7, 0x7, 0x5, 0x101, 0x0, 0x5, 0x2, 0x3, 0xfffffffa, 0x100, 0x2, 0x2, 0x1, 0x2, 0x4, 0x3, 0x4, 0xfffffff8, 0xa0, 0x1, 0x8d6, 0x1], 0x2a, ['\x00', '):!-[-.\'\x00', '{{\x00', '\\${[$--@!-\x00', '/dev/vim2m\x00', '\x00', '\x00', '&\x17\x00', '\x00', '\x00']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) 09:15:12 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x1, 0x34565559, 0x962fca12e1c0bc78, @stepwise={0x6, 0x5, 0x7f, 0x0, 0x0, 0x9}}) 09:15:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 09:15:12 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x1, 0x34565559, 0x962fca12e1c0bc78, @stepwise={0x6, 0x5, 0x7f, 0x0, 0x0, 0x9}}) 09:15:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 09:15:12 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x0, 0x3, "932084a8bad8da7e3c39912fe34760fe92a0bdc731ff528bc1596c43a7a8ec1a", 0x47314757}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x2, "c89c9c7b95a292f2ca9fd0a8a3a3b1d922e09337a2b268e73247926d1f50636e", 0x584e4f53}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0xfffffffe, 0x0, 0x2, 0x0, 0x81}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0xc9, 0x4, 0x1, {0x0, @vbi={0x7f, 0x5a, 0x4, 0x32315559, [0x5], [0x7, 0x3ff], 0x2}}, 0x80}) 09:15:12 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise={0x4}}) [ 918.842768] FAULT_INJECTION: forcing a failure. [ 918.842768] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 918.866872] CPU: 1 PID: 14389 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 918.874783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.884136] Call Trace: [ 918.886729] dump_stack+0x1b2/0x281 09:15:12 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x491c0427, 0x3, 0x4000}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0xffff, 0x7, 0x4, {0x1, @sdr={0x4f424752, 0xb6a}}, 0xbddf}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0000000000000000002f6669a5673a61"]) connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null]}, 0x40) 09:15:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @vbi={0x1, 0x100, 0x7f, 0x30314247, [0x7fffffff], [0x7ff], 0x2}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x0, 0x0, 0x4, 0x400, 0xe9d, {}, {0x2, 0x1, 0x81, 0x20, 0xfb, 0xd, "5fb4b614"}, 0x3, 0x2, {&(0x7f0000000080)}, 0x81}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) 09:15:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x44c, 0x3f3, 0x0, 0x70bd2b, 0x25dfdbfe, {0x7, 0x2, 0x33, [0x6, 0x28c, 0x0, 0x401, 0x2, 0x8, 0x3b2, 0x6a77, 0x0, 0xffff, 0x3, 0x9, 0x4, 0x7a0, 0x7, 0x8001, 0x7fff, 0x800, 0x3, 0xfffffff9, 0x5, 0x8000, 0x3, 0xff, 0x279, 0x7, 0x4b59, 0x1, 0x7, 0x1, 0x6d41, 0x80, 0xfff, 0x2, 0x8, 0x7ff, 0x8, 0x80000000, 0x101, 0x1, 0x800, 0xfff, 0x9, 0x600000, 0x9, 0x6, 0xfff, 0x9ab5, 0x1, 0x7, 0x2e, 0x800006, 0xffffffff, 0x80, 0xfff, 0x3, 0x1, 0x8, 0x6, 0x9, 0x5, 0x80000000, 0x110000, 0x4], [0x4, 0x0, 0x4, 0x1000, 0x9, 0x8, 0xffff, 0x7, 0x4, 0x5, 0x401, 0x4, 0x0, 0x9, 0x8, 0x8000, 0xe0, 0x2, 0x7, 0x100, 0x1, 0x80000000, 0x6, 0x8, 0xfffffffc, 0x8, 0xfff, 0x80000001, 0x0, 0xb70, 0x1, 0x8, 0x9c6, 0x9e3, 0xa3, 0x9, 0x9, 0x8, 0x2, 0x9, 0x5, 0xfffffff7, 0xfffffffd, 0x6829, 0xfff, 0xd8, 0x8, 0x10001, 0x3, 0xffff, 0x10000, 0x9d, 0x56b7, 0x1, 0x7f, 0x3ff, 0x5, 0x9, 0x9, 0x7, 0x9, 0x4, 0xdb8e, 0x6], [0x7fff, 0x2, 0x9, 0x5f, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8, 0x9, 0xee9, 0x46b, 0x10001, 0x6, 0xaa8, 0xc2fe, 0x4, 0x2, 0x5, 0x8, 0x401, 0x7, 0x8001, 0x7, 0x800, 0xff, 0x81, 0x2, 0xfffeffff, 0xfff, 0x9, 0x1, 0x4, 0x800, 0x0, 0x3f, 0xbfee, 0x3ff, 0x4, 0x4, 0x5, 0x433c, 0x20, 0xce, 0x1f, 0x6, 0xdfdf, 0x200, 0x40, 0x1, 0x0, 0x80000000, 0xff, 0x5ef, 0x1, 0x1, 0x3, 0x4, 0x7, 0x3, 0x9, 0x7, 0x9], [0x7b33, 0x80000000, 0x7fffffff, 0x8, 0xbb, 0x8, 0x0, 0x38000, 0x1, 0x80, 0x5, 0x7, 0xa20, 0x1ff, 0x6617, 0x9, 0x8, 0x12, 0x8, 0x800, 0xfffffe04, 0x1, 0x100, 0x9, 0x6, 0xee1, 0x2, 0x5, 0x5, 0x7d9, 0x204, 0x6, 0x5, 0x1ff, 0x40, 0x7, 0x50f92f0e, 0x0, 0x6e59, 0x7fffffff, 0x8, 0x1, 0x7, 0x7, 0x5, 0x101, 0x0, 0x5, 0x2, 0x3, 0xfffffffa, 0x100, 0x2, 0x2, 0x1, 0x2, 0x4, 0x3, 0x4, 0xfffffff8, 0xa0, 0x1, 0x8d6, 0x1], 0x2a, ['\x00', '):!-[-.\'\x00', '{{\x00', '\\${[$--@!-\x00', '/dev/vim2m\x00', '\x00', '\x00', '&\x17\x00', '\x00', '\x00']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x44c, 0x3f3, 0x0, 0x70bd2b, 0x25dfdbfe, {0x7, 0x2, 0x33, [0x6, 0x28c, 0x0, 0x401, 0x2, 0x8, 0x3b2, 0x6a77, 0x0, 0xffff, 0x3, 0x9, 0x4, 0x7a0, 0x7, 0x8001, 0x7fff, 0x800, 0x3, 0xfffffff9, 0x5, 0x8000, 0x3, 0xff, 0x279, 0x7, 0x4b59, 0x1, 0x7, 0x1, 0x6d41, 0x80, 0xfff, 0x2, 0x8, 0x7ff, 0x8, 0x80000000, 0x101, 0x1, 0x800, 0xfff, 0x9, 0x600000, 0x9, 0x6, 0xfff, 0x9ab5, 0x1, 0x7, 0x2e, 0x800006, 0xffffffff, 0x80, 0xfff, 0x3, 0x1, 0x8, 0x6, 0x9, 0x5, 0x80000000, 0x110000, 0x4], [0x4, 0x0, 0x4, 0x1000, 0x9, 0x8, 0xffff, 0x7, 0x4, 0x5, 0x401, 0x4, 0x0, 0x9, 0x8, 0x8000, 0xe0, 0x2, 0x7, 0x100, 0x1, 0x80000000, 0x6, 0x8, 0xfffffffc, 0x8, 0xfff, 0x80000001, 0x0, 0xb70, 0x1, 0x8, 0x9c6, 0x9e3, 0xa3, 0x9, 0x9, 0x8, 0x2, 0x9, 0x5, 0xfffffff7, 0xfffffffd, 0x6829, 0xfff, 0xd8, 0x8, 0x10001, 0x3, 0xffff, 0x10000, 0x9d, 0x56b7, 0x1, 0x7f, 0x3ff, 0x5, 0x9, 0x9, 0x7, 0x9, 0x4, 0xdb8e, 0x6], [0x7fff, 0x2, 0x9, 0x5f, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8, 0x9, 0xee9, 0x46b, 0x10001, 0x6, 0xaa8, 0xc2fe, 0x4, 0x2, 0x5, 0x8, 0x401, 0x7, 0x8001, 0x7, 0x800, 0xff, 0x81, 0x2, 0xfffeffff, 0xfff, 0x9, 0x1, 0x4, 0x800, 0x0, 0x3f, 0xbfee, 0x3ff, 0x4, 0x4, 0x5, 0x433c, 0x20, 0xce, 0x1f, 0x6, 0xdfdf, 0x200, 0x40, 0x1, 0x0, 0x80000000, 0xff, 0x5ef, 0x1, 0x1, 0x3, 0x4, 0x7, 0x3, 0x9, 0x7, 0x9], [0x7b33, 0x80000000, 0x7fffffff, 0x8, 0xbb, 0x8, 0x0, 0x38000, 0x1, 0x80, 0x5, 0x7, 0xa20, 0x1ff, 0x6617, 0x9, 0x8, 0x12, 0x8, 0x800, 0xfffffe04, 0x1, 0x100, 0x9, 0x6, 0xee1, 0x2, 0x5, 0x5, 0x7d9, 0x204, 0x6, 0x5, 0x1ff, 0x40, 0x7, 0x50f92f0e, 0x0, 0x6e59, 0x7fffffff, 0x8, 0x1, 0x7, 0x7, 0x5, 0x101, 0x0, 0x5, 0x2, 0x3, 0xfffffffa, 0x100, 0x2, 0x2, 0x1, 0x2, 0x4, 0x3, 0x4, 0xfffffff8, 0xa0, 0x1, 0x8d6, 0x1], 0x2a, ['\x00', '):!-[-.\'\x00', '{{\x00', '\\${[$--@!-\x00', '/dev/vim2m\x00', '\x00', '\x00', '&\x17\x00', '\x00', '\x00']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) [ 918.890360] should_fail.cold+0x10a/0x149 [ 918.894511] __alloc_pages_nodemask+0x22c/0x2720 [ 918.899282] ? kasan_kmalloc+0xeb/0x160 [ 918.899294] ? blk_mq_alloc_rq_map+0x113/0x220 [ 918.899303] ? blk_mq_sched_alloc_tags+0xaa/0x240 09:15:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 44) 09:15:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x2) 09:15:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @vbi={0x1, 0x100, 0x7f, 0x30314247, [0x7fffffff], [0x7ff], 0x2}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x0, 0x0, 0x4, 0x400, 0xe9d, {}, {0x2, 0x1, 0x81, 0x20, 0xfb, 0xd, "5fb4b614"}, 0x3, 0x2, {&(0x7f0000000080)}, 0x81}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) [ 918.899314] ? elevator_init+0x2ee/0x410 [ 918.899326] ? loop_control_ioctl+0x11a/0x3f0 [ 918.899334] ? do_vfs_ioctl+0x75a/0xff0 09:15:12 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) 09:15:12 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x0, @vbi={0x1, 0x100, 0x7f, 0x30314247, [0x7fffffff], [0x7ff], 0x2}}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)=@userptr={0x0, 0x0, 0x4, 0x400, 0xe9d, {}, {0x2, 0x1, 0x81, 0x20, 0xfb, 0xd, "5fb4b614"}, 0x3, 0x2, {&(0x7f0000000080)}, 0x81}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x0, 0x0, @stepwise}) [ 918.899343] ? do_syscall_64+0x1d5/0x640 [ 918.899354] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 918.899363] ? __mutex_unlock_slowpath+0x75/0x770 [ 918.899374] ? fs_reclaim_release+0xd0/0x110 [ 918.899386] ? gfp_pfmemalloc_allowed+0x150/0x150 09:15:12 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 918.899403] ? __lockdep_init_map+0x100/0x560 [ 918.899414] ? _find_next_bit+0xdb/0x100 [ 918.899426] ? __cpu_to_node+0x7b/0xa0 [ 918.899435] ? memset+0x20/0x40 [ 918.899447] blk_mq_alloc_rqs+0x227/0x6d0 [ 918.899467] blk_mq_sched_alloc_tags+0x112/0x240 [ 918.899480] blk_mq_init_sched+0x18d/0x4a0 [ 918.899488] ? _raw_spin_unlock+0x29/0x40 [ 918.899500] elevator_init+0x2ee/0x410 09:15:12 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x0, 0x3, "932084a8bad8da7e3c39912fe34760fe92a0bdc731ff528bc1596c43a7a8ec1a", 0x47314757}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x2, "c89c9c7b95a292f2ca9fd0a8a3a3b1d922e09337a2b268e73247926d1f50636e", 0x584e4f53}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0xfffffffe, 0x0, 0x2, 0x0, 0x81}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0xc9, 0x4, 0x1, {0x0, @vbi={0x7f, 0x5a, 0x4, 0x32315559, [0x5], [0x7, 0x3ff], 0x2}}, 0x80}) 09:15:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x3, @pix_mp={0x9, 0x400, 0x3031334d, 0x2, 0xb, [{0x4, 0x3ff}, {0xffffff3d, 0xffff1d64}, {0x0, 0x8000}, {0xfffffffb, 0x54}, {0x0, 0x6}, {0xffff3918, 0x401}, {0x8000, 0x7}, {0x200, 0xffffffd4}], 0x3f, 0x7, 0x7, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffc, 0x32314d56, 0x0, @stepwise={0x0, 0x0, 0x3}}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 918.899510] blk_mq_sched_init+0x28/0x40 [ 918.899520] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 918.899535] blk_mq_init_queue+0x5a/0x90 [ 918.899542] loop_add+0x303/0x830 [ 918.899551] ? loop_queue_rq+0x280/0x280 [ 918.899558] ? loop_queue_work+0x21e0/0x21e0 [ 918.899571] loop_control_ioctl+0x11a/0x3f0 [ 918.899580] ? loop_lookup+0x190/0x190 [ 918.899588] ? SyS_write+0x1b7/0x210 [ 918.899600] ? loop_lookup+0x190/0x190 [ 918.899609] do_vfs_ioctl+0x75a/0xff0 [ 918.899620] ? lock_acquire+0x170/0x3f0 [ 918.899629] ? ioctl_preallocate+0x1a0/0x1a0 [ 918.899642] ? __fget+0x2df/0x460 [ 918.899652] ? do_vfs_ioctl+0xff0/0xff0 [ 918.899662] ? security_file_ioctl+0x83/0xb0 [ 918.899671] SyS_ioctl+0x7f/0xb0 [ 918.899678] ? do_vfs_ioctl+0xff0/0xff0 [ 918.899694] do_syscall_64+0x1d5/0x640 [ 918.899708] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 918.899715] RIP: 0033:0x7f8002e8f059 [ 918.899720] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.899729] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 918.899734] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 918.899739] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.899744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.899749] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 919.063595] FAULT_INJECTION: forcing a failure. [ 919.063595] name failslab, interval 1, probability 0, space 0, times 0 [ 919.226306] CPU: 0 PID: 14436 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 919.226312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.226316] Call Trace: [ 919.226331] dump_stack+0x1b2/0x281 [ 919.226344] should_fail.cold+0x10a/0x149 [ 919.226357] should_failslab+0xd6/0x130 [ 919.226369] kmem_cache_alloc_node_trace+0x25a/0x400 [ 919.226382] elevator_alloc+0x7a/0x1f0 [ 919.226393] dd_init_queue+0x20/0x420 [ 919.226404] blk_mq_init_sched+0x214/0x4a0 [ 919.226413] ? _raw_spin_unlock+0x29/0x40 [ 919.226425] elevator_init+0x2ee/0x410 [ 919.226434] blk_mq_sched_init+0x28/0x40 [ 919.226444] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 919.226460] blk_mq_init_queue+0x5a/0x90 [ 919.226470] loop_add+0x303/0x830 [ 919.226481] ? loop_queue_rq+0x280/0x280 [ 919.226489] ? loop_queue_work+0x21e0/0x21e0 [ 919.226502] loop_control_ioctl+0x11a/0x3f0 [ 919.226510] ? loop_lookup+0x190/0x190 [ 919.226518] ? SyS_write+0x1b7/0x210 [ 919.226529] ? loop_lookup+0x190/0x190 [ 919.226538] do_vfs_ioctl+0x75a/0xff0 [ 919.226548] ? lock_acquire+0x170/0x3f0 [ 919.226557] ? ioctl_preallocate+0x1a0/0x1a0 [ 919.226570] ? __fget+0x2df/0x460 09:15:13 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x491c0427, 0x3, 0x4000}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0xffff, 0x7, 0x4, {0x1, @sdr={0x4f424752, 0xb6a}}, 0xbddf}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0000000000000000002f6669a5673a61"]) (async) connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null]}, 0x40) 09:15:13 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 919.226578] ? do_vfs_ioctl+0xff0/0xff0 [ 919.226591] ? security_file_ioctl+0x83/0xb0 [ 919.347955] SyS_ioctl+0x7f/0xb0 [ 919.347964] ? do_vfs_ioctl+0xff0/0xff0 [ 919.347978] do_syscall_64+0x1d5/0x640 [ 919.359180] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 919.359188] RIP: 0033:0x7f8002e8f059 [ 919.359192] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.375893] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 09:15:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async, rerun: 64) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) 09:15:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 45) 09:15:13 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x4, 0x0, 0x3, "932084a8bad8da7e3c39912fe34760fe92a0bdc731ff528bc1596c43a7a8ec1a", 0x47314757}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x6, 0x1, 0x2, "c89c9c7b95a292f2ca9fd0a8a3a3b1d922e09337a2b268e73247926d1f50636e", 0x584e4f53}) (async, rerun: 32) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0xfffffffe, 0x0, 0x2, 0x0, 0x81}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0xc9, 0x4, 0x1, {0x0, @vbi={0x7f, 0x5a, 0x4, 0x32315559, [0x5], [0x7, 0x3ff], 0x2}}, 0x80}) 09:15:13 executing program 4: ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 919.375898] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 919.375903] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 09:15:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 46) 09:15:13 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) 09:15:13 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x1000, 0xf6b, {"995d2710732d9e2bdb3ce1d9166bc7f2"}, 0x1, 0x81, 0x4}}}, 0x90) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) [ 919.375908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.375912] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 919.437210] FAULT_INJECTION: forcing a failure. [ 919.437210] name failslab, interval 1, probability 0, space 0, times 0 [ 919.437222] CPU: 0 PID: 14474 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 09:15:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 47) [ 919.437229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.437233] Call Trace: [ 919.437247] dump_stack+0x1b2/0x281 [ 919.437263] should_fail.cold+0x10a/0x149 [ 919.437277] should_failslab+0xd6/0x130 [ 919.437290] kmem_cache_alloc_node_trace+0x25a/0x400 [ 919.437305] dd_init_queue+0x94/0x420 [ 919.437319] blk_mq_init_sched+0x214/0x4a0 [ 919.437330] ? _raw_spin_unlock+0x29/0x40 [ 919.437344] elevator_init+0x2ee/0x410 [ 919.437355] blk_mq_sched_init+0x28/0x40 [ 919.437366] blk_mq_init_allocated_queue+0xca0/0xfd0 [ 919.437383] blk_mq_init_queue+0x5a/0x90 [ 919.437393] loop_add+0x303/0x830 [ 919.437404] ? loop_queue_rq+0x280/0x280 [ 919.437412] ? loop_queue_work+0x21e0/0x21e0 [ 919.437426] loop_control_ioctl+0x11a/0x3f0 [ 919.437435] ? loop_lookup+0x190/0x190 [ 919.437443] ? SyS_write+0x1b7/0x210 09:15:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x3, @pix_mp={0x9, 0x400, 0x3031334d, 0x2, 0xb, [{0x4, 0x3ff}, {0xffffff3d, 0xffff1d64}, {0x0, 0x8000}, {0xfffffffb, 0x54}, {0x0, 0x6}, {0xffff3918, 0x401}, {0x8000, 0x7}, {0x200, 0xffffffd4}], 0x3f, 0x7, 0x7, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffc, 0x32314d56, 0x0, @stepwise={0x0, 0x0, 0x3}}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x3, @pix_mp={0x9, 0x400, 0x3031334d, 0x2, 0xb, [{0x4, 0x3ff}, {0xffffff3d, 0xffff1d64}, {0x0, 0x8000}, {0xfffffffb, 0x54}, {0x0, 0x6}, {0xffff3918, 0x401}, {0x8000, 0x7}, {0x200, 0xffffffd4}], 0x3f, 0x7, 0x7, 0x2, 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffc, 0x32314d56, 0x0, @stepwise={0x0, 0x0, 0x3}}) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) [ 919.437456] ? loop_lookup+0x190/0x190 [ 919.437466] do_vfs_ioctl+0x75a/0xff0 [ 919.437478] ? lock_acquire+0x170/0x3f0 [ 919.437487] ? ioctl_preallocate+0x1a0/0x1a0 [ 919.437500] ? __fget+0x2df/0x460 [ 919.437511] ? do_vfs_ioctl+0xff0/0xff0 [ 919.437522] ? security_file_ioctl+0x83/0xb0 [ 919.437532] SyS_ioctl+0x7f/0xb0 [ 919.437540] ? do_vfs_ioctl+0xff0/0xff0 [ 919.437551] do_syscall_64+0x1d5/0x640 [ 919.437566] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 919.437573] RIP: 0033:0x7f8002e8f059 [ 919.437578] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.437589] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 919.437594] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 919.437600] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 919.437605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.437610] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 919.513315] FAULT_INJECTION: forcing a failure. [ 919.513315] name failslab, interval 1, probability 0, space 0, times 0 [ 919.513327] CPU: 1 PID: 14483 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 919.513333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.513337] Call Trace: [ 919.513352] dump_stack+0x1b2/0x281 [ 919.513370] should_fail.cold+0x10a/0x149 [ 919.513385] should_failslab+0xd6/0x130 [ 919.513398] kmem_cache_alloc_node_trace+0x25a/0x400 [ 919.513413] alloc_disk_node+0x5d/0x3d0 [ 919.513425] loop_add+0x3cb/0x830 [ 919.513435] ? loop_queue_rq+0x280/0x280 [ 919.513444] ? loop_queue_work+0x21e0/0x21e0 [ 919.513459] loop_control_ioctl+0x11a/0x3f0 [ 919.513469] ? loop_lookup+0x190/0x190 [ 919.513478] ? SyS_write+0x1b7/0x210 [ 919.513491] ? loop_lookup+0x190/0x190 [ 919.513502] do_vfs_ioctl+0x75a/0xff0 [ 919.513513] ? lock_acquire+0x170/0x3f0 [ 919.513523] ? ioctl_preallocate+0x1a0/0x1a0 [ 919.513536] ? __fget+0x2df/0x460 [ 919.513547] ? do_vfs_ioctl+0xff0/0xff0 [ 919.513558] ? security_file_ioctl+0x83/0xb0 [ 919.513570] SyS_ioctl+0x7f/0xb0 [ 919.513577] ? do_vfs_ioctl+0xff0/0xff0 [ 919.513588] do_syscall_64+0x1d5/0x640 [ 919.513604] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 919.513612] RIP: 0033:0x7f8002e8f059 [ 919.513617] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.513627] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 919.513633] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 919.513639] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 919.513644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.513649] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 919.543012] FAULT_INJECTION: forcing a failure. [ 919.543012] name failslab, interval 1, probability 0, space 0, times 0 [ 919.870996] CPU: 0 PID: 14493 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 919.871003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.871006] Call Trace: [ 919.871021] dump_stack+0x1b2/0x281 [ 919.871035] should_fail.cold+0x10a/0x149 [ 919.871049] should_failslab+0xd6/0x130 [ 919.871060] kmem_cache_alloc_node_trace+0x25a/0x400 [ 919.871074] __kmalloc_node+0x38/0x70 [ 919.871106] disk_expand_part_tbl+0x17a/0x340 [ 919.871118] alloc_disk_node+0xf1/0x3d0 [ 919.871128] loop_add+0x3cb/0x830 [ 919.871138] ? loop_queue_rq+0x280/0x280 [ 919.871145] ? loop_queue_work+0x21e0/0x21e0 [ 919.871157] loop_control_ioctl+0x11a/0x3f0 [ 919.871164] ? loop_lookup+0x190/0x190 [ 919.871172] ? SyS_write+0x1b7/0x210 [ 919.871181] ? loop_lookup+0x190/0x190 [ 919.871190] do_vfs_ioctl+0x75a/0xff0 [ 919.871199] ? lock_acquire+0x170/0x3f0 [ 919.871207] ? ioctl_preallocate+0x1a0/0x1a0 [ 919.871218] ? __fget+0x2df/0x460 [ 919.871228] ? do_vfs_ioctl+0xff0/0xff0 [ 919.871239] ? security_file_ioctl+0x83/0xb0 [ 919.871249] SyS_ioctl+0x7f/0xb0 [ 919.871257] ? do_vfs_ioctl+0xff0/0xff0 [ 919.871268] do_syscall_64+0x1d5/0x640 [ 919.871283] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 919.871290] RIP: 0033:0x7f8002e8f059 09:15:13 executing program 0: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x491c0427, 0x3, 0x4000}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0xffff, 0x7, 0x4, {0x1, @sdr={0x4f424752, 0xb6a}}, 0xbddf}) r2 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0000000000000000002f6669a5673a61"]) connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x491c0427, 0x3, 0x4000}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0xffff, 0x7, 0x4, {0x1, @sdr={0x4f424752, 0xb6a}}, 0xbddf}) (async) syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0000000000000000002f6669a5673a61"]) (async) connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null]}, 0x40) (async) 09:15:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 48) 09:15:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0x3, @pix_mp={0x9, 0x400, 0x3031334d, 0x2, 0xb, [{0x4, 0x3ff}, {0xffffff3d, 0xffff1d64}, {0x0, 0x8000}, {0xfffffffb, 0x54}, {0x0, 0x6}, {0xffff3918, 0x401}, {0x8000, 0x7}, {0x200, 0xffffffd4}], 0x3f, 0x7, 0x7, 0x2, 0x2}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0xfffffffc, 0x32314d56, 0x0, @stepwise={0x0, 0x0, 0x3}}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 09:15:13 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4080000000000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x1000, 0xf6b, {"995d2710732d9e2bdb3ce1d9166bc7f2"}, 0x1, 0x81, 0x4}}}, 0x90) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x1, @sdr={0x43353039}}) [ 919.871294] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.871304] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 919.871309] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 919.871313] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 919.871318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 919.871324] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 09:15:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @mcast1, 0x80}, r1}}, 0x30) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x3, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @nfc={0x27, 0x0, 0x0, 0x3}, @l2={0x1f, 0x8, @none, 0xd2a, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x5101, &(0x7f0000000040)='batadv_slave_0\x00', 0x2, 0x81, 0x4}) 09:15:13 executing program 0: shmdt(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 09:15:13 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 920.077824] FAULT_INJECTION: forcing a failure. [ 920.077824] name failslab, interval 1, probability 0, space 0, times 0 [ 920.090223] CPU: 0 PID: 14509 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 920.098120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.107469] Call Trace: [ 920.110062] dump_stack+0x1b2/0x281 [ 920.113710] should_fail.cold+0x10a/0x149 [ 920.117876] should_failslab+0xd6/0x130 09:15:14 executing program 0: shmdt(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) shmdt(0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) 09:15:14 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) 09:15:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @mcast1, 0x80}, r1}}, 0x30) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x3, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @nfc={0x27, 0x0, 0x0, 0x3}, @l2={0x1f, 0x8, @none, 0xd2a, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x5101, &(0x7f0000000040)='batadv_slave_0\x00', 0x2, 0x81, 0x4}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @mcast1, 0x80}, r1}}, 0x30) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x3, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @nfc={0x27, 0x0, 0x0, 0x3}, @l2={0x1f, 0x8, @none, 0xd2a, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x5101, &(0x7f0000000040)='batadv_slave_0\x00', 0x2, 0x81, 0x4}) (async) [ 920.117890] kmem_cache_alloc_trace+0x29a/0x3d0 [ 920.117905] rand_initialize_disk+0x3b/0xc0 [ 920.117915] alloc_disk_node+0x1f7/0x3d0 09:15:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xffffffff, 0x4a0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f6ffffff17000000", @ANYRES32=r0]) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 49) 09:15:14 executing program 0: shmdt(0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) shmdt(0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) 09:15:14 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x400, 0x1, 0x0, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) [ 920.117928] loop_add+0x3cb/0x830 [ 920.117939] ? loop_queue_rq+0x280/0x280 [ 920.117946] ? loop_queue_work+0x21e0/0x21e0 09:15:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @mcast1, 0x80}, r1}}, 0x30) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x3, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @nfc={0x27, 0x0, 0x0, 0x3}, @l2={0x1f, 0x8, @none, 0xd2a, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x5101, &(0x7f0000000040)='batadv_slave_0\x00', 0x2, 0x81, 0x4}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @mcast1, 0x80}, r1}}, 0x30) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x0, 0x1, 0x3, "57bfd7d3559532365c46ed2e2007905c32d9b28795c57e8505566cdbd3f7f886"}) (async) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @nfc={0x27, 0x0, 0x0, 0x3}, @l2={0x1f, 0x8, @none, 0xd2a, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x5101, &(0x7f0000000040)='batadv_slave_0\x00', 0x2, 0x81, 0x4}) (async) [ 920.117959] loop_control_ioctl+0x11a/0x3f0 [ 920.117968] ? loop_lookup+0x190/0x190 [ 920.117977] ? SyS_write+0x1b7/0x210 [ 920.117989] ? loop_lookup+0x190/0x190 [ 920.117999] do_vfs_ioctl+0x75a/0xff0 [ 920.118010] ? lock_acquire+0x170/0x3f0 [ 920.118019] ? ioctl_preallocate+0x1a0/0x1a0 [ 920.118031] ? __fget+0x2df/0x460 [ 920.118041] ? do_vfs_ioctl+0xff0/0xff0 [ 920.118052] ? security_file_ioctl+0x83/0xb0 [ 920.118061] SyS_ioctl+0x7f/0xb0 [ 920.118068] ? do_vfs_ioctl+0xff0/0xff0 [ 920.118084] do_syscall_64+0x1d5/0x640 [ 920.118099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 920.118106] RIP: 0033:0x7f8002e8f059 [ 920.118110] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.118120] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 920.118126] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 920.118132] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.118137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.118142] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 920.278345] FAULT_INJECTION: forcing a failure. [ 920.278345] name failslab, interval 1, probability 0, space 0, times 0 [ 920.278357] CPU: 1 PID: 14552 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 920.278362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.278366] Call Trace: [ 920.278380] dump_stack+0x1b2/0x281 [ 920.278395] should_fail.cold+0x10a/0x149 [ 920.278409] should_failslab+0xd6/0x130 [ 920.278423] kmem_cache_alloc_trace+0x29a/0x3d0 [ 920.278434] ? __lock_acquire+0x5fc/0x3f20 [ 920.278447] device_create_groups_vargs+0x7b/0x250 [ 920.278459] device_create_vargs+0x3a/0x50 [ 920.278473] bdi_register_va.part.0+0x35/0x650 [ 920.278486] bdi_register+0x101/0x110 [ 920.278496] ? bdi_register_va+0x80/0x80 [ 920.278508] ? vsnprintf+0x260/0x1340 [ 920.278523] bdi_register_owner+0x59/0xf0 [ 920.278534] device_add_disk+0x5bb/0xdc0 [ 920.278546] ? sprintf+0xa7/0xd0 [ 920.278555] ? blk_alloc_devt+0x310/0x310 [ 920.278566] ? __lockdep_init_map+0x100/0x560 [ 920.278576] ? __lockdep_init_map+0x100/0x560 [ 920.278589] loop_add+0x615/0x830 [ 920.278600] ? loop_queue_rq+0x280/0x280 [ 920.278608] ? loop_queue_work+0x21e0/0x21e0 [ 920.278621] loop_control_ioctl+0x11a/0x3f0 [ 920.278631] ? loop_lookup+0x190/0x190 [ 920.278639] ? SyS_write+0x1b7/0x210 [ 920.278651] ? loop_lookup+0x190/0x190 [ 920.278661] do_vfs_ioctl+0x75a/0xff0 [ 920.278671] ? lock_acquire+0x170/0x3f0 [ 920.278680] ? ioctl_preallocate+0x1a0/0x1a0 [ 920.278692] ? __fget+0x2df/0x460 [ 920.278702] ? do_vfs_ioctl+0xff0/0xff0 [ 920.278713] ? security_file_ioctl+0x83/0xb0 [ 920.278723] SyS_ioctl+0x7f/0xb0 [ 920.278731] ? do_vfs_ioctl+0xff0/0xff0 [ 920.278742] do_syscall_64+0x1d5/0x640 [ 920.278757] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 920.278765] RIP: 0033:0x7f8002e8f059 [ 920.278770] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.278781] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 920.278786] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 920.278791] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.278797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.278803] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 920.281715] kasan: CONFIG_KASAN_INLINE enabled [ 920.281775] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 920.281787] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 920.281791] Modules linked in: [ 920.281801] CPU: 1 PID: 14552 Comm: syz-executor.1 Not tainted 4.14.268-syzkaller #0 [ 920.281806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.281811] task: ffff8880b56644c0 task.stack: ffff888097ff0000 [ 920.281824] RIP: 0010:sysfs_do_create_link_sd+0x56/0x120 [ 920.281828] RSP: 0018:ffff888097ff7b48 EFLAGS: 00010202 [ 920.281837] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 0000000000007953 [ 920.281842] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000040 [ 920.281848] RBP: ffffffff87cbb8a0 R08: ffffffff8b9df558 R09: 00000000000400c7 [ 920.281853] R10: ffff8880b5664d70 R11: ffff8880b56644c0 R12: ffff8880aefba9a0 [ 920.281858] R13: ffffffff87cbb8a0 R14: 0000000000000001 R15: ffff88808fb924dc [ 920.281865] FS: 00007f8001804700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 920.281871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.281876] CR2: 0000000020000003 CR3: 00000000abb5f000 CR4: 00000000003406e0 [ 920.281887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 920.281892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 920.281894] Call Trace: [ 920.281905] sysfs_create_link+0x5f/0xc0 [ 920.281915] device_add_disk+0x9f8/0xdc0 [ 920.281927] ? sprintf+0xa7/0xd0 [ 920.281935] ? blk_alloc_devt+0x310/0x310 [ 920.281945] ? __lockdep_init_map+0x100/0x560 [ 920.281952] ? __lockdep_init_map+0x100/0x560 [ 920.281961] loop_add+0x615/0x830 [ 920.281968] ? loop_queue_rq+0x280/0x280 [ 920.281974] ? loop_queue_work+0x21e0/0x21e0 [ 920.281982] loop_control_ioctl+0x11a/0x3f0 [ 920.281989] ? loop_lookup+0x190/0x190 [ 920.282005] ? SyS_write+0x1b7/0x210 [ 920.282014] ? loop_lookup+0x190/0x190 [ 920.282022] do_vfs_ioctl+0x75a/0xff0 [ 920.282030] ? lock_acquire+0x170/0x3f0 [ 920.282036] ? ioctl_preallocate+0x1a0/0x1a0 [ 920.282046] ? __fget+0x2df/0x460 [ 920.282053] ? do_vfs_ioctl+0xff0/0xff0 [ 920.282062] ? security_file_ioctl+0x83/0xb0 [ 920.282069] SyS_ioctl+0x7f/0xb0 [ 920.282075] ? do_vfs_ioctl+0xff0/0xff0 [ 920.282084] do_syscall_64+0x1d5/0x640 [ 920.282094] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 920.282100] RIP: 0033:0x7f8002e8f059 [ 920.282103] RSP: 002b:00007f8001804168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 920.282110] RAX: ffffffffffffffda RBX: 00007f8002fa1f60 RCX: 00007f8002e8f059 [ 920.282114] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 920.282118] RBP: 00007f80018041d0 R08: 0000000000000000 R09: 0000000000000000 [ 920.282121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.282125] R13: 00007ffc84c8294f R14: 00007f8001804300 R15: 0000000000022000 [ 920.282132] Code: 84 a1 00 00 00 e8 bb 69 b1 ff 48 c7 c7 c0 c8 04 89 e8 ff 50 80 05 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a7 00 00 00 4c 8b 6b 30 4d 85 ed 74 4f e8 82 [ 920.282266] RIP: sysfs_do_create_link_sd+0x56/0x120 RSP: ffff888097ff7b48 [ 920.282274] ---[ end trace a6f7647a95f0954e ]--- [ 920.282278] Kernel panic - not syncing: Fatal exception [ 920.282339] Kernel Offset: disabled