EY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x5, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x37e, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) dup2(r0, r1) 06:53:57 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000280)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000280)) syz_open_dev$usbmon(0x0, 0x0, 0x400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x541100, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) listen(r2, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) dup2(r5, r4) getpgid(0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r8) getpid() getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10) getgroups(0x1, &(0x7f0000000240)=[r10]) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) getpid() fstat(0xffffffffffffffff, &(0x7f0000003240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r14) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 06:53:57 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe000, 0xd, &(0x7f0000000000)=""/208) 06:53:57 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:53:57 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:53:58 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe001, 0xd, &(0x7f0000000000)=""/208) 06:53:58 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:53:58 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000280)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000280)) syz_open_dev$usbmon(0x0, 0x0, 0x400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x541100, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) listen(r2, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) dup2(r5, r4) getpgid(0xffffffffffffffff) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r8) getpid() getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10) getgroups(0x1, &(0x7f0000000240)=[r10]) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r13) getpid() fstat(0xffffffffffffffff, &(0x7f0000003240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r14) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 06:53:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="008708", @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x20, 0x1, 0x0, 0xf4, 0x6, 0x101}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x5, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x37e, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) dup2(r0, r1) 06:53:58 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:53:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000009c05000000000000cc000000cc000000cc000000d403000008050000080500000805000008050000080500000500000000000000ac1414aaac1e000100000000ffffffff76657468315f746f5f6272696467650076657468315f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000007000cc0000000000000000000000000000000000000000005c0043"], 0x1) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/69, 0x45}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/180, 0xb4}], 0x7, &(0x7f0000000580)=[@rdma_dest={0x18, 0x114, 0x2, {0x0, 0x1ff}}, @cswp={0x58, 0x114, 0x7, {{0x3f, 0x20000000}, &(0x7f0000000400)=0x6, &(0x7f0000000440)=0xe677, 0xff, 0x2, 0x9, 0x2000000000, 0x13, 0xbbd}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000000480)=""/163, 0xa3}, &(0x7f0000000540), 0x8}}, @zcopy_cookie={0x10, 0x114, 0xc, 0x100}], 0xac, 0x11}, 0x84) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 06:53:58 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe100, 0xd, &(0x7f0000000000)=""/208) 06:53:58 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:53:58 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000280)) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000280)) syz_open_dev$usbmon(0x0, 0x0, 0x400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x541100, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) listen(r1, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) dup2(r4, r3) getpgid(0xffffffffffffffff) getpid() r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) getresuid(0x0, &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r6) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) getgroups(0x1, &(0x7f0000000240)=[r9]) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) ioprio_get$uid(0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getpid() fstat(0xffffffffffffffff, &(0x7f0000003240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 06:53:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000003c0)={0x0, 0x0, @ioapic}) 06:53:58 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:53:58 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:53:58 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe101, 0xd, &(0x7f0000000000)=""/208) 06:53:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1f, 0x3ff, 0x9}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:53:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:53:59 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x41) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="810000", @ANYRES32=0x0], 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x13) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x10, 0x0, 0xc) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) 06:53:59 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe200, 0xd, &(0x7f0000000000)=""/208) 06:53:59 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x500000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:53:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:53:59 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000280)) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000280)) syz_open_dev$usbmon(0x0, 0x0, 0x400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x541100, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) listen(r1, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) dup2(r4, r3) getpgid(0xffffffffffffffff) getpid() r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) getresuid(0x0, &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r6) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) getgroups(0x1, &(0x7f0000000240)=[r9]) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) ioprio_get$uid(0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getpid() fstat(0xffffffffffffffff, &(0x7f0000003240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 06:53:59 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe201, 0xd, &(0x7f0000000000)=""/208) 06:53:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 06:53:59 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000280)) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000280)) syz_open_dev$usbmon(0x0, 0x0, 0x400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x541100, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) listen(r1, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) dup2(r4, r3) getpgid(0xffffffffffffffff) getpid() r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) getresuid(0x0, &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r6) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) getgroups(0x1, &(0x7f0000000240)=[r9]) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) ioprio_get$uid(0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getpid() fstat(0xffffffffffffffff, &(0x7f0000003240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 06:53:59 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x600000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:53:59 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe300, 0xd, &(0x7f0000000000)=""/208) 06:53:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:54:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe301, 0xd, &(0x7f0000000000)=""/208) 06:54:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="008708", @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x20, 0x1, 0x0, 0xf4, 0x6, 0x101}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x5, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x37e, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) 06:54:00 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000280)) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000280)) syz_open_dev$usbmon(0x0, 0x0, 0x400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x541100, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2711}, 0x10) listen(r1, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) eventfd2(0x0, 0x0) eventfd2(0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) dup2(r4, r3) getpgid(0xffffffffffffffff) getpid() r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) getresuid(0x0, &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r6) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000001c80)=0x0) ioprio_get$uid(0x1, r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) getgroups(0x1, &(0x7f0000000240)=[r9]) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) ioprio_get$uid(0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) getpid() fstat(0xffffffffffffffff, &(0x7f0000003240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 06:54:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:54:00 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001740)=""/102400, 0x19000}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/74, 0x4a}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xa35a, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket(0x2, 0x1, 0x0) r6 = dup(r5) listen(r6, 0x0) accept$inet6(r6, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 06:54:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe400, 0xd, &(0x7f0000000000)=""/208) 06:54:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:54:00 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe401, 0xd, &(0x7f0000000000)=""/208) 06:54:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:54:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="008708", @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x20, 0x1, 0x0, 0xf4, 0x6, 0x101}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x5, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x37e, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) 06:54:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe500, 0xd, &(0x7f0000000000)=""/208) 06:54:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:54:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="008708", @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x20, 0x1, 0x0, 0xf4, 0x6, 0x101}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x5, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x37e, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) 06:54:01 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xa00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) 06:54:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="008708", @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x20, 0x1, 0x0, 0xf4, 0x6, 0x101}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x5, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x37e, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) 06:54:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe501, 0xd, &(0x7f0000000000)=""/208) 06:54:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="008708", @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x20, 0x1, 0x0, 0xf4, 0x6, 0x101}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x5, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x37e, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) 06:54:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:54:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe600, 0xd, &(0x7f0000000000)=""/208) 06:54:01 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x1000000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:54:01 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe601, 0xd, &(0x7f0000000000)=""/208) 06:54:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="008708", @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x20, 0x1, 0x0, 0xf4, 0x6, 0x101}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x5, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x37e, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_deladdr={0x2c, 0x15, 0x3b93baa10eb688ed, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) 06:54:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe700, 0xd, &(0x7f0000000000)=""/208) 06:54:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x6000000000000003, 0x6) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, 0x0) semop(0x0, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) semget(0x3, 0x3, 0x725) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xfec0) 06:54:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) 06:54:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:02 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x2000000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe701, 0xd, &(0x7f0000000000)=""/208) 06:54:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe800, 0xd, &(0x7f0000000000)=""/208) 06:54:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:54:02 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x41) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81000000", @ANYRES32=0x0], 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x13) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 06:54:02 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x2010000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe801, 0xd, &(0x7f0000000000)=""/208) 06:54:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 06:54:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:54:03 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x3d00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:03 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) 06:54:03 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe900, 0xd, &(0x7f0000000000)=""/208) 06:54:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:54:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="008708", @ANYRES16=0x0], 0x2}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x8000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffe) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000100)={0x20, 0x1, 0x0, 0xf4, 0x6}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) pipe2(0x0, 0x400) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) memfd_create(0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x0, 0x8}, {0x1f, 0x0, 0x4}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}}, 0x24, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) dup2(r0, r1) 06:54:03 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x3f00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) [ 1189.822620][T25463] kvm [25458]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000008b data 0xfffffffc 06:54:03 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x41) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81000000", @ANYRES32=0x0], 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x13) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 06:54:03 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x4000000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:03 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe901, 0xd, &(0x7f0000000000)=""/208) 06:54:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 06:54:04 executing program 5: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x41) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81000000", @ANYRES32=0x0], 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x13) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 06:54:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xea00, 0xd, &(0x7f0000000000)=""/208) 06:54:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:54:04 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) 06:54:04 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x4800000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xea01, 0xd, &(0x7f0000000000)=""/208) 06:54:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:54:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xeb00, 0xd, &(0x7f0000000000)=""/208) 06:54:04 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x41) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81000000", @ANYRES32=0x0], 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x13) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 06:54:04 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x4c00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) 06:54:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xeb01, 0xd, &(0x7f0000000000)=""/208) 06:54:05 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() r1 = inotify_init1(0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1) r5 = eventfd2(0x7, 0x0) dup2(r5, r1) tkill(r0, 0x1000000000000014) 06:54:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) 06:54:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xec00, 0xd, &(0x7f0000000000)=""/208) 06:54:05 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x4c03000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:05 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) 06:54:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:54:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xec01, 0xd, &(0x7f0000000000)=""/208) 06:54:05 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x41) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81000000", @ANYRES32=0x0], 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffc, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x13) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 06:54:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xed00, 0xd, &(0x7f0000000000)=""/208) 06:54:05 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x6000000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:54:05 executing program 5: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0/bus\x00', 0x41, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x179fbb, 0x0) 06:54:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xed01, 0xd, &(0x7f0000000000)=""/208) 06:54:05 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xab, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) 06:54:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:54:06 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x6300000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:06 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) tkill(r0, 0x1000000000016) 06:54:06 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xee00, 0xd, &(0x7f0000000000)=""/208) 06:54:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:54:06 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000)=0x4, 0x4) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x2, @local, 0x4e20, 0x0, 'sh\x00', 0x0, 0xfffffff9, 0x46}, 0x2c) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket$inet(0x2, 0x3, 0x2) r3 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r3, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 06:54:06 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x6600000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:06 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xee01, 0xd, &(0x7f0000000000)=""/208) 06:54:06 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd02090000b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef186d405984044d2db9c03f5c6e315169dfad46ca75c2a2c14c73b62d20fe45084b8d17beffb8cb72a388c353", 0x66, 0x400}], 0x0, &(0x7f0000000300)={[{@jqfmt_vfsv0='jqfmt=vfsv0'}]}) 06:54:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:54:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:54:06 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xef00, 0xd, &(0x7f0000000000)=""/208) [ 1192.975656][T25693] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20000 06:54:06 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x6700000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) [ 1193.092529][T25696] EXT4-fs (loop5): Unsupported filesystem blocksize 0 (1923657432 log_block_size) [ 1193.154567][T25705] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20000 [ 1193.267815][T25696] EXT4-fs (loop5): Unsupported filesystem blocksize 0 (1923657432 log_block_size) 06:54:07 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) tkill(r0, 0x1000000000016) 06:54:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xef01, 0xd, &(0x7f0000000000)=""/208) 06:54:07 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe1}, 0x0, 0x0, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd2, &(0x7f0000000000)=0x4, 0x4) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x2, @local, 0x4e20, 0x0, 'sh\x00', 0x0, 0xfffffff9, 0x46}, 0x2c) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket$inet(0x2, 0x3, 0x2) r3 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r3, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 06:54:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:54:07 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xd) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) r3 = dup2(r2, r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x606001, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) bind$unix(r4, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) unlink(0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x32001, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x50880, 0x0) eventfd(0xfff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3, 0x0, &(0x7f00000000c0)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xd) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0xd) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x200) 06:54:07 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x6800000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf000, 0xd, &(0x7f0000000000)=""/208) [ 1193.774728][T25734] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20000 06:54:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:54:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$kcm(0x2, 0x1000000000000805, 0x84) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)='.', 0x1}], 0x1}, 0x0) close(r1) 06:54:07 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x6a00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf001, 0xd, &(0x7f0000000000)=""/208) 06:54:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") [ 1194.441653][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:54:08 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) tkill(r0, 0x1000000000016) 06:54:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:54:08 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x6c00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf100, 0xd, &(0x7f0000000000)=""/208) 06:54:08 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xd) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) r3 = dup2(r2, r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x606001, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) bind$unix(r4, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) unlink(0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x32001, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x50880, 0x0) eventfd(0xfff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3, 0x0, &(0x7f00000000c0)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xd) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0xd) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x200) 06:54:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:54:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf101, 0xd, &(0x7f0000000000)=""/208) 06:54:08 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x7200000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) [ 1194.987244][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:54:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf200, 0xd, &(0x7f0000000000)=""/208) 06:54:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) 06:54:09 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff14000000630277fbac141435ee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 06:54:09 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:09 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x7400000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf201, 0xd, &(0x7f0000000000)=""/208) 06:54:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:54:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000000095000400000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd917487960717142fa9ea4318123341c0a0e168c1886d0d4d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c931d2f398d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b8580218ce74005d2a1bcf9436e192e23fd2f73902ebcfcf49822775985bf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465bc52f49129b9b6150e320c9901de2ebb9dd697f698e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c2870f01a2c02dec4cd1f570dd39877dfb2c11ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e517237c872c5255f22bd8b325d9b76e57f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72706157791c3d2a2861eb8d3545236c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a09c502f9a65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434ab422d2bcd7cd6dfc06b02e69d384146056d125cfa788237874dd913d033277e88d10acd06864eac44c42dae334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa24dba1c25be27940b4c4f63483026b5e34d44705b76ef29245e02069f6f24e1e1bc976d965ddabb01aff9f2c1d9a4a3e7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebd29413afc9d8a5edd7a19ca6a57b5a8fa7e1e6c2f2a287c5278a218dbe173ec6900a13db5cfef409eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e24e2ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41f47e0fffeac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a5628995b1531bd20360d33d8f9ffffff5f912a93e34bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f095314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e8d756bfa8756d309d7c422f03a3f822f18b17fdd511989b1780fae2db3ecb9a2fd8b91c15f763e00ee1f9652f40041b9d64c95dc8"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xdc, 0x0, &(0x7f00000003c0)="b9ff0300600d698cb89e14f065581f000cff000e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab1eefdd130dac55845013f2325f1a39010108038da1924425181aa5dda12019401e915b96753532c2d8291d835244d21df2cb9103bdecd40548da13f0e447c4deb8d8cd64e3db9f5e538c47a85a154d92a26c6e2475faa931ab7e7735ae5408a07b51a412711924c0263bf9711bf5daecf15d12884913686a5d31b71924b6e3c1ac11bf14ae1475e00c85e37d1f4aef013da49d166d2118704feaa070fd01c01683520db269d5b235c4993f1dcbbc", 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000040)}, 0x23) 06:54:09 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf300, 0xd, &(0x7f0000000000)=""/208) 06:54:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:54:09 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x7500000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:09 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(tea)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYPTR64], 0xa059) recvmmsg(r1, &(0x7f0000006c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000200)=""/190, 0x200002be}], 0x2}}], 0x1, 0x0, 0x0) 06:54:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) 06:54:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf301, 0xd, &(0x7f0000000000)=""/208) 06:54:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) 06:54:10 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) clone(0x20102583, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:54:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf400, 0xd, &(0x7f0000000000)=""/208) 06:54:10 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x7700000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:54:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf401, 0xd, &(0x7f0000000000)=""/208) 06:54:10 executing program 1: ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80, 0x9, 0x20, 0x8, 0x0, 0x400, 0xdf6, 0x2, 0x0, 0x0, 0x2, [], 0x3, 0x1000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) r4 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f00000010c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x5e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') 06:54:10 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001380)='/dev/nvram\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 06:54:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:54:10 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x7a00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="ffd9531c1969030000005b7213f6012f663000d6720081009ce3a9eb0700ffffffff6b6f0000008e66314deeca7a9c45b9d7856578677fd6afa9eda0f170bcc18c1ca28edacedf71b8836b3fd87193a7da85325a6c4e9b8a4e2c850c521771a31f30237d5642ba4586d7006fcae1f4921129ba01cfbf40684ba3b5291f"], 0x7d) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 06:54:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf500, 0xd, &(0x7f0000000000)=""/208) 06:54:13 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:54:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf501, 0xd, &(0x7f0000000000)=""/208) 06:54:13 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x7b02000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ad042, 0x0) ftruncate(r1, 0x28007d) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1ad042, 0x0) sendfile(r2, r2, 0x0, 0x2008000fffffffe) sendfile(r1, r1, 0x0, 0x2008000fffffffe) 06:54:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r1, r0) 06:54:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 06:54:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf600, 0xd, &(0x7f0000000000)=""/208) [ 1199.531560][ T27] audit: type=1800 audit(1583045653.233:8322): pid=26028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17781 res=0 [ 1199.559225][ T27] audit: type=1800 audit(1583045653.243:8323): pid=26028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17781 res=0 06:54:13 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x7d00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000180)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x10530046}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 06:54:13 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20004008) 06:54:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) [ 1199.825561][ T27] audit: type=1800 audit(1583045653.523:8324): pid=26036 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17781 res=0 [ 1199.846882][ T27] audit: type=1800 audit(1583045653.523:8325): pid=26028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17781 res=0 [ 1200.045410][T26057] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 06:54:16 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf601, 0xd, &(0x7f0000000000)=""/208) 06:54:16 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x7e02000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:16 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="ffd9531c1969030000005b7213f6012f663000d6720081009ce3a9eb0700ffffffff6b6f0000008e66314deeca7a9c45b9d7856578677fd6afa9eda0f170bcc18c1ca28edacedf71b8836b3fd87193a7da85325a6c4e9b8a4e2c850c521771a31f30237d5642ba4586d7006fcae1f4921129ba01cfbf40684ba3b5291f044a005ad60fa5f0345647b1a74ad0789db8cc"], 0x90) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 06:54:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:54:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000180)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x10530046}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 06:54:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf700, 0xd, &(0x7f0000000000)=""/208) 06:54:16 executing program 1: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x2, 0xc, 0x0, 0x9, 0x0, 0x0, "61b7ff6f"}, 0x0, 0x0, @planes=&(0x7f0000000100), 0x1000}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x4}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d01a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x24004880) 06:54:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) 06:54:16 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x8000000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf701, 0xd, &(0x7f0000000000)=""/208) 06:54:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) 06:54:19 executing program 3: r0 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f1"], 0x1}}], 0x1, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x7ff, 0x4) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeec, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x27d}], 0x1}, 0x0) 06:54:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf800, 0xd, &(0x7f0000000000)=""/208) 06:54:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:54:19 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x8cffffff00000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:19 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ad042, 0x0) ftruncate(r0, 0x28007d) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1ad042, 0x0) sendfile(r1, r1, 0x0, 0x2008000fffffffe) sendfile(r0, r0, 0x0, 0x2008000fffffffe) [ 1205.623369][ T27] audit: type=1800 audit(1583045659.323:8326): pid=26138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16769 res=0 06:54:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf801, 0xd, &(0x7f0000000000)=""/208) 06:54:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) [ 1205.732562][ T27] audit: type=1800 audit(1583045659.403:8327): pid=26138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16769 res=0 06:54:19 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xd602000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) [ 1205.799284][ T27] audit: type=1800 audit(1583045659.423:8328): pid=26148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16769 res=0 06:54:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0), 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000180)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x10530046}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 06:54:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f1"], 0x1}}], 0x1, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x7ff, 0x4) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeec, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x27d}], 0x1}, 0x0) 06:54:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf900, 0xd, &(0x7f0000000000)=""/208) [ 1205.952941][ T27] audit: type=1800 audit(1583045659.443:8329): pid=26149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16769 res=0 06:54:22 executing program 3: r0 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:22 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:54:22 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xda01000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf901, 0xd, &(0x7f0000000000)=""/208) 06:54:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10001) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0x1c01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 06:54:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x0) 06:54:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfa00, 0xd, &(0x7f0000000000)=""/208) 06:54:22 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:54:22 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000002200)="ba", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, 0x0}}], 0x1, 0xe0, 0x0) 06:54:22 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xec00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:22 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000000)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:54:22 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:54:25 executing program 3: r0 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfa01, 0xd, &(0x7f0000000000)=""/208) 06:54:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 06:54:25 executing program 1: 06:54:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:54:25 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xf400000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 06:54:25 executing program 1: 06:54:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfb00, 0xd, &(0x7f0000000000)=""/208) 06:54:25 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xf6ffffff00000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfb01, 0xd, &(0x7f0000000000)=""/208) 06:54:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:54:28 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1000000000016) 06:54:28 executing program 1: 06:54:28 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfc00, 0xd, &(0x7f0000000000)=""/208) 06:54:28 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xf903000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:28 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:54:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 06:54:28 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfc01, 0xd, &(0x7f0000000000)=""/208) 06:54:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ftruncate(r2, 0x200004) prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 06:54:28 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:54:28 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xf9fdffff00000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:54:29 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfd00, 0xd, &(0x7f0000000000)=""/208) 06:54:29 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1000000000016) 06:54:29 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xfd03000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:29 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfd01, 0xd, &(0x7f0000000000)=""/208) 06:54:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:54:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) 06:54:29 executing program 5: 06:54:29 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfe00, 0xd, &(0x7f0000000000)=""/208) 06:54:30 executing program 1: 06:54:30 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:54:30 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xfe03000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:30 executing program 5: 06:54:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xfe01, 0xd, &(0x7f0000000000)=""/208) 06:54:30 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1000000000016) 06:54:30 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:54:30 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)) 06:54:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea05628cdaf1166117730215042c222c571e5da4ce16753a1361f1be68b35bdc9b", 0x21}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xff00, 0xd, &(0x7f0000000000)=""/208) 06:54:30 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xff00000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xff01, 0xd, &(0x7f0000000000)=""/208) 06:54:30 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xfffffffffffffffb, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:54:30 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) 06:54:30 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xff03000000000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:31 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/4093, 0xffd}], 0x1, 0x0) 06:54:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x20000, 0xd, &(0x7f0000000000)=""/208) [ 1217.310070][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x4000005e data 0xffff0000 [ 1217.354561][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x4000000d data 0xffff0000 [ 1217.401334][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x4000006b data 0xffff0000 [ 1217.422213][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x4000001a data 0xffff0000 [ 1217.468833][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x40000078 data 0xffff0000 [ 1217.516924][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x40000027 data 0xffff0000 [ 1217.538761][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x40000085 data 0xffff0000 [ 1217.556602][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x40000034 data 0xffff0000 [ 1217.635378][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x40000041 data 0xffff0000 [ 1217.700687][T26430] kvm [26423]: vcpu0, guest rIP: 0x108 Hyper-V unhandled wrmsr: 0x4000004e data 0xffff0000 06:54:31 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:54:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x200000, 0xd, &(0x7f0000000000)=""/208) 06:54:31 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xffffff7f00000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:31 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000056ce36b68b0f334d6c37d03057c9ecee866f55e3376e4a82071d7827afd2d144b81e55b3f31672797fc00300533324f871d94768e25851d3162c1bde856ed69b673e5b8d861ff207c0eb4b60a82fc3c0e2085d6add5893b223989bb454af0805f231eb8474953f640e3d490cdc0448ecf21b205768e34ab95b6ef820398c1ba4b81cee61a98d7df3768db9bd084623ca56c82b205eca4d90628aeacbd4654eb4371861a98bb8fc0fb89f8abf8e94d4429449cd85af76d9929b318c989bead2f9921120246508b0ab814b38f9cac8fea1a8c4712b53306cdca649a62720cd661d21ab5d7a8b9f974b4f5da4862c01b4cbe5f279fe779d5f9f366ec0aee3344d712d35edc17c209296c3db7ff279c9bc5ab356c3471399f860fef75f37888d0b0968f5a8fcdf57cc5c62f45fcaccb1a340"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b700030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 06:54:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f086dd1fffffe100003a00632f77fbac141412e0000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 06:54:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:54:31 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1000000, 0xd, &(0x7f0000000000)=""/208) 06:54:31 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xffffffff00000000, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) openat$cgroup_ro(r1, &(0x7f0000000680)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 06:54:32 executing program 3: r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:54:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'vlan0\x00'}, 0x263) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 06:54:32 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1010000, 0xd, &(0x7f0000000000)=""/208) 06:54:32 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:32 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) openat$cgroup_ro(r1, &(0x7f0000000680)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 06:54:32 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2000000, 0xd, &(0x7f0000000000)=""/208) 06:54:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) openat$cgroup_ro(r1, &(0x7f0000000680)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 06:54:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 06:54:32 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl', 0x3b}]}) 06:54:32 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2010000, 0xd, &(0x7f0000000000)=""/208) 06:54:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:54:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) openat$cgroup_ro(r1, &(0x7f0000000680)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) [ 1219.136769][T26545] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1219.136769][T26545] 06:54:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:54:33 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3000000, 0xd, &(0x7f0000000000)=""/208) [ 1219.309018][T26545] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1219.309018][T26545] 06:54:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) [ 1221.190785][ T0] NOHZ: local_softirq_pending 08 06:54:35 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) 06:54:35 executing program 5: socket$kcm(0xa, 0x0, 0x11) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x55}) 06:54:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0185879, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) openat$cgroup_ro(r1, &(0x7f0000000680)='cpuset.effective_cpus\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 06:54:35 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl', 0x5d}]}) 06:54:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3010000, 0xd, &(0x7f0000000000)=""/208) 06:54:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4000000, 0xd, &(0x7f0000000000)=""/208) 06:54:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) [ 1221.896449][T26598] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1221.896449][T26598] [ 1221.915677][T26605] EXT4-fs warning (device sda1): verify_group_input:131: Cannot add at group 85 (only 16 groups) 06:54:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4010000, 0xd, &(0x7f0000000000)=""/208) [ 1222.108853][T26598] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1222.108853][T26598] 06:54:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x40}}, 0x0) 06:54:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:54:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:38 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5000000, 0xd, &(0x7f0000000000)=""/208) 06:54:38 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl', 0x6c}]}) 06:54:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:54:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r5, &(0x7f0000000000)={&(0x7f0000000040), 0x10, 0x0}, 0x0) close(0xffffffffffffffff) 06:54:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5010000, 0xd, &(0x7f0000000000)=""/208) [ 1224.969809][T26656] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1224.969809][T26656] 06:54:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:54:38 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) fcntl$setsig(r1, 0xa, 0x21) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f0000000240)='./file0\x00', 0x80000, 0xa6) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r0, 0x0) 06:54:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6000000, 0xd, &(0x7f0000000000)=""/208) 06:54:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1225.225902][T26656] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1225.225902][T26656] 06:54:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:54:41 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:41 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) 06:54:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6010000, 0xd, &(0x7f0000000000)=""/208) 06:54:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:54:41 executing program 5: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x9c}}, 0x0) 06:54:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) [ 1228.040666][T26709] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7000000, 0xd, &(0x7f0000000000)=""/208) 06:54:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') preadv(r0, &(0x7f0000000500), 0x37d, 0x0) 06:54:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1228.263553][T26709] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:54:42 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x2}) [ 1228.603844][T26744] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1228.722798][T26744] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:44 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:44 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:54:44 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7010000, 0xd, &(0x7f0000000000)=""/208) 06:54:44 executing program 5: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pipe(&(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 06:54:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:44 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x3}) 06:54:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:44 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:54:44 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8000000, 0xd, &(0x7f0000000000)=""/208) 06:54:44 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) pipe(&(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 1231.101017][T26764] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:45 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8010000, 0xd, &(0x7f0000000000)=""/208) [ 1231.347812][T26764] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:54:47 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)={0x0, 0x8, 0x4, 0x1000, 0x0, {0x0, 0x2710}, {0x1, 0x0, 0x8c, 0x5, 0x80, 0x0, "87487ecb"}, 0x0, 0x4, @fd}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) pipe(&(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 06:54:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:47 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x4}) 06:54:47 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9000000, 0xd, &(0x7f0000000000)=""/208) 06:54:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:47 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9010000, 0xd, &(0x7f0000000000)=""/208) [ 1234.186785][T26814] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:54:48 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cpuset\x00') r1 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) stat(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 1234.405000][T26814] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) 06:54:50 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:50 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa000000, 0xd, &(0x7f0000000000)=""/208) 06:54:50 executing program 5: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000080)={0x28}, 0x28) 06:54:50 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x5}) 06:54:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:50 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:54:50 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa010000, 0xd, &(0x7f0000000000)=""/208) 06:54:50 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) [ 1237.192625][T26862] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) [ 1237.339458][T26862] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:51 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xb000000, 0xd, &(0x7f0000000000)=""/208) 06:54:51 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x6}) [ 1237.463756][ T27] audit: type=1800 audit(1583045691.163:8330): pid=26880 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=17137 res=0 06:54:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) [ 1237.566627][T26887] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1237.748714][T26887] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:53 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:53 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) 06:54:53 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xb010000, 0xd, &(0x7f0000000000)=""/208) 06:54:53 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:54:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:53 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x7}) [ 1240.226707][T26910] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty}, &(0x7f00000000c0)=0x20) 06:54:54 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 06:54:54 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xc000000, 0xd, &(0x7f0000000000)=""/208) 06:54:54 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:54:54 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x453, 0x0, 0x0, 0x0, "", [""]}, 0x10}}, 0x0) [ 1240.485238][T26910] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:54 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) [ 1240.571425][ T27] audit: type=1107 audit(1583045694.273:8331): pid=26940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined msg='' [ 1242.318574][ T0] NOHZ: local_softirq_pending 08 06:54:56 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:54:56 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xc010000, 0xd, &(0x7f0000000000)=""/208) 06:54:56 executing program 5: 06:54:56 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x8}) 06:54:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:54:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:54:57 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xd000000, 0xd, &(0x7f0000000000)=""/208) [ 1243.316562][T26957] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:57 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xd010000, 0xd, &(0x7f0000000000)=""/208) 06:54:57 executing program 5: [ 1243.456573][T26957] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:54:57 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:54:57 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0xa}) 06:54:57 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe000000, 0xd, &(0x7f0000000000)=""/208) [ 1243.811210][T26991] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option " [ 1243.811210][T26991] " [ 1243.968875][T26991] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option " [ 1243.968875][T26991] " 06:55:00 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:00 executing program 5: 06:55:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xe010000, 0xd, &(0x7f0000000000)=""/208) 06:55:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) 06:55:00 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x10}) 06:55:00 executing program 5: 06:55:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) [ 1246.497744][T27011] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:00 executing program 5: 06:55:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) [ 1246.619777][T27011] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf000000, 0xd, &(0x7f0000000000)=""/208) 06:55:00 executing program 5: 06:55:00 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:00 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x3d}) 06:55:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xf010000, 0xd, &(0x7f0000000000)=""/208) 06:55:00 executing program 5: add_key(&(0x7f0000000000)='keyring\x00', 0x0, &(0x7f0000000080)='v', 0x1, 0xfffffffffffffffc) 06:55:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:55:00 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:00 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:00 executing program 5: socket(0x29, 0x2, 0x0) [ 1247.211909][T27057] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "=" 06:55:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:55:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x10000000, 0xd, &(0x7f0000000000)=""/208) 06:55:01 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:01 executing program 5: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) [ 1247.498973][T27057] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "=" 06:55:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:55:01 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:01 executing program 5: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xdced3cb53869b78c) 06:55:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x10010000, 0xd, &(0x7f0000000000)=""/208) 06:55:01 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x48}) 06:55:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0xb}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 06:55:01 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1247.886627][T27100] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "H" 06:55:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:55:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x11000000, 0xd, &(0x7f0000000000)=""/208) 06:55:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x11010000, 0xd, &(0x7f0000000000)=""/208) [ 1248.098372][T27100] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "H" 06:55:01 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0xfffffffffffffffd, 0x0) 06:55:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:55:02 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x4c}) 06:55:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x12000000, 0xd, &(0x7f0000000000)=""/208) 06:55:02 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 06:55:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 06:55:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x12010000, 0xd, &(0x7f0000000000)=""/208) [ 1248.676714][T27152] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "L" 06:55:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:55:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000380)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xe8243ad65a0d15e9, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c0ce994efd18498d66205baa58754a3f5ffffff020000000000000000001000000021000000003f0000c0", 0x31}], 0x1}, 0x900) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={0x0, r1, 0xb}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40286608, 0x2000006c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020000a92b3cc9dc2878c40000002100000340000000", 0x30}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40286608, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg$kcm(r2, &(0x7f0000000680)={&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/141, 0x8d}], 0x1, &(0x7f0000000640)=""/23, 0x17}, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000006c0)) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x70, 0x40, 0x6, 0x7, 0xd4, 0x0, 0x401, 0x904da, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xec4, 0x1, @perf_bp={&(0x7f0000000000), 0xd}, 0x2000, 0x0, 0x75, 0x4, 0x5dd60fe2, 0x4, 0x7f}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) 06:55:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1248.970560][T27152] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "L" 06:55:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x13000000, 0xd, &(0x7f0000000000)=""/208) 06:55:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:55:02 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x60}) 06:55:02 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:02 executing program 5: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) clone(0x274c3445b72, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:55:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x13010000, 0xd, &(0x7f0000000000)=""/208) 06:55:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:55:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1249.402509][T27194] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "`" 06:55:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) [ 1249.707262][T27194] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "`" 06:55:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:03 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x14000000, 0xd, &(0x7f0000000000)=""/208) 06:55:03 executing program 5: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000002c0)={r0}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'sm3\x00'}}, 0x0, 0x0) 06:55:03 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x63}) 06:55:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:55:03 executing program 5: socket$kcm(0x2, 0x3, 0x2) 06:55:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:03 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x14010000, 0xd, &(0x7f0000000000)=""/208) 06:55:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) [ 1250.171857][T27239] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "c" 06:55:03 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003240)={'vxcan0\x00'}) 06:55:03 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x15000000, 0xd, &(0x7f0000000000)=""/208) 06:55:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) [ 1250.419449][T27239] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "c" 06:55:04 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x66}) 06:55:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:04 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}}, 0x0) 06:55:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:55:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x15010000, 0xd, &(0x7f0000000000)=""/208) 06:55:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2062b041}, [@call={0x85, 0x10, 0x0, 0x60}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1250.727800][T27293] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "f" 06:55:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:04 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1250.825561][T27293] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "f" 06:55:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) 06:55:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x16000000, 0xd, &(0x7f0000000000)=""/208) 06:55:04 executing program 5: r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$get_security(0x11, r0, 0x0, 0x0) 06:55:04 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:04 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x67}) 06:55:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x16010000, 0xd, &(0x7f0000000000)=""/208) 06:55:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:55:04 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f00000016c0)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x2040) 06:55:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x17000000, 0xd, &(0x7f0000000000)=""/208) [ 1251.265840][T27331] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "g" 06:55:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x17010000, 0xd, &(0x7f0000000000)=""/208) 06:55:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x18000000, 0xd, &(0x7f0000000000)=""/208) 06:55:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) [ 1251.452510][T27331] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "g" 06:55:05 executing program 5: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() tkill(r0, 0x1000000000016) 06:55:05 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x18010000, 0xd, &(0x7f0000000000)=""/208) 06:55:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x103, 0x0, 0x0) 06:55:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:55:05 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x68}) 06:55:05 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x19000000, 0xd, &(0x7f0000000000)=""/208) 06:55:05 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x2, [{}, {}]}, 0x48) [ 1252.041005][T27384] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "h" 06:55:05 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x19010000, 0xd, &(0x7f0000000000)=""/208) 06:55:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 06:55:05 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:05 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 1252.336189][T27384] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "h" 06:55:06 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:06 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1a000000, 0xd, &(0x7f0000000000)=""/208) 06:55:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:55:06 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x40a, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r2 = dup2(r0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) pipe(0x0) r6 = socket(0x0, 0x0, 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x40002) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x8000) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200a8200}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x100) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r7, 0x200, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20050005}, 0x1) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r7, 0x0, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$IPVS_CMD_SET_DEST(r2, 0x0, 0x4) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000080000000) 06:55:06 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x6a}) 06:55:06 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:06 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1a010000, 0xd, &(0x7f0000000000)=""/208) 06:55:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:55:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) [ 1253.102791][T27432] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "j" 06:55:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:06 executing program 5: r0 = timerfd_create(0x7, 0x0) timerfd_gettime(r0, &(0x7f00000034c0)) 06:55:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) [ 1253.287535][T27432] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "j" 06:55:07 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1000000000016) 06:55:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1b000000, 0xd, &(0x7f0000000000)=""/208) 06:55:07 executing program 5: r0 = socket(0x10, 0x803, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) 06:55:07 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x6c}) 06:55:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:55:07 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x38, 0x1, [@m_vlan={0x34, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}]}, {0x4}}}]}]}, 0x4c}}, 0x0) 06:55:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) [ 1253.971345][T27481] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "l" 06:55:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:55:07 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) 06:55:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1b010000, 0xd, &(0x7f0000000000)=""/208) 06:55:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1254.214204][T27481] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "l" 06:55:08 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1000000000016) 06:55:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @random="7c3edbf97c74"}, 0x10) 06:55:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1c000000, 0xd, &(0x7f0000000000)=""/208) 06:55:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:55:08 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x72}) 06:55:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:55:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1254.841299][T27524] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "r" 06:55:08 executing program 5: prctl$PR_SET_PDEATHSIG(0x3a, 0x0) 06:55:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:55:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1c010000, 0xd, &(0x7f0000000000)=""/208) [ 1255.013404][T27524] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "r" 06:55:08 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1000000000016) 06:55:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 06:55:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:08 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x74}) 06:55:08 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x411, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 06:55:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:55:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1d000000, 0xd, &(0x7f0000000000)=""/208) [ 1255.314193][T27565] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "t" 06:55:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 06:55:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1255.440612][T27565] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "t" 06:55:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1d010000, 0xd, &(0x7f0000000000)=""/208) 06:55:09 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x0) 06:55:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:09 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 06:55:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:55:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1e000000, 0xd, &(0x7f0000000000)=""/208) 06:55:09 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x75}) 06:55:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1e010000, 0xd, &(0x7f0000000000)=""/208) 06:55:09 executing program 5: r0 = add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000940)="cd", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) [ 1256.094818][T27606] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "u" 06:55:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:55:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1f000000, 0xd, &(0x7f0000000000)=""/208) 06:55:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x1f010000, 0xd, &(0x7f0000000000)=""/208) [ 1256.321228][T27606] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "u" 06:55:10 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x0) 06:55:10 executing program 5: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x13, r0, 0x83000000) 06:55:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x20000000, 0xd, &(0x7f0000000000)=""/208) 06:55:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:55:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:10 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x77}) 06:55:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x20010000, 0xd, &(0x7f0000000000)=""/208) 06:55:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:10 executing program 5: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 1257.138207][T27657] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "w" 06:55:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x21000000, 0xd, &(0x7f0000000000)=""/208) 06:55:10 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:55:11 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x21010000, 0xd, &(0x7f0000000000)=""/208) [ 1257.308382][T27657] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "w" 06:55:11 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x0) 06:55:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:11 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x22000000, 0xd, &(0x7f0000000000)=""/208) 06:55:11 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x7a}) 06:55:11 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x100d0400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:55:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:55:11 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) [ 1257.994490][T27704] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "z" 06:55:11 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x22010000, 0xd, &(0x7f0000000000)=""/208) 06:55:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) 06:55:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) [ 1258.156426][T27704] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "z" 06:55:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:12 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000001780), &(0x7f00000017c0)={0x8}, 0x0, &(0x7f0000001880), 0x0) 06:55:12 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x23000000, 0xd, &(0x7f0000000000)=""/208) 06:55:12 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0x7d}) 06:55:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:55:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x40000}, 0x1c) 06:55:12 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x23010000, 0xd, &(0x7f0000000000)=""/208) [ 1258.959417][T27748] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "}" 06:55:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xec4, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x2000, 0x0, 0x75, 0x0, 0x5dd60fe2, 0x4, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 06:55:12 executing program 3: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 06:55:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) 06:55:12 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x24000000, 0xd, &(0x7f0000000000)=""/208) 06:55:12 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 06:55:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1259.223105][T27748] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "}" 06:55:13 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0xec}) 06:55:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:55:13 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, &(0x7f0000000080)="689c2b2cb3f63484fa2cb264808131c4173ea37affe1a731d39937233c98f35e09f0d9e96f983d9025952e107856db6528d9e9ab775a72a8e458fc2a861b7bdba2d39f369716697d849f60cc76718188dd77c9dc09d4d01d699dacc74fc3a7a5336f0404744f4134cfaa9d10081c8919ae6a6d1cf28b7e797ab79d959fce57b2ef5fd9a7e7d5409841939ffd05064a865177d6c35d32d5ce596d4c0ede7b7e92ef8b0b85408a25fc1e9f8ac8814415ec12afde2abb33e961e21406f5b5b47d309050091b1b1a6eb0d4e4f44181a07dbc4c01b8323fec5a45b354a928f51d000000000000", 0xe4, r0) 06:55:13 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe100004000638477fbac14143fe0004301c699da153f08a0e6e380f601fdf683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x8, 0x10, 0x0}, 0x78) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 06:55:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x24010000, 0xd, &(0x7f0000000000)=""/208) 06:55:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1259.499607][T27793] Invalid option length (199) for dns_resolver key 06:55:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:55:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x25000000, 0xd, &(0x7f0000000000)=""/208) [ 1259.616744][T27801] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ì" 06:55:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:13 executing program 3: timer_create(0x3, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 06:55:13 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x2, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0x5, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) [ 1259.866937][T27801] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ì" [ 1259.929136][T27825] tipc: Invalid UDP bearer configuration [ 1259.929160][T27825] tipc: Enabling of bearer rejected, failed to enable media [ 1259.993763][T27829] tipc: Invalid UDP bearer configuration [ 1259.993788][T27829] tipc: Enabling of bearer rejected, failed to enable media 06:55:13 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0xf4}) 06:55:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x25010000, 0xd, &(0x7f0000000000)=""/208) 06:55:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:55:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 06:55:13 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:55:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x26000000, 0xd, &(0x7f0000000000)=""/208) 06:55:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 06:55:14 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1260.320535][T27849] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ô" 06:55:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:14 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:55:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000400)={{}, 'port0\x00'}) [ 1260.616154][T27849] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ô" 06:55:14 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}], [], 0xff}) 06:55:14 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x26010000, 0xd, &(0x7f0000000000)=""/208) 06:55:14 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 06:55:14 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:55:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x14) [ 1260.776440][ T27] audit: type=1326 audit(1583045714.473:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27884 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f2ba code=0x0 06:55:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006311180000000000950000000000000099f112fe85da5976fbe239bd9c8fca326a0b109fc9cbedb65195fad0ff4a19c1d777c724ff6ab84d85a91268b47724d1e0c6de5b5e8d16d2e28f524f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 06:55:14 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x27000000, 0xd, &(0x7f0000000000)=""/208) 06:55:14 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) 06:55:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1260.944342][T27898] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿ" 06:55:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x4}) 06:55:14 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x27010000, 0xd, &(0x7f0000000000)=""/208) [ 1261.109687][T27898] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿ" 06:55:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000380)=""/177) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x1, 0x0, 0x0, 0x820, &(0x7f0000000080)=ANY=[@ANYBLOB="be", @ANYRES32, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESDEC=r0]]) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x4, {0x7, 0x9, 0xfffffffe, 0x7}}) 06:55:15 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) [ 1261.578196][ T27] audit: type=1326 audit(1583045715.283:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27884 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f2ba code=0x0 06:55:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @remote}}, 0x1c) 06:55:15 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x75, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 06:55:15 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x28000000, 0xd, &(0x7f0000000000)=""/208) 06:55:15 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:55:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:15 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c00b536b4e055451ef39241e7d1f054c80b788ececc6b3421f7a6adfdf39d6437dcab8207bfe9e44e57436aa992cbc70d372d2adaab2d592d8d10acaccc69019c977a133363b014a40cac6981bbae123f1553005d52f257398592fce70f2bc50db9b18f2009aa4fcfaea123ba0de0463ac28e2d849004cc1d0eb402ce6bb699be557a597466e13fe5f73f5f448eb428daf05b7f44a4aae47b7599a396207665e4b014731387b426e60198bfa347a87a3d004eac90a3a0347b65e6cfcc40de7af20c"]) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") recvfrom$inet6(r0, &(0x7f00000004c0)=""/4096, 0x1000, 0x2, &(0x7f0000000000)={0xa, 0x4e22, 0x6623861e, @local, 0xfffff5e8}, 0x1c) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x200000, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x2801, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f00000003c0)) setfsuid(r4) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r8) write$P9_RGETATTR(r2, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x2010, {0x4, 0x4, 0x4}, 0x140, r4, r8, 0x7, 0x80, 0x1, 0xf96f, 0x0, 0x1, 0x0, 0x0, 0x4, 0x5, 0x1, 0x0, 0x3, 0x3, 0x100000000}}, 0xa0) 06:55:15 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x28010000, 0xd, &(0x7f0000000000)=""/208) 06:55:15 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:55:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1261.898060][T27959] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:15 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x29000000, 0xd, &(0x7f0000000000)=""/208) 06:55:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8981, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags}) 06:55:15 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:55:15 executing program 3: prctl$PR_SET_PDEATHSIG(0x35, 0x0) 06:55:15 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000020201"]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) mq_notify(r1, 0x0) r2 = openat(r1, &(0x7f0000000000)='./bus\x00', 0x1, 0xa1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000380)={0x7, 0x1, 0x4, 0x100, 0x9, {0x77359400}, {0x1, 0x2, 0x6, 0xff, 0x1, 0x8b, "96b65e74"}, 0xe1e, 0x1, @planes=&(0x7f0000000340)={0x5, 0x8, @mem_offset=0x8, 0x6}, 0x6ca, 0x0, r0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0]}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000080)={0x81, 0x1, 0x400, 0x1, &(0x7f0000000040)=[{0x201, 0xff4c, 0x2, 0x2}]}) lgetxattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=@known='security.apparmor\x00', &(0x7f00000004c0)=""/4096, 0x1000) 06:55:15 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x29010000, 0xd, &(0x7f0000000000)=""/208) 06:55:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:55:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00deca0895838e00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002000000fdff514d2be9dd6e0016fde5e72aeea3e450381ce74f06e55c085666a8ce7db8a443ac24baea00000000dae0f0dd238b4ed1773825d752d4305a989cf68d5a3aec7d6ea54501d825cade0604b00bc763acbac48d869322a5f1af22ef35120349f4593504a81cbd68e20ea4c1bed7ea702fa052e69329973b7de51ce93c81dad369542e1090f3a5b59ee909f0b3c299e2341b01e77fc57cd6e24ed3bb09ecad70d9703fda1a6c040425571c413976a45ecada357104b0731b746d67bd2dfa7329"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}}, 0x0) 06:55:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.usage_all\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) ioctl$TUNSETFILTEREBPF(r0, 0x6611, 0x0) [ 1262.354327][T27996] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 06:55:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2a000000, 0xd, &(0x7f0000000000)=""/208) 06:55:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5428) [ 1262.568751][T27996] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 06:55:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x5411, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags}) 06:55:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:55:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2a010000, 0xd, &(0x7f0000000000)=""/208) 06:55:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), 0x4) 06:55:16 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x18) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r7, @ANYBLOB="004578ba2a59ffb623d60000800000000004"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r7, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x4, 0x1000000000000000, 0x120000000000, 0x7ff}) read$snddsp(r2, &(0x7f0000000000)=""/243, 0xf3) 06:55:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:55:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2b000000, 0xd, &(0x7f0000000000)=""/208) 06:55:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:55:16 executing program 3: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000021c0)=""/131, 0x83}, {&(0x7f0000002280)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)=""/205, 0xcd}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000a40)=""/110, 0x6e}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x97}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 06:55:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2b010000, 0xd, &(0x7f0000000000)=""/208) 06:55:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) [ 1263.210098][T28043] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1263.302544][T28057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1263.445181][T28043] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:17 executing program 5: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 06:55:17 executing program 3: syz_genetlink_get_family_id$nl80211(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) 06:55:17 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2c000000, 0xd, &(0x7f0000000000)=""/208) 06:55:17 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:55:17 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x6000000, 0x6, 0x3, 0xdededede}) 06:55:17 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2c010000, 0xd, &(0x7f0000000000)=""/208) 06:55:17 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x133642, 0x0) 06:55:17 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:55:17 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000005c0)="e27f9718b1675965bc4c56aff2a754939b6cd68ff1083fe1ede974c1719ebfac4aa1a8348618683089e5b780fbf39bd3779f5d3fc677e4b8401bdf5a1d86ab397cf9c8d2f7912103a4251dc14c86395a7d6c7a047428f378a3ceb04c74e5ea969c4657d932270e860527", 0x6a}, {&(0x7f0000000000)="97b8f5de98917547b7209e3040e2f64f48a441e7e190f539052a880077fbdab71547169896fed3bf59faab285ac1df55954ee05d0fcfcc37df2d1d6d0a327dbe52474e90b75dddf08a5b5ce965f609363cb99e8b9e12b2f0671a68a23ab6d64fb7a0aa3663eebe63073baeac5c43d2a239efc1403075ec35906f96ce611d2eec4d33c8c52833d37a9577910277", 0x8d}, {&(0x7f0000001340)="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", 0x17a}], 0x3}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="1e268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b087511bf746bec66ba", 0x170, 0x11, 0x0, 0x27) 06:55:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000001180)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @remote}}}}, 0x62) 06:55:17 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2d000000, 0xd, &(0x7f0000000000)=""/208) [ 1264.006881][T28098] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1264.177179][T28098] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:18 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 06:55:18 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:55:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2d010000, 0xd, &(0x7f0000000000)=""/208) 06:55:18 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)) 06:55:18 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="618b0f0000"]) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x40100, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x3}) 06:55:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2e000000, 0xd, &(0x7f0000000000)=""/208) 06:55:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c73000000000000000000a00000018000480130001005c726f61646361032d6c696e6b0000"], 0x2c}}, 0x0) [ 1264.575331][T28142] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "a‹" 06:55:18 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) [ 1264.721614][T28142] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "a‹" 06:55:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2e010000, 0xd, &(0x7f0000000000)=""/208) 06:55:18 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x80000, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3d, &(0x7f0000000040)=""/166, &(0x7f0000000100)=0xa6) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x84, 0x1, "da5e6f0b732b6074949e7ac87f1ff5f7a987e1138d5af7c08eb5887afa1e1a571769af5bbbfebde889dc01b8e3c552294444a0aecb2334656b96c94a2afb8902c4c1a9ba219ae26e89c4c046cc6d68a235f3a9cebaa7b786d7a48ad03857436af0225a0bd9046264faa2ac7ff950eef26f4de04432c1c8b08b0e7cfa"}, &(0x7f00000002c0), 0x400) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000300)) 06:55:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2f000000, 0xd, &(0x7f0000000000)=""/208) [ 1265.125507][T28178] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:18 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20001, 0x0) read$dsp(r0, 0x0, 0x0) 06:55:18 executing program 5: process_vm_readv(0x0, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/120, 0x78}], 0x1, &(0x7f0000002540)=[{&(0x7f00000013c0)=""/1, 0x1}], 0x1, 0x0) 06:55:18 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:55:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x2f010000, 0xd, &(0x7f0000000000)=""/208) 06:55:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) 06:55:19 executing program 3: prctl$PR_SET_PDEATHSIG(0x24, 0x0) [ 1265.411698][T28178] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x30000000, 0xd, &(0x7f0000000000)=""/208) 06:55:19 executing program 5: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:55:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:55:19 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="61630bba2db2d115f1ae8f21e8da2adc3c0399e58492cc6870d2bf091814c303a8bf2e712b5150e2f0f7efa52e7ed38b906f"]) 06:55:19 executing program 3: prctl$PR_SET_PDEATHSIG(0x1e, 0x0) [ 1265.889483][T28228] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ac º-²Ññ®!èÚ*Ü<™å„’ÌhpÒ¿ è¿.q+QPâð÷ï¥.~Ó‹o" 06:55:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:55:19 executing program 5: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 06:55:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x30010000, 0xd, &(0x7f0000000000)=""/208) 06:55:19 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x0, 0x0, 0x11, &(0x7f00000000c0)="fa27c2a99a8092189d6551d6a2a53ab77e"}) [ 1266.019719][T28228] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ac º-²Ññ®!èÚ*Ü<™å„’ÌhpÒ¿ è¿.q+QPâð÷ï¥.~Ó‹o" 06:55:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) 06:55:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x31000000, 0xd, &(0x7f0000000000)=""/208) 06:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) 06:55:19 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0xfffffffffffffe44, 0x0, 0x0, 0x0, 0x4}}], 0x4000000000001b8, 0x12001, 0x0) 06:55:19 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x0, 0x3, 0x8000000008}, 0x7}}, 0xfffffffffffffcb9) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @bt={0x5, 0x3, 0x400, 0x54, 0x2, 0x6b, 0x2, 0x6}}) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0xfff, 0x100, "9fa5d37fc251114cf089fc1d782c3cbb3245d3267c3d56bb25c9f8b0b1155031", 0x3, 0x1, 0x67, 0xff, 0x6}) 06:55:20 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x31010000, 0xd, &(0x7f0000000000)=""/208) 06:55:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) [ 1266.560282][T28269] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1266.722481][T28269] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:20 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:55:20 executing program 5: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0) 06:55:20 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x32000000, 0xd, &(0x7f0000000000)=""/208) 06:55:20 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b40500000000000061101800000000003e05000000000000950001000000000034d7cdefbf8349744b632cd41c7841818638283b6b79d40cc5abffbc1a4af979"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 06:55:20 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x32010000, 0xd, &(0x7f0000000000)=""/208) 06:55:20 executing program 5: r0 = socket(0x10, 0x803, 0x0) connect$rxrpc(r0, 0x0, 0x1000000) 06:55:20 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:55:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2062b041}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 06:55:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x36a) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f8b6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 06:55:20 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x33000000, 0xd, &(0x7f0000000000)=""/208) 06:55:20 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:55:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:21 executing program 3: socketpair(0x10, 0x2, 0x0, &(0x7f0000000280)) 06:55:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x33010000, 0xd, &(0x7f0000000000)=""/208) 06:55:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 06:55:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:55:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x34000000, 0xd, &(0x7f0000000000)=""/208) 06:55:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r1 = socket(0x2, 0x3, 0x3) r2 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r3, 0x2, 0x70bd25, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000851}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='pagemap\x00') sendfile(r0, r5, 0x0, 0xa808) 06:55:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:55:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x34010000, 0xd, &(0x7f0000000000)=""/208) 06:55:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) 06:55:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) 06:55:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x35000000, 0xd, &(0x7f0000000000)=""/208) 06:55:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000002340)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002600)={0xc, 0x0, &(0x7f0000002480)=[@exit_looper, @acquire], 0x0, 0x0, 0x0}) 06:55:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r1 = socket(0x2, 0x3, 0x3) r2 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r3, 0x2, 0x70bd25, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000851}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='pagemap\x00') sendfile(r0, r5, 0x0, 0xa808) 06:55:22 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) 06:55:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x35010000, 0xd, &(0x7f0000000000)=""/208) 06:55:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r1 = socket(0x2, 0x3, 0x3) r2 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r3, 0x2, 0x70bd25, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000851}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='pagemap\x00') sendfile(r0, r5, 0x0, 0xa808) 06:55:22 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:55:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x36000000, 0xd, &(0x7f0000000000)=""/208) 06:55:22 executing program 3: pipe(&(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$batadv(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 06:55:22 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:55:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x36010000, 0xd, &(0x7f0000000000)=""/208) 06:55:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r1 = socket(0x2, 0x3, 0x3) r2 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r3, 0x2, 0x70bd25, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000851}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='pagemap\x00') sendfile(r0, r5, 0x0, 0xa808) 06:55:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:23 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:55:23 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x37000000, 0xd, &(0x7f0000000000)=""/208) 06:55:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) r1 = socket(0x2, 0x3, 0x3) r2 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r3, 0x2, 0x70bd25, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000851}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='pagemap\x00') sendfile(r0, r5, 0x0, 0xa808) 06:55:23 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x37010000, 0xd, &(0x7f0000000000)=""/208) 06:55:23 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:55:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) 06:55:23 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x38000000, 0xd, &(0x7f0000000000)=""/208) 06:55:23 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x541b, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x0) 06:55:23 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:55:23 executing program 4: r0 = getuid() r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@remote, 0x4e20, 0x3, 0x4e22, 0xfff9, 0x2, 0x80, 0x0, 0x6c, 0x0, r0}, {0x88, 0x9, 0xd98c, 0x7, 0x9, 0x10000, 0x100, 0x4}, {0x800, 0xfffffffffffffff8, 0x3, 0x5}, 0x6, 0x6e6bbd, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x8, 0x4d5, 0x6c}, 0xa, @in6=@ipv4={[], [], @broadcast}, 0x3501, 0x0, 0x1, 0x7f, 0x50, 0xda1, 0x6}}, 0xe8) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x983042, &(0x7f0000000100)={[{@barrier_none='barrier=none'}], [{@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x3b}}, {@smackfshat={'smackfshat', 0x3d, 'vboxnet1'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r0}}, {@pcr={'pcr', 0x3d, 0x3b}}]}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000400)={0x200, 0x4000, 0xe0, 0x401, 0x1, 0x1}) r3 = dup(0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) fcntl$setownex(r2, 0xf, &(0x7f00000004c0)={0x1, r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(0xffffffffffffffff, r6) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) r8 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = dup(r9) ioctl$NBD_SET_SOCK(r8, 0xab00, r10) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r11, r8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r11, 0xc0182101, &(0x7f0000000200)={r12, 0xffffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r7, 0x80082102, &(0x7f0000000500)=r12) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(0xffffffffffffffff, r13) mq_notify(r14, 0x0) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$F_GET_FILE_RW_HINT(r15, 0x40d, &(0x7f0000000480)) linkat(r3, &(0x7f00000000c0)='./bus\x00', r14, &(0x7f00000003c0)='./file0\x00', 0x1000) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0xffffffff, 0x688, {r5}, {r0}, 0xad, 0x4}) 06:55:23 executing program 5: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1270.180656][T28441] block nbd4: shutting down sockets 06:55:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:23 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x38010000, 0xd, &(0x7f0000000000)=""/208) 06:55:23 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:55:24 executing program 5: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:55:24 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 06:55:24 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x39000000, 0xd, &(0x7f0000000000)=""/208) 06:55:24 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getgid() r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) fstat(r1, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) setresgid(0xffffffffffffffff, r0, r2) chown(0x0, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100), 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2b1) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="f0516147b2ec7021c5f9aefbb82546"]) 06:55:24 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x440, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x5, 0x4) 06:55:24 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:55:24 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x39010000, 0xd, &(0x7f0000000000)=""/208) [ 1270.908036][T28485] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:24 executing program 5: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:55:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:24 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:55:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3a000000, 0xd, &(0x7f0000000000)=""/208) [ 1271.280246][T28485] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:55:25 executing program 5: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 06:55:25 executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004c) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0x7) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x2002080, &(0x7f00000000c0)={[{@acl='acl'}], [{@fowner_gt={'fowner>', r5}}]}) 06:55:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3a010000, 0xd, &(0x7f0000000000)=""/208) 06:55:25 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getgid() r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) fstat(r1, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) setresgid(0xffffffffffffffff, r0, r2) chown(0x0, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100), 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2b1) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="f0516147b2ec7021c5f9aefbb82546"]) 06:55:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:55:25 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getgid() r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) fstat(r1, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) setresgid(0xffffffffffffffff, r0, r2) chown(0x0, 0x0, r0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100), 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2b1) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xb01001f1}, 0xd10c) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="f0516147b2ec7021c5f9aefbb82546"]) 06:55:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3b000000, 0xd, &(0x7f0000000000)=""/208) 06:55:25 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fa65b86c2c02"]) 06:55:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:26 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) [ 1272.290355][T28548] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "úe¸l" 06:55:26 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3b010000, 0xd, &(0x7f0000000000)=""/208) 06:55:26 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) [ 1272.439123][T28548] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "úe¸l" 06:55:26 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b4814bc4b07bcfab60339bb599151982d968599f9ff2fd765488edd80198a876874ca65944609f3bd2f83ec675400000000000000c9895970da61ecaa69eee89c"]) 06:55:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:26 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3c000000, 0xd, &(0x7f0000000000)=""/208) [ 1272.917126][T28572] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "H¼K¼ú¶9»Y‘Q˜-–…™ùÿ/×eHŽÝ€Š‡htÊe”F ó½/ƒìgT" 06:55:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) 06:55:26 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:55:26 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5c, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) 06:55:26 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3c010000, 0xd, &(0x7f0000000000)=""/208) 06:55:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1273.270805][T28572] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "H¼K¼ú¶9»Y‘Q˜-–…™ùÿ/×eHŽÝ€Š‡htÊe”F ó½/ƒìgT" 06:55:27 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:55:27 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x12000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x1, 0x8, @scatter={0x6, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000100)=""/141, 0x8d}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f00000003c0)=""/99, 0x63}]}, &(0x7f0000000440)="fe", &(0x7f0000000540)=""/5, 0x6, 0x0, 0x1, &(0x7f0000000580)}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) 06:55:27 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3d000000, 0xd, &(0x7f0000000000)=""/208) 06:55:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) ioctl$TCXONC(r0, 0x4b63, 0x3) 06:55:27 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x85}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380), 0x2000000000000206, 0x0) 06:55:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:27 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) [ 1273.640499][T28604] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:27 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3d010000, 0xd, &(0x7f0000000000)=""/208) [ 1273.834542][T28604] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:27 executing program 3: 06:55:27 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:55:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:27 executing program 5: 06:55:27 executing program 3: 06:55:27 executing program 4: r0 = socket(0x1d, 0x802, 0xfc) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)=0x1) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0xfc, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xca000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc0}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x164}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa704}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x64}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0xfc}}, 0x200000c1) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x1000042, &(0x7f0000000340)={[{@jdev={'jdev', 0x3d, './bus'}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'staff_u'}}]}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) 06:55:27 executing program 5: 06:55:27 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3e000000, 0xd, &(0x7f0000000000)=""/208) 06:55:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:27 executing program 3: 06:55:27 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:55:28 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3e010000, 0xd, &(0x7f0000000000)=""/208) [ 1274.376460][T28655] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "func=MMAP_CHECK" 06:55:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:28 executing program 3: 06:55:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x0, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(0x0, 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) 06:55:28 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:55:28 executing program 3: [ 1274.601940][T28668] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "func=MMAP_CHECK" 06:55:28 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x182007c, &(0x7f0000000080)={[], [{@measure='measure'}, {@obj_role={'obj_role', 0x3d, 'acl'}}]}) 06:55:28 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3f000000, 0xd, &(0x7f0000000000)=""/208) 06:55:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:28 executing program 3: 06:55:28 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 06:55:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40246608, &(0x7f0000000440)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, &(0x7f0000000400)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000800), &(0x7f00000008c0)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000140)='lotrus\x00\x00\x00\x00\x00', 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000001c0)={0x1, {0x9, 0x0, 0x0, 0x8}, {0x1f, 0x0, 0x4, 0xffffffff}, {0x3}}) r1 = io_uring_setup(0x13a, &(0x7f0000000000)) r2 = open(0x0, 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xdf63, 0x4, 0x800}) io_uring_enter(r1, 0xf67, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r1) 06:55:28 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x3f010000, 0xd, &(0x7f0000000000)=""/208) 06:55:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1274.985840][T28705] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:28 executing program 3: 06:55:28 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x40000000, 0xd, &(0x7f0000000000)=""/208) 06:55:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1275.184278][T28705] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:28 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x40010000, 0xd, &(0x7f0000000000)=""/208) 06:55:29 executing program 4: 06:55:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:55:29 executing program 5: 06:55:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:29 executing program 3: 06:55:29 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x41000000, 0xd, &(0x7f0000000000)=""/208) 06:55:29 executing program 5: 06:55:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:55:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:29 executing program 3: 06:55:29 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010ced6de1af70881aa38d89500", @ANYRES32=r2, @ANYBLOB="000000000000000014001280090001007663616e0000000004000280"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'batadv0\x00', 0x6a00}) 06:55:29 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x41010000, 0xd, &(0x7f0000000000)=""/208) 06:55:29 executing program 5: 06:55:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0), 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) [ 1275.889050][T28771] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:29 executing program 3: 06:55:29 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x42000000, 0xd, &(0x7f0000000000)=""/208) 06:55:29 executing program 5: 06:55:29 executing program 3: 06:55:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) 06:55:29 executing program 5: 06:55:29 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x42010000, 0xd, &(0x7f0000000000)=""/208) [ 1276.604053][T28771] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:30 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x100000, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="fdff070068020800ffffffff02af0008"], &(0x7f0000000080)=0x16) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x4884) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0xb5, 0x0, 0x8, 0x80, 0x2, 0x7, 0x3, 0x800, r1}, &(0x7f0000000100)=0x20) 06:55:30 executing program 3: 06:55:30 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:55:30 executing program 5: 06:55:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x43000000, 0xd, &(0x7f0000000000)=""/208) 06:55:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0), 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:30 executing program 3: 06:55:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x43010000, 0xd, &(0x7f0000000000)=""/208) 06:55:30 executing program 5: 06:55:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0), 0x0, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:30 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:55:30 executing program 3: [ 1277.074678][T28837] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:30 executing program 5: 06:55:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x44000000, 0xd, &(0x7f0000000000)=""/208) 06:55:30 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:55:30 executing program 3: 06:55:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:30 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x32, @dev={0xac, 0x14, 0x14, 0x41}, 0x4e23, 0x4, 'none\x00', 0x9, 0xffffffff, 0x80}, {@loopback, 0x4e24, 0x4, 0x7, 0x80000000, 0xb270}}, 0x44) 06:55:31 executing program 5: 06:55:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x44010000, 0xd, &(0x7f0000000000)=""/208) 06:55:31 executing program 3: [ 1277.406528][T28864] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:55:31 executing program 3: 06:55:31 executing program 5: 06:55:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) [ 1277.622523][T28864] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:31 executing program 3: 06:55:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x45000000, 0xd, &(0x7f0000000000)=""/208) 06:55:31 executing program 5: 06:55:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:31 executing program 3: 06:55:31 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@acl='acl'}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x193000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x3f, 0x3, 0x0, {0x6, 0x1e, 0x0, 'eth0securityvmnet1!vmnet1self@'}}, 0x3f) 06:55:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:55:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x45010000, 0xd, &(0x7f0000000000)=""/208) 06:55:31 executing program 5: 06:55:31 executing program 3: 06:55:31 executing program 5: [ 1278.116351][T28905] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:31 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 06:55:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x46000000, 0xd, &(0x7f0000000000)=""/208) 06:55:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:55:32 executing program 3: [ 1278.276914][T28905] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:32 executing program 5: 06:55:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:55:32 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x46010000, 0xd, &(0x7f0000000000)=""/208) 06:55:32 executing program 3: 06:55:32 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="61826c2c00"]) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:55:32 executing program 3: 06:55:32 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x47000000, 0xd, &(0x7f0000000000)=""/208) [ 1278.760919][T28944] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "a‚l" 06:55:32 executing program 5: 06:55:32 executing program 3: 06:55:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:55:32 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:55:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:33 executing program 3: 06:55:33 executing program 5: 06:55:33 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x48000, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, [@null, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x67d, 0x0, 0x0, 0x1400000, &(0x7f00000003c0)={[{@hash_tea='hash=tea'}], [{@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user', 0x3d, '%em1'}}, {@uid_lt={'uid<', r2}}, {@permit_directio='permit_directio'}]}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) write$fb(r5, &(0x7f00000002c0)="5e8a410233bb4d0d860a6b0ad41bb33f6eb0eb8b38481f43465e4435dffd78bbc780eef79954c874cdd13afcff0d286e91467ad5c3ae0b84ad4ca027900336d0ae22627e3cc92111e21b6cc02501f34accd241acf66e02d290a777da478e1f8ca022fb882fc3c70e74d55a646007c20a21103ecebcb7c34c8f14a5de65f9898eb45e0a875ad17c5de7a4709063b1079b155de6fb04043b33b8157dc4d9e82d7c43a8fa82b69561b0ab1272e3e39cbb3a0291325a54db871030e51d058cfb2ce7689ff5a5e6fc80cbedd4b54df52fe64e0cf77ee17e9b201a2b150daf774a293a125f5fd0c6f28e01d2a6c7b320370e16f084", 0xf2) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x8, {0xc3b1}}, 0x18) 06:55:33 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x47010000, 0xd, &(0x7f0000000000)=""/208) 06:55:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:55:33 executing program 3: 06:55:33 executing program 5: 06:55:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) 06:55:33 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x48000000, 0xd, &(0x7f0000000000)=""/208) 06:55:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:55:33 executing program 3: 06:55:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r4, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r4, 0x7c7d3b9f48d577de, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6619c3e8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0xc044}, 0x20000000) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) 06:55:33 executing program 5: 06:55:33 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x48010000, 0xd, &(0x7f0000000000)=""/208) 06:55:33 executing program 3: 06:55:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:55:33 executing program 3: 06:55:33 executing program 5: 06:55:33 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x49000000, 0xd, &(0x7f0000000000)=""/208) 06:55:33 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) [ 1280.178007][T29023] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:55:34 executing program 5: 06:55:34 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x49010000, 0xd, &(0x7f0000000000)=""/208) 06:55:34 executing program 3: 06:55:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:55:34 executing program 5: 06:55:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:34 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) r4 = socket(0xf, 0x1, 0xf7) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setfsuid(r1) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x100000000000, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="61e36c2c66756e633d4649524d574152455f434845434b50ee76ea2c686173682c65", @ANYRESDEC=r1, @ANYBLOB=',audit,smackfsfloor=security*wlan0systemeth0,\x00']) 06:55:34 executing program 5: 06:55:34 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4a000000, 0xd, &(0x7f0000000000)=""/208) 06:55:34 executing program 3: 06:55:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:55:34 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x76, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={r6, 0x21, "920bba1c9ea19a150c72c463a95276f18e1bf033d2d93d3b5f61e71c1c287956fb"}, &(0x7f0000000080)=0x29) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r7, 0x9}, &(0x7f0000000100)=0x8) 06:55:34 executing program 3: 06:55:34 executing program 5: 06:55:34 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4a010000, 0xd, &(0x7f0000000000)=""/208) 06:55:34 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) [ 1281.066338][T29071] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 06:55:34 executing program 3: [ 1281.402076][T29071] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 06:55:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:35 executing program 5: 06:55:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:55:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4b000000, 0xd, &(0x7f0000000000)=""/208) 06:55:35 executing program 3: 06:55:35 executing program 3: 06:55:35 executing program 4: setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x4) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) 06:55:35 executing program 5: 06:55:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4b010000, 0xd, &(0x7f0000000000)=""/208) 06:55:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:55:35 executing program 3: [ 1281.770494][T29112] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:35 executing program 5: 06:55:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:35 executing program 3: 06:55:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) 06:55:35 executing program 4: 06:55:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4c000000, 0xd, &(0x7f0000000000)=""/208) 06:55:35 executing program 5: 06:55:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4c010000, 0xd, &(0x7f0000000000)=""/208) 06:55:35 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) 06:55:35 executing program 5: 06:55:35 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="612c0067ffc0f3ae1b5ffdecd92063f3d35503cc07cd455593fbb7"]) 06:55:35 executing program 3: 06:55:36 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4d000000, 0xd, &(0x7f0000000000)=""/208) [ 1282.474942][T29152] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "a" [ 1282.688789][T29152] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "a" 06:55:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:36 executing program 5: 06:55:36 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:55:36 executing program 3: 06:55:36 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4d010000, 0xd, &(0x7f0000000000)=""/208) 06:55:36 executing program 3: 06:55:36 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4e000000, 0xd, &(0x7f0000000000)=""/208) 06:55:36 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x428c40, 0x0) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000040)=0x1) 06:55:36 executing program 5: 06:55:36 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:55:36 executing program 3: 06:55:36 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4e010000, 0xd, &(0x7f0000000000)=""/208) [ 1283.247762][T29193] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1283.418221][T29203] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:37 executing program 5: 06:55:37 executing program 3: 06:55:37 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4f000000, 0xd, &(0x7f0000000000)=""/208) 06:55:37 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:55:37 executing program 3: 06:55:37 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x4f010000, 0xd, &(0x7f0000000000)=""/208) 06:55:37 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="61636c2c00d7a478a90f6105b834d1f5e7475ae7a88bc993260630e04d398c"]) unlink(&(0x7f0000000040)='./bus\x00') 06:55:37 executing program 5: 06:55:37 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:55:37 executing program 3: 06:55:37 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x50000000, 0xd, &(0x7f0000000000)=""/208) [ 1283.860631][T29231] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:37 executing program 3: 06:55:37 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x50010000, 0xd, &(0x7f0000000000)=""/208) 06:55:37 executing program 5: 06:55:37 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) [ 1284.100044][T29231] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:37 executing program 3: 06:55:37 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x51000000, 0xd, &(0x7f0000000000)=""/208) 06:55:37 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x8000, 0x6, 0xffffffff, 0x7f]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40040d1) 06:55:38 executing program 5: 06:55:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:55:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x51010000, 0xd, &(0x7f0000000000)=""/208) [ 1284.460647][T29268] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:38 executing program 3: [ 1284.611100][T29268] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:38 executing program 5: 06:55:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x52000000, 0xd, &(0x7f0000000000)=""/208) 06:55:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 06:55:38 executing program 3: 06:55:38 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x3, 0x4) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) 06:55:38 executing program 5: 06:55:38 executing program 3: 06:55:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x52010000, 0xd, &(0x7f0000000000)=""/208) 06:55:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) [ 1285.116736][T29300] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 06:55:39 executing program 5: [ 1285.314268][T29317] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:39 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x53000000, 0xd, &(0x7f0000000000)=""/208) 06:55:39 executing program 3: 06:55:39 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:55:39 executing program 5: 06:55:39 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x1000000000000000, 0x0, 0x0, 0x2800452, &(0x7f00000000c0)={[{@acl='acl'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'acl'}}, {@dont_hash='dont_hash'}, {@fsname={'fsname', 0x3d, 'acl'}}]}) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x2bf, 0x4) 06:55:39 executing program 5: 06:55:39 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x53010000, 0xd, &(0x7f0000000000)=""/208) 06:55:39 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:55:39 executing program 5: [ 1285.680352][T29334] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "defcontext=staff_u" 06:55:39 executing program 3: 06:55:39 executing program 5: 06:55:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:39 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6163ba94bac8d2"]) 06:55:39 executing program 3: 06:55:39 executing program 5: 06:55:39 executing program 3: 06:55:39 executing program 5: [ 1286.003538][T29356] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "acº”ºÈÒ" 06:55:39 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:55:39 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x54000000, 0xd, &(0x7f0000000000)=""/208) 06:55:39 executing program 5: 06:55:39 executing program 3: 06:55:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$TCXONC(r1, 0x540a, 0x1) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) 06:55:40 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="2561770000000000000000000000000000000000000000000000000000000000c103000003000000000300000000000000000000000000002001000020010000300200003002000030020000300200003002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000000000000001200100000000000000000000000000000000000000000000000030006c3274700000000000000000000000000000000000000000000000000000000000000000000000000800000000002800727066696c7465720000000000000000000000000000000000000000000000000000000000002000545241434500000000000000000000000000000000000000000000000000126f5c835a78e524d52157d6fa61fca6fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000007665746830000000000000000000000076657468305f746f5f7465616d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00010010000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000000000000000000040005443504f505453545249500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 06:55:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:40 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x54010000, 0xd, &(0x7f0000000000)=""/208) [ 1286.370693][T29380] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:40 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r0, 0x0, 0x40000000, 0x0) 06:55:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d86800278dcff47d010000805acd4f8f36460234432479aed75d492b415bc5d125938521e857cee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349f2f7ac7558f11c0a5811f05cc0a2a0db5aef4e5da33eb000016e995628960c994f45b0094756d6002ac77a248d6c2ad348f8a83d4c51e62369bcd8e8e", 0xc0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1286.439574][T29388] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '%aw' 06:55:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:40 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) 06:55:40 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x55000000, 0xd, &(0x7f0000000000)=""/208) 06:55:40 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c27bc337600363940ffb4aed12f060000000000000025d86800278dcff4", 0x24}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1286.589639][T29399] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1286.602715][T29404] ptrace attach of "/root/syz-executor.3"[29401] was attempted by "/root/syz-executor.3"[29404] 06:55:40 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x55010000, 0xd, &(0x7f0000000000)=""/208) 06:55:40 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:40 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="61636cb23807d83612fc2c00"]) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0xfff, 0x8, 0x8}) 06:55:40 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:55:40 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1286.803626][T29429] ptrace attach of "/root/syz-executor.3"[29428] was attempted by "/root/syz-executor.3"[29429] 06:55:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:40 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x56000000, 0xd, &(0x7f0000000000)=""/208) [ 1287.022297][T29444] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1287.022297][T29444] 06:55:40 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) 06:55:40 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x56010000, 0xd, &(0x7f0000000000)=""/208) 06:55:40 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) 06:55:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1287.278000][T29444] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1287.278000][T29444] 06:55:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x57000000, 0xd, &(0x7f0000000000)=""/208) 06:55:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) 06:55:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r5}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local, 0x81}, r5}}, 0x30) 06:55:41 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) syz_mount_image$nfs(&(0x7f0000000140)='nfs\x00', &(0x7f0000000180)='./bus\x00', 0x33, 0x5, &(0x7f0000000680)=[{&(0x7f00000002c0)="ad14006708c3c0e624544123844e17cf7126ed9ddfa231fe68a1ab8b1db55b4054575989e74b5617104c0444103b91211e75a159531e756a5f072159104c3a1f9f73555d1237558e2229a8332b623c32e486df2382bba53ef108b89a984653e08420dad93e4b5f6ffb3a445974c82ce3c82765b80bd5db7ccbd6e83fbcaa4f7a0ed433aae9202158dab1cac749ddc33fca0b32282f9066624f8b074d73b53911c6a0941227d251babd0d0ac82829c250dfe33dd90b064e2fc3bfdab7cf56425b884f77101f3f55", 0xc7, 0x20}, {&(0x7f00000004c0)="b073d805d9883ab92cb6875d5fc4dc97643970815ded9ea103e2154e36d5d60e60bf4f67a29dcf61f10419eafe05643210406fb1d757a506bc540968973ee08ff7dca92fdfd026a56a7375812b08eb9a677a5330d816a52736244c29e1146c0e795b2f8f9ce33904ee7358d752336701a41d30ff971d103b37dce325642247d9b249c7583c98f0517f2e1fec7c2e1931d712249a82a692c65d99e43a623a2afc3452c5bbbd486ee17d1fabf00b901d904a6aae1c5ef1a228efec3f0ecccf547302368489b38f484b724640cb6e84693aee64be414f5e16e4e024e807770ff39d", 0xe0, 0x7}, {&(0x7f00000003c0)="1a1eb2bb2e525f29b7d36141f6bce8f5b26a2a22f76e73121ac42f2fe18346b3a3398623921e35d2a87498c62be243e546f9db38f350ce72f04bbf6f3cc79d3fe4eae180bead180806dead5bdaa9a690e02a915cdf289c3194c89b112d54b375cdb3900414f6bb64a560b7d24fdba2a7abab3deb24bb24a82828f390abceedd8091aded12f8b163522746731d45439f0015f1c34f02db262630746330ec085e233fea2f54d1355eaf4eeb2b1cf1cfd7f14a5c152a3", 0xb5, 0x9}, {&(0x7f00000005c0)="043db3a5fa68082402efbe7b7e548ddbac07145f7f2d8164bc2c9db23b05ebc4023bd45c013010464f5b06eef3e6589496c1091d6b741a7a6b2eabb64ec1cd8741fcf49c08ed98be814ecbef77bd48d1e0b007c7b155630c30f67f42f2de38194dcb9865c0885369dfa2beed20eef8d91802a59f8e55034d6d6fe2749cb4a6c0f5bc48a634d10128aca989e03890dfd1960f1857fdf1f5a9a8e87069e8e91c8666e1f8d5539f04492c356af7b9e43fac", 0xb0, 0xfff}, {&(0x7f00000001c0)="e6c59c151839bcacd8155cd362339a4ae997bb0c629975ed996d8fdbeb302d0704622595e1", 0x25, 0xb5}], 0x20, &(0x7f0000000200)='reiserfs\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000040)="81c8a2e3a853cea5e1e40a23810e2370abb11b546367a287b7a6e5cc4d722169258c13a9238828af5509a527291a6c8f01a63a8c77af9ab20f272e857e7dd55dff2a9b3d645c3202d09631e3c964f5ad238a36fff482815db8e3ddee633b66631db6a3bbd768a6df6a7227744ef86f6d79711500da94e75252dc695c0b3fae826cf26fad14b35a35cc4540514549dd9da85fe1332fcf4c9b8b4204f210c89f58c53d9e2c30968ad1bea2dc1d27add3af0b8e2425c4d1c0f6a6abc3d78506d378ae39f99f3d8e8c15589d14c263f3a8ace2623420b666eed5a4c49d0d", 0xdc) 06:55:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x57010000, 0xd, &(0x7f0000000000)=""/208) 06:55:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:55:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) 06:55:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x58000000, 0xd, &(0x7f0000000000)=""/208) 06:55:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1287.966405][T29494] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1288.345180][T29494] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x3ff}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:55:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 06:55:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x58010000, 0xd, &(0x7f0000000000)=""/208) 06:55:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:42 executing program 4: lstat(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@balloc_test4='block-allocator=test4'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(\x1dcgroup\\nodev'}}, {@euid_eq={'euid', 0x3d, r0}}]}) 06:55:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r5}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local, 0x81}, r5}}, 0x30) 06:55:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x59000000, 0xd, &(0x7f0000000000)=""/208) 06:55:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, 0x0, 0x0) 06:55:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) 06:55:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x3ff}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1288.689279][T29542] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:55:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, 0x0, 0x0) 06:55:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x3ff}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:55:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:55:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x59010000, 0xd, &(0x7f0000000000)=""/208) 06:55:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) 06:55:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x3ff}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1288.951241][T29560] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "smackfsfloor=(cgroup\nodev" 06:55:42 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r7, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x9, 0x9, 0x4, 0x1, 0x0, {r2, r3/1000+30000}, {0x2, 0xc, 0x9, 0x7f, 0x0, 0x23, "bb0c5dea"}, 0x9, 0x4, @fd, 0x800, 0x0, r4}) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x40, "690c4a13ccdd521e19ca05ea6ee2a265056a34eb1a60cd80addf9a2c5acd778117a2271a73e62a546ea5ec831a8e202cdfe391b341d61ef544aa1835a48033ed"}, &(0x7f0000000140)=0x48) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000180)={r10, 0xff}, 0x8) 06:55:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r5}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local, 0x81}, r5}}, 0x30) 06:55:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x3ff}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:55:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, 0x0, 0x0) 06:55:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5a000000, 0xd, &(0x7f0000000000)=""/208) 06:55:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) 06:55:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x0, 0x3ff}, 0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffffff, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:55:43 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5a010000, 0xd, &(0x7f0000000000)=""/208) 06:55:43 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:55:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 1289.371037][T29591] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1289.379434][T29597] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:43 executing program 5: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7800, 0xd, &(0x7f0000000000)=""/208) 06:55:43 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5b000000, 0xd, &(0x7f0000000000)=""/208) [ 1289.622444][T29597] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:43 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/234, 0xea}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3) 06:55:43 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:55:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) 06:55:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 06:55:43 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5b010000, 0xd, &(0x7f0000000000)=""/208) 06:55:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000000)={0xa, {0x1, 0x44, 0xff}}, 0xa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) mq_notify(r5, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000000040)={0x18, 0x0, 0x4, {0xfff}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}}}, 0x30) 06:55:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 06:55:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000000)={0xa, {0x1, 0x44, 0xff}}, 0xa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) mq_notify(r5, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000000040)={0x18, 0x0, 0x4, {0xfff}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}}}, 0x30) 06:55:43 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5c000000, 0xd, &(0x7f0000000000)=""/208) 06:55:43 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:55:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0) 06:55:43 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) [ 1290.203480][T29647] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1290.278820][T29640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1290.494545][T29647] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:44 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10c20b652dc1fb93af246a36cc0c90f84ee86a82365cd81ac496c7fd4bb827177a5fdfeaf1c4099079aeba58d1c1a656f560e9b520f338bb8bb6b97039de9bbd4937d43b523e81957513d42e4c12bb97217e977d9bea7cc8a72f89dd913f3f6dbdcd27011d00dfaaa0f744c44b439ccc9f3e05ffe6be56d34ea676fa0f977111a835d26c42943f4096d421f25593307484b440f49650b063997e993c41b89fce671d13c6e843f9bb5af81095672181272d170c586f5d4f5c44f2c7e49aa93559c957e6ac3935a7243e7319eee3bc38ac355b44c03dc9015105722c0d4e76e712e9deb4da40dac0358736"]) socket$kcm(0x29, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002940), 0x0, &(0x7f0000000100)=""/166, 0xa6}, 0x40000000) recvmsg$can_raw(r1, &(0x7f0000002880)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002780)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f00000024c0)=""/247, 0xf7}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f00000025c0)=""/171, 0xab}, {&(0x7f0000002680)=""/105, 0x69}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000002700)=""/42, 0x2a}, {&(0x7f0000002740)=""/24, 0x18}], 0xa, &(0x7f0000002840)=""/40, 0x28}, 0x130) 06:55:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0) 06:55:44 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5c010000, 0xd, &(0x7f0000000000)=""/208) 06:55:44 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 06:55:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000000)={0xa, {0x1, 0x44, 0xff}}, 0xa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) mq_notify(r5, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000000040)={0x18, 0x0, 0x4, {0xfff}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}}}, 0x30) 06:55:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0xff, 0x81}, 'port0\x00', 0x0, 0x40, 0x6, 0x3ff, 0x7fff, 0x7ff, 0x23, 0x0, 0x5, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x640001, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') getsockname(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x80) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r7, &(0x7f0000000280), 0x1033b) fdatasync(r7) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r7}) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f0000000400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local}}}, 0x30) 06:55:44 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5d000000, 0xd, &(0x7f0000000000)=""/208) 06:55:44 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 06:55:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)}, 0x0) [ 1290.875291][T29692] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option " e-Áû“¯$j6Ì øNèj‚6\ØÄ–ÇýK¸'z_ßêñÄ y®ºXÑÁ¦Võ`éµ ó8»‹¶¹p9Þ›½I7Ô;R>•uÔ.L»—!~—}›ê|ȧ/‰Ý‘??m½Í'" [ 1290.931847][T29687] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:55:44 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x2000000}}) 06:55:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1291.253543][T29692] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option " e-Áû“¯$j6Ì øNèj‚6\ØÄ–ÇýK¸'z_ßêñÄ y®ºXÑÁ¦Võ`éµ ó8»‹¶¹p9Þ›½I7Ô;R>•uÔ.L»—!~—}›ê|ȧ/‰Ý‘??m½Í'" [ 1291.322398][T29721] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:55:45 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5d010000, 0xd, &(0x7f0000000000)=""/208) 06:55:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0) 06:55:45 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}) 06:55:45 executing program 5: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x2}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x83, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x3, r2, 0x1}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) set_tid_address(&(0x7f0000000000)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x501980, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x8080) 06:55:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r1, 0x0, 0xb, &(0x7f0000000200)='rootcontext'}, 0x30) getpgrp(r2) fstat(0xffffffffffffffff, &(0x7f0000000040)) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x13, 0x0, 0x2000000, &(0x7f0000000180)={[{@acl='acl'}], [{@smackfsroot={'smackfsroot', 0x3d, 'reiserfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'reiserfs\x00'}}, {@hash='hash'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash='hash'}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r5}}, 0xc) 06:55:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:45 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5e000000, 0xd, &(0x7f0000000000)=""/208) 06:55:45 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}) 06:55:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0) 06:55:45 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}) [ 1291.760858][T29734] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1291.796443][T29741] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "smackfsroot=reiserfs" 06:55:45 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}) 06:55:45 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5e010000, 0xd, &(0x7f0000000000)=""/208) 06:55:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:45 executing program 5 (fault-call:4 fault-nth:0): r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{0x0}], 0x1}, 0x0) [ 1292.044589][T29748] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "smackfsroot=reiserfs" 06:55:45 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}) 06:55:46 executing program 1 (fault-call:8 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:46 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5f000000, 0xd, &(0x7f0000000000)=""/208) 06:55:46 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="61636c2c003c23bf54d8b64fea515f008371d8229bab434fedb093164bfde174fc164f47d201901a5dfa9287f64e56642eebdd4e18a35acefe4d104aa028cb7a88a2668432ec1e51122763e8f971bba97976aaac010650663d4e769e37de534c93d75e25ed3f8f03f1ea98599a6bae210846346077df52808207d7e49ad4e3e247c57b89d7d66950fe71ea1dc810f89bbc4ee37de42295c6ecfa3945456f37125d6e54d7041f27fa8cc906679b304900"/186]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f00000000c0)={0x7ff, [0x6, 0x5, 0x1f], [{0x0, 0x6930, 0x0, 0x1, 0x0, 0x1}, {0x2, 0xffffffff, 0x0, 0x1}, {0x3, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x1, 0x0, 0x1}, {0x101, 0x1ff, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xbbf, 0x1, 0x0, 0x1}, {0x9fc, 0x35, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x7, 0x1, 0x1, 0x1}, {0x2, 0x6, 0x1, 0x0, 0x0, 0x1}, {0xd787, 0x4, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x1}, {0x9a, 0x7fffffff, 0x1, 0x1, 0x1, 0x1}], 0xe8}) 06:55:46 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:46 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 06:55:46 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080), 0x4) tkill(r0, 0x1000000000016) [ 1292.421489][T29771] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1292.453972][T29794] FAULT_INJECTION: forcing a failure. [ 1292.453972][T29794] name failslab, interval 1, probability 0, space 0, times 0 06:55:46 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x5f010000, 0xd, &(0x7f0000000000)=""/208) [ 1292.524846][T29799] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:46 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}) [ 1292.607137][T29794] CPU: 1 PID: 29794 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1292.617080][T29794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.627144][T29794] Call Trace: [ 1292.630467][T29794] dump_stack+0x197/0x210 [ 1292.634804][T29794] should_fail.cold+0x5/0xf [ 1292.639328][T29794] ? setup_fault_attr+0x1f0/0x1f0 [ 1292.644377][T29794] ? ___might_sleep+0x163/0x2c0 [ 1292.649259][T29794] __should_failslab+0xb7/0x100 06:55:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1292.654130][T29794] should_failslab+0x9/0x14 [ 1292.658647][T29794] __kmalloc+0x2e0/0x770 [ 1292.662957][T29794] ? __local_bh_enable_ip+0x15a/0x270 [ 1292.668377][T29794] ? lock_sock_nested+0xe2/0x120 [ 1292.673309][T29794] ? __local_bh_enable_ip+0x15a/0x270 [ 1292.678689][T29794] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1292.683960][T29794] ? lock_sock_nested+0x9a/0x120 [ 1292.688886][T29794] ? sock_kmalloc+0xc6/0x120 [ 1292.693484][T29794] sock_kmalloc+0xc6/0x120 [ 1292.697985][T29794] af_alg_alloc_areq+0x24/0x1e0 [ 1292.702847][T29794] aead_recvmsg+0x45d/0x17c0 [ 1292.707482][T29794] ? aead_bind+0x170/0x170 [ 1292.711902][T29794] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1292.717373][T29794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1292.723699][T29794] ? security_socket_recvmsg+0x95/0xc0 [ 1292.729170][T29794] ? aead_bind+0x170/0x170 [ 1292.733646][T29794] sock_recvmsg+0xce/0x110 [ 1292.738083][T29794] ____sys_recvmsg+0x22c/0x5f0 [ 1292.742865][T29794] ? sock_read_iter+0x420/0x420 [ 1292.747721][T29794] ? move_addr_to_kernel.part.0+0x110/0x110 06:55:46 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x60000000, 0xd, &(0x7f0000000000)=""/208) [ 1292.753620][T29794] ? lock_downgrade+0x920/0x920 [ 1292.758489][T29794] ___sys_recvmsg+0xe4/0x150 [ 1292.763089][T29794] ? recvmsg_copy_msghdr+0x80/0x80 [ 1292.768215][T29794] ? do_dup2+0x4f0/0x4f0 [ 1292.772480][T29794] ? __fget_light+0x1ad/0x270 [ 1292.777170][T29794] ? __fdget+0x1b/0x20 [ 1292.781241][T29794] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1292.787526][T29794] __sys_recvmsg+0x102/0x1d0 [ 1292.792135][T29794] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1292.797250][T29794] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1292.802757][T29794] ? do_syscall_64+0x26/0x790 [ 1292.807451][T29794] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1292.813528][T29794] ? do_syscall_64+0x26/0x790 [ 1292.818226][T29794] __x64_sys_recvmsg+0x78/0xb0 [ 1292.823039][T29794] do_syscall_64+0xfa/0x790 [ 1292.827557][T29794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1292.833434][T29794] RIP: 0033:0x45c479 [ 1292.837323][T29794] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1292.856927][T29794] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1292.865337][T29794] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1292.873324][T29794] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1292.881402][T29794] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1292.889395][T29794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1292.897373][T29794] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000000 06:55:46 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:46 executing program 1 (fault-call:8 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1292.996464][T29799] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:46 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x60010000, 0xd, &(0x7f0000000000)=""/208) 06:55:46 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = semget(0x2, 0x3, 0x401) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000240)=""/252) [ 1293.212881][T29836] FAULT_INJECTION: forcing a failure. [ 1293.212881][T29836] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.237975][T29836] CPU: 1 PID: 29836 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1293.247891][T29836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.257954][T29836] Call Trace: [ 1293.258471][T29818] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1293.261260][T29836] dump_stack+0x197/0x210 [ 1293.261316][T29836] should_fail.cold+0x5/0xf [ 1293.277276][T29836] ? __cast6_encrypt+0x1f/0x7210 [ 1293.282235][T29836] ? setup_fault_attr+0x1f0/0x1f0 [ 1293.287338][T29836] ? cast6_crypt_ctr+0x116/0x220 [ 1293.292334][T29836] ? ahash_def_finup_finish1+0x100/0x100 [ 1293.297975][T29836] __should_failslab+0xb7/0x100 [ 1293.302839][T29836] should_failslab+0x9/0x14 [ 1293.307350][T29836] __kmalloc+0x71/0x770 [ 1293.311521][T29836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1293.317768][T29836] ? crypto_hash_walk_done+0x170/0x560 [ 1293.323230][T29836] ? ahash_save_req+0x138/0x380 [ 1293.328093][T29836] ? ahash_def_finup_finish1+0x100/0x100 [ 1293.333729][T29836] ahash_save_req+0x138/0x380 [ 1293.338416][T29836] ahash_def_finup+0x43/0xe0 [ 1293.343013][T29836] ? crypto_ahash_digest+0xd0/0xd0 [ 1293.348135][T29836] crypto_ahash_op+0xcc/0x180 [ 1293.352822][T29836] crypto_ahash_finup+0x57/0x70 [ 1293.357682][T29836] gcm_hash_crypt_remain_continue+0x2c9/0x540 [ 1293.363765][T29836] gcm_hash_crypt_continue+0x294/0x350 [ 1293.369248][T29836] gcm_hash_assoc_remain_continue+0x2bc/0x370 [ 1293.375332][T29836] gcm_hash_init_continue+0x29f/0x380 [ 1293.380716][T29836] gcm_hash+0x20b/0x2a0 [ 1293.384885][T29836] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1293.391140][T29836] gcm_encrypt_continue+0x1c3/0x240 [ 1293.396354][T29836] crypto_gcm_encrypt+0x3cb/0x4b0 [ 1293.401382][T29836] crypto_aead_encrypt+0xaf/0xf0 [ 1293.406313][T29836] aead_recvmsg+0x125b/0x17c0 [ 1293.411000][T29836] ? aead_bind+0x170/0x170 [ 1293.415412][T29836] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1293.420872][T29836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1293.427107][T29836] ? security_socket_recvmsg+0x95/0xc0 [ 1293.432645][T29836] ? aead_bind+0x170/0x170 [ 1293.437058][T29836] sock_recvmsg+0xce/0x110 [ 1293.441477][T29836] ____sys_recvmsg+0x22c/0x5f0 [ 1293.446300][T29836] ? sock_read_iter+0x420/0x420 [ 1293.451152][T29836] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1293.457056][T29836] ? lock_downgrade+0x920/0x920 [ 1293.461938][T29836] ___sys_recvmsg+0xe4/0x150 [ 1293.466536][T29836] ? recvmsg_copy_msghdr+0x80/0x80 [ 1293.471688][T29836] ? do_dup2+0x4f0/0x4f0 [ 1293.475925][T29836] ? __fget_light+0x1ad/0x270 [ 1293.480588][T29836] ? __fdget+0x1b/0x20 [ 1293.484644][T29836] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1293.490890][T29836] __sys_recvmsg+0x102/0x1d0 [ 1293.495504][T29836] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1293.500528][T29836] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1293.505973][T29836] ? do_syscall_64+0x26/0x790 [ 1293.510634][T29836] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1293.516691][T29836] ? do_syscall_64+0x26/0x790 [ 1293.521370][T29836] __x64_sys_recvmsg+0x78/0xb0 [ 1293.526135][T29836] do_syscall_64+0xfa/0x790 [ 1293.530656][T29836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1293.536557][T29836] RIP: 0033:0x45c479 [ 1293.540449][T29836] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1293.560267][T29836] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1293.568664][T29836] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1293.576639][T29836] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1293.584604][T29836] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1293.592554][T29836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1293.600504][T29836] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000001 06:55:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f00000002c0)='overlay\x00', 0x10a8c4, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir={'redirect_dir', 0x3d, './bus'}}, {@default_permissions='default_permissions'}, {@xino_off='xino=off'}], [{@fowner_gt={'fowner>', r6}}, {@subj_role={'subj_role', 0x3d, ':systembdev!'}}, {@hash='hash'}, {@fsname={'fsname', 0x3d, 'reiserfs\x00'}}]}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r5, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendto$packet(r0, &(0x7f0000000000)="19966bab2aae30ff9b0ac308a550479b4deb7ef2623fc26b1858e6de4f177a5305d4c5ffe6da72c9cad9c0b3152f5ed1", 0x30, 0x8840, &(0x7f0000000040)={0x11, 0x15, r5, 0x1, 0x0, 0x6, @local}, 0x14) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="4bc314898e0753be82a99d23a684269742f46589a05f70ed5daadf13f7f4d8be15717e7b9d061c5fbf8d12e69a1c075bbf5e1739ed7bad125469a6df74f054a9b0833afdf4271acda5bb187c73b21caa27aacc4e5cc8f4308d680899788cff74f9da6373122fe349b85c472398355003f4b4550e0bc428c5"]) 06:55:47 executing program 1 (fault-call:8 fault-nth:2): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:47 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x61000000, 0xd, &(0x7f0000000000)=""/208) 06:55:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}) 06:55:47 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000040)) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) ustat(0x4, &(0x7f0000000080)) tkill(r0, 0x1000000000016) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000180)={0x2e, 0x7ff, 0x1799, @remote, 'nr0\x00'}) 06:55:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:47 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x61010000, 0xd, &(0x7f0000000000)=""/208) 06:55:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}) [ 1293.893466][T29852] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:55:47 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x62000000, 0xd, &(0x7f0000000000)=""/208) 06:55:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1293.951744][T29858] FAULT_INJECTION: forcing a failure. [ 1293.951744][T29858] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.026457][T29858] CPU: 0 PID: 29858 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1294.036380][T29858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.046445][T29858] Call Trace: [ 1294.049761][T29858] dump_stack+0x197/0x210 [ 1294.054120][T29858] should_fail.cold+0x5/0xf [ 1294.058646][T29858] ? setup_fault_attr+0x1f0/0x1f0 [ 1294.063701][T29858] ? ___might_sleep+0x163/0x2c0 [ 1294.068611][T29858] __should_failslab+0xb7/0x100 [ 1294.073481][T29858] should_failslab+0x9/0x14 [ 1294.078000][T29858] __kmalloc+0x2e0/0x770 [ 1294.082266][T29858] ? af_alg_wait_for_wmem+0x520/0x520 [ 1294.087653][T29858] ? __kasan_check_write+0x14/0x20 [ 1294.092785][T29858] ? sock_kmalloc+0xc6/0x120 [ 1294.097390][T29858] sock_kmalloc+0xc6/0x120 [ 1294.101829][T29858] af_alg_alloc_areq+0x24/0x1e0 [ 1294.106690][T29858] aead_recvmsg+0x45d/0x17c0 [ 1294.111319][T29858] ? aead_bind+0x170/0x170 [ 1294.115752][T29858] ? apparmor_socket_recvmsg+0x2a/0x30 06:55:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}) [ 1294.121220][T29858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1294.127467][T29858] ? security_socket_recvmsg+0x95/0xc0 [ 1294.133033][T29858] ? aead_bind+0x170/0x170 [ 1294.137537][T29858] sock_recvmsg+0xce/0x110 [ 1294.141977][T29858] ____sys_recvmsg+0x22c/0x5f0 [ 1294.146767][T29858] ? sock_read_iter+0x420/0x420 [ 1294.151627][T29858] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1294.157538][T29858] ? lock_downgrade+0x920/0x920 [ 1294.162413][T29858] ___sys_recvmsg+0xe4/0x150 [ 1294.167017][T29858] ? recvmsg_copy_msghdr+0x80/0x80 [ 1294.172139][T29858] ? do_dup2+0x4f0/0x4f0 [ 1294.176406][T29858] ? __fget_light+0x1ad/0x270 [ 1294.181096][T29858] ? __fdget+0x1b/0x20 [ 1294.185173][T29858] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1294.191430][T29858] __sys_recvmsg+0x102/0x1d0 [ 1294.196030][T29858] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1294.201089][T29858] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1294.206564][T29858] ? do_syscall_64+0x26/0x790 [ 1294.211249][T29858] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1294.217324][T29858] ? do_syscall_64+0x26/0x790 [ 1294.222022][T29858] __x64_sys_recvmsg+0x78/0xb0 06:55:47 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}) [ 1294.226802][T29858] do_syscall_64+0xfa/0x790 [ 1294.231326][T29858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1294.237221][T29858] RIP: 0033:0x45c479 [ 1294.241117][T29858] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1294.260724][T29858] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1294.269145][T29858] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1294.277125][T29858] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1294.285103][T29858] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1294.293099][T29858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1294.301083][T29858] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000002 [ 1294.345551][T29857] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "KÉŽS¾‚©#¦„&—Bôe‰ _pí]ªß÷ôؾq~{_¿æš[¿^9í{­Ti¦ßtðT©°ƒ:ýô'Í¥»|s²ª'ªÌN\Èô0h™xŒÿtùÚcs/ãI¸\G#˜5Pô´U Ä(Å" [ 1294.415632][T29886] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:55:48 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000100)="e4a3ffc4b9ff4e3772066a0b4f391eb8e4703651931c20642a76159571d9c32dde39c389a20f6b6e07c5dc261466dd79f600bb53a7001931f9e3f7aa2a9de297a351105a4f3eca87745dba23f16c7fb36588bd9ea8230046df2cea6ae0df122a72b8002b6b3515522feb9acd11d2d8fa71fa88456e690f2f92e1378d11b540f9df16219862e3e2907aab3e859ca5043c1790e5e36bd76edce2e41b19d6c387c729a4e799e14973a7d94758e3cae7142cc4596680ac80bfe4ae2237abd908fb8584b74e3763c47d1e322b498e0dce52e764db143f69482544d83a6e", &(0x7f00000004c0)=""/4096}, 0x20) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="60636cac00"]) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0xc}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8001}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./bus\x00', 0x6, 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video35\x00', 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) 06:55:48 executing program 1 (fault-call:8 fault-nth:3): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:48 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x62010000, 0xd, &(0x7f0000000000)=""/208) 06:55:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 06:55:48 executing program 5: r0 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x12, 0x4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}) [ 1294.654409][T29901] FAULT_INJECTION: forcing a failure. [ 1294.654409][T29901] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.713353][T29901] CPU: 1 PID: 29901 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1294.723305][T29901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.733392][T29901] Call Trace: [ 1294.736706][T29901] dump_stack+0x197/0x210 [ 1294.741067][T29901] should_fail.cold+0x5/0xf [ 1294.745589][T29901] ? setup_fault_attr+0x1f0/0x1f0 [ 1294.750630][T29901] ? ctr_crypt+0x30/0x30 [ 1294.754910][T29901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1294.760671][T29908] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "`cl¬" [ 1294.761264][T29901] ? skcipher_walk_done+0x5a2/0xe90 [ 1294.776427][T29901] ? ahash_def_finup_finish1+0x100/0x100 [ 1294.782070][T29901] __should_failslab+0xb7/0x100 [ 1294.786995][T29901] should_failslab+0x9/0x14 [ 1294.791519][T29901] __kmalloc+0x71/0x770 [ 1294.795688][T29901] ? ahash_save_req+0x138/0x380 [ 1294.800550][T29901] ? ahash_def_finup_finish1+0x100/0x100 [ 1294.806194][T29901] ahash_save_req+0x138/0x380 [ 1294.810901][T29901] ahash_def_finup+0x43/0xe0 [ 1294.815508][T29901] ? crypto_ahash_digest+0xd0/0xd0 [ 1294.820626][T29901] crypto_ahash_op+0xcc/0x180 [ 1294.825312][T29901] crypto_ahash_finup+0x57/0x70 [ 1294.830183][T29901] gcm_hash_crypt_remain_continue+0x2c9/0x540 [ 1294.836267][T29901] gcm_hash_assoc_remain_continue+0x2a7/0x370 [ 1294.842351][T29901] gcm_hash_init_continue+0x29f/0x380 [ 1294.847743][T29901] gcm_hash+0x20b/0x2a0 [ 1294.851910][T29901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1294.858179][T29901] gcm_encrypt_continue+0x1c3/0x240 06:55:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) [ 1294.863390][T29901] crypto_gcm_encrypt+0x3cb/0x4b0 [ 1294.868453][T29901] crypto_aead_encrypt+0xaf/0xf0 [ 1294.873431][T29901] aead_recvmsg+0x125b/0x17c0 [ 1294.878162][T29901] ? aead_bind+0x170/0x170 [ 1294.882586][T29901] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1294.888053][T29901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1294.894307][T29901] ? security_socket_recvmsg+0x95/0xc0 [ 1294.899785][T29901] ? aead_bind+0x170/0x170 [ 1294.904223][T29901] sock_recvmsg+0xce/0x110 [ 1294.908660][T29901] ____sys_recvmsg+0x22c/0x5f0 [ 1294.913454][T29901] ? sock_read_iter+0x420/0x420 [ 1294.918312][T29901] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1294.924226][T29901] ? lock_downgrade+0x920/0x920 [ 1294.929111][T29901] ___sys_recvmsg+0xe4/0x150 [ 1294.933718][T29901] ? recvmsg_copy_msghdr+0x80/0x80 [ 1294.938932][T29901] ? do_dup2+0x4f0/0x4f0 [ 1294.943231][T29901] ? __fget_light+0x1ad/0x270 [ 1294.947921][T29901] ? __fdget+0x1b/0x20 [ 1294.952002][T29901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1294.958260][T29901] __sys_recvmsg+0x102/0x1d0 06:55:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}) [ 1294.962869][T29901] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1294.967939][T29901] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1294.973409][T29901] ? do_syscall_64+0x26/0x790 [ 1294.978095][T29901] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1294.984168][T29901] ? do_syscall_64+0x26/0x790 [ 1294.988869][T29901] __x64_sys_recvmsg+0x78/0xb0 [ 1294.993655][T29901] do_syscall_64+0xfa/0x790 [ 1294.998202][T29901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.004120][T29901] RIP: 0033:0x45c479 [ 1295.008026][T29901] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1295.027639][T29901] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1295.036059][T29901] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1295.044038][T29901] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1295.052012][T29901] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 06:55:48 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x63000000, 0xd, &(0x7f0000000000)=""/208) [ 1295.059985][T29901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1295.067961][T29901] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000003 [ 1295.117568][T29905] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:55:48 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}) 06:55:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1295.166077][T29908] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "`cl¬" [ 1295.333148][T29931] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:55:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:49 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x63010000, 0xd, &(0x7f0000000000)=""/208) 06:55:49 executing program 1 (fault-call:8 fault-nth:4): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:49 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}) [ 1295.594392][T29946] FAULT_INJECTION: forcing a failure. [ 1295.594392][T29946] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.615373][T29946] CPU: 0 PID: 29946 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1295.625299][T29946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.635359][T29946] Call Trace: [ 1295.638676][T29946] dump_stack+0x197/0x210 [ 1295.643053][T29946] should_fail.cold+0x5/0xf [ 1295.647592][T29946] ? setup_fault_attr+0x1f0/0x1f0 [ 1295.652636][T29946] ? ___might_sleep+0x163/0x2c0 [ 1295.657514][T29946] __should_failslab+0xb7/0x100 [ 1295.662377][T29946] should_failslab+0x9/0x14 [ 1295.666812][T29943] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1295.666892][T29946] __kmalloc+0x2e0/0x770 [ 1295.678237][T29946] ? af_alg_wait_for_wmem+0x520/0x520 [ 1295.683617][T29946] ? __kasan_check_write+0x14/0x20 [ 1295.688739][T29946] ? sock_kmalloc+0xc6/0x120 [ 1295.693351][T29946] sock_kmalloc+0xc6/0x120 [ 1295.697784][T29946] af_alg_alloc_areq+0x24/0x1e0 [ 1295.702657][T29946] aead_recvmsg+0x45d/0x17c0 [ 1295.707293][T29946] ? aead_bind+0x170/0x170 [ 1295.711728][T29946] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1295.717206][T29946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1295.723459][T29946] ? security_socket_recvmsg+0x95/0xc0 [ 1295.728962][T29946] ? aead_bind+0x170/0x170 [ 1295.733416][T29946] sock_recvmsg+0xce/0x110 [ 1295.737846][T29946] ____sys_recvmsg+0x22c/0x5f0 [ 1295.742637][T29946] ? sock_read_iter+0x420/0x420 [ 1295.747520][T29946] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1295.753448][T29946] ? lock_downgrade+0x920/0x920 [ 1295.758350][T29946] ___sys_recvmsg+0xe4/0x150 [ 1295.762958][T29946] ? recvmsg_copy_msghdr+0x80/0x80 [ 1295.768087][T29946] ? do_dup2+0x4f0/0x4f0 [ 1295.772361][T29946] ? __fget_light+0x1ad/0x270 [ 1295.777064][T29946] ? __fdget+0x1b/0x20 [ 1295.781147][T29946] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1295.787418][T29946] __sys_recvmsg+0x102/0x1d0 [ 1295.792027][T29946] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1295.797089][T29946] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1295.802574][T29946] ? do_syscall_64+0x26/0x790 [ 1295.807260][T29946] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.813337][T29946] ? do_syscall_64+0x26/0x790 [ 1295.818018][T29946] __x64_sys_recvmsg+0x78/0xb0 [ 1295.822768][T29946] do_syscall_64+0xfa/0x790 [ 1295.827258][T29946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.833129][T29946] RIP: 0033:0x45c479 [ 1295.837008][T29946] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1295.856604][T29946] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1295.865040][T29946] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1295.872993][T29946] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1295.880982][T29946] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1295.888948][T29946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1295.896899][T29946] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000004 06:55:51 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x64000000, 0xd, &(0x7f0000000000)=""/208) 06:55:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r3, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x50000, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0]) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r5, r4, r4}, &(0x7f0000000680)=""/268, 0x10c, &(0x7f0000000300)={&(0x7f0000000d00)={'rmd128-generic\x00'}}) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r6) r7 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)='*]securityGPLvmnet0{vboxnet1\x00', r6) keyctl$reject(0x13, r4, 0x10000, 0x0, r7) 06:55:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}}) 06:55:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:51 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x18102) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x20) 06:55:51 executing program 1 (fault-call:8 fault-nth:5): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1297.597925][T29959] FAULT_INJECTION: forcing a failure. [ 1297.597925][T29959] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.640805][T29959] CPU: 1 PID: 29959 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1297.650738][T29959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.660800][T29959] Call Trace: [ 1297.664111][T29959] dump_stack+0x197/0x210 [ 1297.668474][T29959] should_fail.cold+0x5/0xf [ 1297.673003][T29959] ? setup_fault_attr+0x1f0/0x1f0 [ 1297.678045][T29959] ? ctr_crypt+0x30/0x30 [ 1297.682299][T29959] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1297.688550][T29959] ? skcipher_walk_done+0x5a2/0xe90 [ 1297.693760][T29959] ? ahash_def_finup_finish1+0x100/0x100 [ 1297.699400][T29959] __should_failslab+0xb7/0x100 [ 1297.704263][T29959] should_failslab+0x9/0x14 [ 1297.708772][T29959] __kmalloc+0x71/0x770 [ 1297.712944][T29959] ? ahash_save_req+0x138/0x380 [ 1297.715740][T29966] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1297.717799][T29959] ? ahash_def_finup_finish1+0x100/0x100 [ 1297.717816][T29959] ahash_save_req+0x138/0x380 [ 1297.717842][T29959] ahash_def_finup+0x43/0xe0 06:55:51 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="346a001110000507000800"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014001280090001007663616e0000000004000280"], 0x34}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x9}) tkill(r0, 0x1000000000016) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000000680)=""/4096) [ 1297.717856][T29959] ? crypto_ahash_digest+0xd0/0xd0 [ 1297.717875][T29959] crypto_ahash_op+0xcc/0x180 [ 1297.717895][T29959] crypto_ahash_finup+0x57/0x70 [ 1297.717913][T29959] gcm_hash_crypt_remain_continue+0x2c9/0x540 [ 1297.717942][T29959] gcm_hash_assoc_remain_continue+0x2a7/0x370 [ 1297.717964][T29959] gcm_hash_init_continue+0x29f/0x380 [ 1297.772030][T29959] gcm_hash+0x20b/0x2a0 [ 1297.776203][T29959] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1297.782455][T29959] gcm_encrypt_continue+0x1c3/0x240 06:55:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1297.787666][T29959] crypto_gcm_encrypt+0x3cb/0x4b0 [ 1297.792716][T29959] crypto_aead_encrypt+0xaf/0xf0 [ 1297.797691][T29959] aead_recvmsg+0x125b/0x17c0 [ 1297.802414][T29959] ? aead_bind+0x170/0x170 [ 1297.806842][T29959] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1297.812312][T29959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1297.818565][T29959] ? security_socket_recvmsg+0x95/0xc0 [ 1297.824032][T29959] ? aead_bind+0x170/0x170 [ 1297.828460][T29959] sock_recvmsg+0xce/0x110 [ 1297.832894][T29959] ____sys_recvmsg+0x22c/0x5f0 [ 1297.837687][T29959] ? sock_read_iter+0x420/0x420 [ 1297.842548][T29959] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1297.848463][T29959] ? lock_downgrade+0x920/0x920 [ 1297.853354][T29959] ___sys_recvmsg+0xe4/0x150 [ 1297.857964][T29959] ? recvmsg_copy_msghdr+0x80/0x80 [ 1297.863097][T29959] ? do_dup2+0x4f0/0x4f0 [ 1297.867366][T29959] ? __fget_light+0x1ad/0x270 [ 1297.872062][T29959] ? __fdget+0x1b/0x20 [ 1297.876141][T29959] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1297.882403][T29959] __sys_recvmsg+0x102/0x1d0 [ 1297.887005][T29959] ? __sys_recvmsg_sock+0xe0/0xe0 06:55:51 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) msgget$private(0x0, 0x533) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000ac0), &(0x7f0000000340)=0x6) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) openat$cgroup_ro(r6, &(0x7f0000000300)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) vmsplice(r3, &(0x7f00000009c0)=[{&(0x7f0000000040)="a7e88b2d3299cf0880c7314a761e0d180ad107bbc15b8082445eb8e676c12157f6e1359c533d59c9f75ba8231d6ede140e49af5dd8e62c58d4d67079860aa66165bb12d30dcfb504da190e73bf00ffd49b0cf645997d3344314de757e1108054dfb3d3", 0x63}, {&(0x7f0000000140)="6ecd25ea31407beafa64796efbfd5007914ce6a353b217a87f43d44deced65bce231d0a30e62106067353c026aefae2e063e90e1413aa04f284b9879579d2631", 0x40}, {&(0x7f0000000380)="affa6134648734152434aaaafcf7f5b0667a1cd29e10c110cfe8b331f691fb5086c8640a80570176d06d0c929b0fdd7c504d07af75690390586b34bff00fabe0446f424687523a5e3cafbc805adf3afb649f486b7d0632fb0e40031d1c23fea6f2e101a11936dd369ec31b12e87e104fef2e67ade0dd6861164d55d69a7dcc2770448eeaadb13a35f23d6ef7149b751c05fc61410447f68bfbf01d30ac6d9eca9123dc2bd5f4c7f33bbf019457e0be0e3ade4240bc2319daee352bc7a220801c6d5dad1616ef59ed16c5c2e5dad92cb3aa397b40d1f6a2af441e51d959147ba6", 0xe0}, {&(0x7f0000000480)="5856386a967144618e20370adbc7d28b24304ff4b707607e2938f5b0699a5d1d4d0b0ce44ec1ce30d040f5ca5d8696e4aba3efe2fc25cd4f8ec2e9539db7ec7f09202fd4eb48e8aca03088dae9ab580d3a69e578c4b4ed8e6d18c91b26d3ccf7959457cfb2621c1b6667b681a0c8a0dbc8f1b1ab186ca02d46dd1ffd6957ad7ac6ad30571d901170b39e15867346080ed8048a11227e5738094d966c192969bc2c7c2e242ae07d1e3792da49e8848d7c12cb1975589eda3edf674c606e23a36c0477a8c52b7254559231f52ae973a53c1f11399caf7f68f29b645f6185408455614ed42d", 0xe4}, {&(0x7f0000000580)="f786472565dfd453d46f376de63b23b218ff3fa4d0885bcd57ea1fe604ec5fa1f73706b1e852172dcaeffeb89d25a944513044241124ea3b918b2404ea01ad4df9fc5d7c27fd50f23e2dcd60ec972127be703e0d1bb48ec612cea6076850f8221e571f0fcff7f069032888640421d8364e698261597df70d686da29e217a2ea49cbd745659fd670e6d47bee0f0480900424d01dd96319a2ad43f4f25c7cf4c174a2a3dd2d064e3747f", 0xa9}, {&(0x7f0000000240)="4026064342674599650d3caa138f2f0501e2908aead4182b13bc67311931957fbf7c96153c0e463ebb8e58c6d303650677b1085b5a98bfa247c50e6c0fea0ba9a4d36b767271b5309b1dca75475655ef6f3a739a7bdb1974af50b3a732353eb635443736809104144dd523623d8120", 0x6f}, {&(0x7f0000000680)="7891a92d9bb4c0d585bd0f5b31157100dc7dd2a4a4a47c7975f459a0e3c5abd8e5abd9a81102324c022c7c4eaf3ddfd837d8149c1ddd99945bfd08541d264d025ce40c994a6bc1c5ee0a07e4c549b7ad6f49fc776b9bb5833bd5c25a60f3fa75653ac56ea08d3d214f833299bc975528daacced4b224bff45a855b7953a22fb1173ad08342cb3a1dc77fd6772f3122ed9d9ba50c1391708751637da049ab5b890fb3e472f01f83106549e57c74a7cab6cf1ef7029d3451e7885ec6ad8865322198b17ba4c5c7de832e338fc5b5111ee45236a138b8bd0b9f73", 0xd9}, {&(0x7f0000000780)="1a62c734e5dc2a10863ca4e226d94d4be06711ed92aba4c872868ed9b96fd3ae6463e116c1556d136c4efcd1639f75099a96cb40b3b6711179fc23e479f1c18604f640e455320f0499cf8ef01fb2136bd980752b41d8463d08738773d1578dcb22dd28c0822e5f5cc182bd6de72f6d40c1036270b475e44c3d1af31d9346f426caca35164f6681022954edccb106c4c112fe18a3bab76a0992b2b1275ce10f579ea7980376d4a92b51d9220fe698b228d9403950d8d5ab0f915e80c9e3", 0xbd}, {&(0x7f0000000840)="7f97811b10bbf3c51ce38860f1548b06044ecd34c05d1c67d44a9c7b1eceb7871b9522f85a6bdb6c59f731b9f6f5a5848e78ad3c21dbfe7c825cf879ae0273deea7de16bfb9d60df0b8821ef13f3a20a2d5b89ce7828436faaeb4ae08d39687d51e249a1787c80bdf38642f50ad3a0692e23df772bfe64b45128dd5498", 0x7d}, {&(0x7f00000008c0)="0f1147d39c0d4f30b3c0c1325088dccd30a8c9ab5ac7a3c53535ec58656609695a48bbe9c6bcb360b2b8c33a1b038dcc8258215ff702c064700f58e0d025b18db264dddb025ea27f01fef078daa2a1253b3cca1294210b26a7a6cd63c00ba7a887bed6fe4e93607c0bc5feb453d82fbe947d80cfdc8b70c609ea6e7d0defecd04f27429534e56ff57a52236fd3ebbe13c63745f1650c325e60d166c435b4afecf9ffc3336e85cbbcf5126becfe5068741e71befda5283f8e9018eb8c3e516ef927bd29c476f25e4148bc79c0f8847aa20f0d6a7e07a1aa74717b10", 0xdb}], 0xa, 0x8) [ 1297.892061][T29959] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1297.897533][T29959] ? do_syscall_64+0x26/0x790 [ 1297.902219][T29959] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1297.908291][T29959] ? do_syscall_64+0x26/0x790 [ 1297.912996][T29959] __x64_sys_recvmsg+0x78/0xb0 [ 1297.917783][T29959] do_syscall_64+0xfa/0x790 [ 1297.922414][T29959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1297.928315][T29959] RIP: 0033:0x45c479 [ 1297.932220][T29959] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1297.951829][T29959] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1297.960250][T29959] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1297.968237][T29959] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1297.976212][T29959] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1297.984185][T29959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1297.992159][T29959] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000005 06:55:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}) 06:55:51 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x64010000, 0xd, &(0x7f0000000000)=""/208) 06:55:51 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='_cl,\x00']) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000004c0)={"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"}) 06:55:51 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 06:55:52 executing program 5: r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x2, 0x10000000, {0x0}, {0xee00}, 0x4, 0x1}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @tid=r3}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1298.308844][T29984] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1298.356566][T29994] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "_cl" 06:55:52 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x62, 0x1, 0x2}, 0x78c2ad3a}}, 0x18) 06:55:52 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x65000000, 0xd, &(0x7f0000000000)=""/208) 06:55:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1298.471986][T29994] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "_cl" 06:55:52 executing program 1 (fault-call:8 fault-nth:6): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:52 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}) 06:55:52 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='aHl,\x00']) 06:55:52 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x4, 0x8, 0x4, 0x2000, 0x2, {0x0, 0x7530}, {0x2, 0x1, 0x18, 0x1f, 0x0, 0x3f, "b0d49cbd"}, 0x9, 0x4, @planes=&(0x7f0000000040)={0x80, 0x7f, @userptr=0x7f, 0x8}, 0x80, 0x0, r2}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r5}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r5, 0x8f, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x5, @local, 0x8}, @ib={0x1b, 0x2, 0x9, {"897e284e43ec55f090a9d83e28be6254"}, 0x3, 0x7, 0xfffffffffffffff9}}}, 0x118) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:52 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x65010000, 0xd, &(0x7f0000000000)=""/208) [ 1298.777210][T30033] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "aHl" [ 1298.791261][T30036] FAULT_INJECTION: forcing a failure. [ 1298.791261][T30036] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.810377][T30036] CPU: 0 PID: 30036 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1298.820294][T30036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.830351][T30036] Call Trace: [ 1298.833664][T30036] dump_stack+0x197/0x210 [ 1298.838017][T30036] should_fail.cold+0x5/0xf [ 1298.842537][T30036] ? setup_fault_attr+0x1f0/0x1f0 [ 1298.847582][T30036] ? ___might_sleep+0x163/0x2c0 [ 1298.852457][T30036] __should_failslab+0xb7/0x100 [ 1298.857321][T30036] should_failslab+0x9/0x14 [ 1298.861834][T30036] __kmalloc+0x2e0/0x770 [ 1298.866099][T30036] ? af_alg_wait_for_wmem+0x520/0x520 [ 1298.871483][T30036] ? __kasan_check_write+0x14/0x20 [ 1298.876605][T30036] ? sock_kmalloc+0xc6/0x120 [ 1298.881212][T30036] sock_kmalloc+0xc6/0x120 [ 1298.885642][T30036] af_alg_alloc_areq+0x24/0x1e0 [ 1298.890505][T30036] aead_recvmsg+0x45d/0x17c0 [ 1298.895020][T30024] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1298.895132][T30036] ? aead_bind+0x170/0x170 [ 1298.906617][T30036] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1298.912089][T30036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1298.918342][T30036] ? security_socket_recvmsg+0x95/0xc0 [ 1298.923807][T30036] ? aead_bind+0x170/0x170 [ 1298.928240][T30036] sock_recvmsg+0xce/0x110 [ 1298.932672][T30036] ____sys_recvmsg+0x22c/0x5f0 [ 1298.937473][T30036] ? sock_read_iter+0x420/0x420 [ 1298.942335][T30036] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1298.948256][T30036] ? lock_downgrade+0x920/0x920 [ 1298.953142][T30036] ___sys_recvmsg+0xe4/0x150 [ 1298.957747][T30036] ? recvmsg_copy_msghdr+0x80/0x80 [ 1298.962874][T30036] ? do_dup2+0x4f0/0x4f0 [ 1298.967145][T30036] ? __fget_light+0x1ad/0x270 [ 1298.971827][T30036] ? __fdget+0x1b/0x20 06:55:52 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x66000000, 0xd, &(0x7f0000000000)=""/208) 06:55:52 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x24141, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0xfffffffc, 0x6, 0x3, 0x7, 0xaf, 0x81d, 0xffffffc1, 0x6, 0x8, 0x40, 0xd3, 0x0, 0xcd, 0x4, 0x80000011, 0x5, 0x8, 0x2, 0x5, 0xb, 0x6, 0x8000, 0x0, 0x3, 0x73e666e3, 0x5c0c, 0x401, 0xffff, 0x36, 0x7, 0x3ff, 0x5efbf24c]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 06:55:52 executing program 5: r0 = gettid() r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x40000012, 0x2, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1298.975898][T30036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1298.982156][T30036] __sys_recvmsg+0x102/0x1d0 [ 1298.986764][T30036] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1298.991823][T30036] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1298.997291][T30036] ? do_syscall_64+0x26/0x790 [ 1299.001982][T30036] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.008065][T30036] ? do_syscall_64+0x26/0x790 [ 1299.012942][T30036] __x64_sys_recvmsg+0x78/0xb0 [ 1299.017719][T30036] do_syscall_64+0xfa/0x790 [ 1299.022239][T30036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.028137][T30036] RIP: 0033:0x45c479 [ 1299.032039][T30036] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1299.051643][T30036] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1299.060060][T30036] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1299.068031][T30036] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1299.076042][T30036] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1299.084032][T30036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1299.092022][T30036] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000006 06:55:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:55:52 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x66010000, 0xd, &(0x7f0000000000)=""/208) 06:55:52 executing program 1 (fault-call:8 fault-nth:7): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1299.226475][T30033] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "aHl" 06:55:53 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="961b123e9e9912c6988249424c", 0xd, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r1, 0xa1, 0xf6}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'blake2s-256-x86\x00'}}, &(0x7f00000002c0)="7a9a1dadd2035636e20de23c2083ef89dd7fbd9b23745ffd17a252627fe88b18d863b859c9bdbad1e3dfd80ab4a8cdf854dab1150d8fc12d11c9ad18bd424153eb7a63684c629dad1e2597949275aad2caef2cf080328d055ffd0ddee1db3131eca3b483c86dd7e586100328ad68a5d301a5f571709fdab0ba7c74c0610767d0cf1e307a33724f92aa4e2ccd76a1ee9cf1ae56ba42109523f8cd824b79106e1ac0", &(0x7f0000000380)=""/246) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:55:53 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="61636c0200"]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)) 06:55:53 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x101400, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x80, r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}]) ioctl$RTC_WIE_OFF(r2, 0x7010) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x6f48c2ec6c1091a3, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0xfffe) [ 1299.402882][T30062] FAULT_INJECTION: forcing a failure. [ 1299.402882][T30062] name failslab, interval 1, probability 0, space 0, times 0 06:55:53 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x67000000, 0xd, &(0x7f0000000000)=""/208) 06:55:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) [ 1299.460953][T30062] CPU: 1 PID: 30062 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1299.470883][T30062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.480970][T30062] Call Trace: [ 1299.484267][T30062] dump_stack+0x197/0x210 [ 1299.488592][T30062] should_fail.cold+0x5/0xf [ 1299.493082][T30062] ? setup_fault_attr+0x1f0/0x1f0 [ 1299.498130][T30062] ? ctr_crypt+0x30/0x30 [ 1299.502365][T30062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1299.508591][T30062] ? skcipher_walk_done+0x5a2/0xe90 [ 1299.513776][T30062] ? ahash_def_finup_finish1+0x100/0x100 [ 1299.519392][T30062] __should_failslab+0xb7/0x100 [ 1299.524272][T30062] should_failslab+0x9/0x14 [ 1299.528779][T30062] __kmalloc+0x71/0x770 [ 1299.532945][T30062] ? ahash_save_req+0x138/0x380 [ 1299.537881][T30062] ? ahash_def_finup_finish1+0x100/0x100 [ 1299.543522][T30062] ahash_save_req+0x138/0x380 [ 1299.548201][T30062] ahash_def_finup+0x43/0xe0 [ 1299.552774][T30062] ? crypto_ahash_digest+0xd0/0xd0 [ 1299.557972][T30062] crypto_ahash_op+0xcc/0x180 [ 1299.562632][T30062] crypto_ahash_finup+0x57/0x70 [ 1299.567469][T30062] gcm_hash_crypt_remain_continue+0x2c9/0x540 [ 1299.573522][T30062] gcm_hash_assoc_remain_continue+0x2a7/0x370 [ 1299.579584][T30062] gcm_hash_init_continue+0x29f/0x380 [ 1299.584956][T30062] gcm_hash+0x20b/0x2a0 [ 1299.589120][T30062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1299.595342][T30062] gcm_encrypt_continue+0x1c3/0x240 [ 1299.600522][T30062] crypto_gcm_encrypt+0x3cb/0x4b0 [ 1299.605538][T30062] crypto_aead_encrypt+0xaf/0xf0 [ 1299.610460][T30062] aead_recvmsg+0x125b/0x17c0 [ 1299.615164][T30062] ? aead_bind+0x170/0x170 [ 1299.619574][T30062] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1299.625041][T30062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1299.631264][T30062] ? security_socket_recvmsg+0x95/0xc0 [ 1299.636703][T30062] ? aead_bind+0x170/0x170 [ 1299.641102][T30062] sock_recvmsg+0xce/0x110 [ 1299.645500][T30062] ____sys_recvmsg+0x22c/0x5f0 [ 1299.650265][T30062] ? sock_read_iter+0x420/0x420 [ 1299.655109][T30062] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1299.661003][T30062] ? lock_downgrade+0x920/0x920 [ 1299.665867][T30062] ___sys_recvmsg+0xe4/0x150 [ 1299.670444][T30062] ? recvmsg_copy_msghdr+0x80/0x80 [ 1299.675545][T30062] ? do_dup2+0x4f0/0x4f0 [ 1299.679782][T30062] ? __fget_light+0x1ad/0x270 [ 1299.684461][T30062] ? __fdget+0x1b/0x20 [ 1299.688523][T30062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1299.694748][T30062] __sys_recvmsg+0x102/0x1d0 [ 1299.699320][T30062] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1299.704353][T30062] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1299.709791][T30062] ? do_syscall_64+0x26/0x790 [ 1299.714451][T30062] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.720509][T30062] ? do_syscall_64+0x26/0x790 [ 1299.725172][T30062] __x64_sys_recvmsg+0x78/0xb0 [ 1299.729917][T30062] do_syscall_64+0xfa/0x790 [ 1299.734402][T30062] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.740272][T30062] RIP: 0033:0x45c479 [ 1299.744149][T30062] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1299.763727][T30062] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1299.772116][T30062] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1299.780072][T30062] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1299.788027][T30062] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1299.795985][T30062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1299.803935][T30062] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000007 06:55:53 executing program 1 (fault-call:8 fault-nth:8): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:53 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x67010000, 0xd, &(0x7f0000000000)=""/208) [ 1299.999921][T30089] FAULT_INJECTION: forcing a failure. [ 1299.999921][T30089] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.013117][T30083] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1300.013117][T30083] [ 1300.072101][T30089] CPU: 0 PID: 30089 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1300.082030][T30089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.092090][T30089] Call Trace: [ 1300.095401][T30089] dump_stack+0x197/0x210 [ 1300.099763][T30089] should_fail.cold+0x5/0xf [ 1300.104290][T30089] ? setup_fault_attr+0x1f0/0x1f0 [ 1300.109341][T30089] ? ___might_sleep+0x163/0x2c0 [ 1300.114211][T30089] __should_failslab+0xb7/0x100 06:55:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) [ 1300.119077][T30089] should_failslab+0x9/0x14 [ 1300.123589][T30089] __kmalloc+0x2e0/0x770 [ 1300.127851][T30089] ? af_alg_wait_for_wmem+0x520/0x520 [ 1300.133238][T30089] ? __kasan_check_write+0x14/0x20 [ 1300.138362][T30089] ? sock_kmalloc+0xc6/0x120 [ 1300.142950][T30089] sock_kmalloc+0xc6/0x120 [ 1300.147374][T30089] af_alg_alloc_areq+0x24/0x1e0 [ 1300.152236][T30089] aead_recvmsg+0x45d/0x17c0 [ 1300.156866][T30089] ? aead_bind+0x170/0x170 [ 1300.161316][T30089] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1300.166789][T30089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1300.173029][T30089] ? security_socket_recvmsg+0x95/0xc0 [ 1300.178506][T30089] ? aead_bind+0x170/0x170 [ 1300.182934][T30089] sock_recvmsg+0xce/0x110 [ 1300.187352][T30089] ____sys_recvmsg+0x22c/0x5f0 [ 1300.192124][T30089] ? sock_read_iter+0x420/0x420 [ 1300.196979][T30089] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1300.202896][T30089] ? lock_downgrade+0x920/0x920 [ 1300.207760][T30089] ___sys_recvmsg+0xe4/0x150 [ 1300.212341][T30089] ? recvmsg_copy_msghdr+0x80/0x80 [ 1300.217455][T30089] ? do_dup2+0x4f0/0x4f0 [ 1300.221719][T30089] ? __fget_light+0x1ad/0x270 [ 1300.226450][T30089] ? __fdget+0x1b/0x20 [ 1300.230511][T30089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1300.236760][T30089] __sys_recvmsg+0x102/0x1d0 [ 1300.241380][T30089] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1300.246595][T30089] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1300.252062][T30089] ? do_syscall_64+0x26/0x790 [ 1300.256733][T30089] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1300.262805][T30089] ? do_syscall_64+0x26/0x790 [ 1300.267484][T30089] __x64_sys_recvmsg+0x78/0xb0 [ 1300.272379][T30089] do_syscall_64+0xfa/0x790 [ 1300.276911][T30089] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1300.282804][T30089] RIP: 0033:0x45c479 [ 1300.286691][T30089] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1300.306282][T30089] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1300.314686][T30089] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1300.322645][T30089] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1300.330611][T30089] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1300.338571][T30089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1300.346540][T30089] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000008 [ 1300.447093][T30083] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1300.447093][T30083] 06:55:55 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 06:55:55 executing program 1 (fault-call:8 fault-nth:9): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:55 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x68000000, 0xd, &(0x7f0000000000)=""/208) 06:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:55:55 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000100)={{0x2, 0x0, @identifier="7391342d8779f09b15f33dd1fc96d3b7"}}) mq_notify(r1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$isdn(r2, &(0x7f0000000180)={0x22, 0x7, 0x8, 0xff, 0x9}, 0x6) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x4, @raw_data="2c614a36ea61d3fcd33ac41767d0333da01d93dc074542c60abefa21b9cd78c36ce9b2c7706edca772c892fb63f6c4dccd9c4e54853bfab3b69ddf5e250a6df9f2e8d2cbf1acbed9eb0e9cb2810f69bce20b30ce8a3133b401cecbe57297138ae6973b629b01d22b43ea9070e886307c97893c223b83c47ff3e97f2470f08ceae026794bf0390fc366ddba7049d7860773a2bbeb76563e9ebf7db5622daa6d7d0eb050ce45cbdf516498ac783291228098d32f6887ac8bdbaaf1f22b82574b13ba975ead7399e945"}) 06:55:55 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000040)=0x2f8e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) r3 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0x5, 0x4a0600) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) tkill(r0, 0x1000000000016) 06:55:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:55:55 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x68010000, 0xd, &(0x7f0000000000)=""/208) [ 1302.121067][T30119] FAULT_INJECTION: forcing a failure. [ 1302.121067][T30119] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.160792][T30122] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:55 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0xfffffff9, 0x6, 0x1, 0x697}}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0xff00, 0x1, [], &(0x7f0000000000)=0x5}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000001d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001cc0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSET={0x124, 0xb, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_USERDATA={0xea, 0xd, 0x1, 0x0, "8259ec8c09923f9f2be9d47ac61876ad88f00198c5037891b4854779e8283c103c5e02526469d84204a569c164aaa28a3838bdc66a37b0fe5facb816494638a569dd6b486ebd2fd91804388750c011186bc3263068097e0fa1de041268a75165c0c7c46504b13db7759e66569c60f05e629fae248347241654c3fe50338225f92f9c0b7c538527c13ea84cb948d31282fc36660bfd1c77e0646d3ab6777c7bd9388cf96a5bab119c87b346e909e74c560a460e2031a798519a38eaeb7d6b78a9c5a584cf283912e4ac75cf54c3bf06a9522b62cc7daec76245cb98a01452d65ffcc71515aba5"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x3, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x61}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x9a4, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x40, 0x7, 0x1, 0x0, "6e63ee9d00911000f44e51b60e02a82f2b8430177ec165c554e47148df5322849388195c8e26257eb9f0ea53fdba7af8b48eaccd6d19713b75521c01"}, @NFTA_RULE_EXPRESSIONS={0x830, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@redir={{0xa, 0x1, 'redir\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @void}]}, {0x2c4, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @val={0x164, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x11, 0x1, 'cgroup\xbd{em0\xc0\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_TARGET_INFO={0xd0, 0x3, "f894efcea8fd0c3e808b059ad52bffe53d21c776e143861935eaae15b7de28a4e7f61cf2c5473b8316abb44ebe8f194d90bcf90f806d0b70efa961842e3669346e52e2a8bbcac19bc9b0e46d44ee4f8016dd3351fe7e321eaf8bb7c189c14e42e9adf12f2c83ecbd40d966161f9fa5ce1f0a40730b7d4cbad7774292843f8a9caa0c33cab55bccbb927a46a9a91965197c6a488cedb9ad621f9e2fe2726e3afeca186f0c6204a3ef78a5bdbc7e7496c806d0eb233dbf128c109e276e84e2708c73c2c366d71f99af0b682110"}, @NFTA_TARGET_INFO={0x69, 0x3, "1371cf496f751caa81ce6b86878bfccf523ad3c5ce2f481db42729a53190607c5966ba68ea53073b7fb4f1c1501c7b780faca349657979cef45fee27f5ab0d401336fed9f6626508c19b5d579bba67643df01cc6e6fb08f9a20f96273873d8b6b2680fed2c"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @void}]}, {0x248, 0x1, 0x0, 0x1, [@objref={{0xb, 0x1, 'objref\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x3}]}}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @limit={{0xa, 0x1, 'limit\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}, @target={{0xb, 0x1, 'target\x00'}, @val={0x198, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x14, 0x1, 'veth1_virt_wifi\x00'}, @NFTA_TARGET_INFO={0xdf, 0x3, "69682c483fd38c59ed3be82405f7d2c7700131ccaed9f1809e64f0dda2349d471b71e8770f4d2e48743881cf6260cf863b4f0a1cc70f892fb2d84e3b29a0017208639a7742f66f73f0d14ba12c511dc481625599d377ceaa1595517160d529cb9169447555ce6a45aa76f16768f98271dd9b7c72f081b616e62bf02ca7fdfc57db7617d3233ed9ea0580e9dfeccd4697c1692a3f2a1ebd9a0258a4bcf1f9c0197a3b5c9b5a088dd76c5c3e4e92bfc3c0644ef5d00a6886cbb8eb2001a463aba567e7a584e38d36d6b13cf7259d9c0f3dfa18e7ff849e08b77edf65"}, @NFTA_TARGET_INFO={0x56, 0x3, "6aa0cf4f5e7912ff023f0e2177e4ca52bcc842fae73187ce619ebdf3ebf28b3d3bfca9451f45c60ca38ff4e0d37f6199a6842e9facc537528a00fcb3a6c4f60f166f30ed68fc81037c417de3479657a247f2"}, @NFTA_TARGET_NAME={0x11, 0x1, '/dev/video37\x00'}, @NFTA_TARGET_INFO={0x33, 0x3, "445f5db50be78d1cb7f921802719f98c1de4792c2b7118a41fc06aca0ea93e66523bbb96e7e1aafccd8176cd3c82b9"}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}]}, {0x38, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @void}, @payload={{0xc, 0x1, 'payload\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x54, 0x1, 0x0, 0x1, [@connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_TTL={0x5, 0x2, 0x40}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x7f}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}]}, {0x10, 0x1, 0x0, 0x1, [@tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}]}, {0x3c, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}, @range={{0xa, 0x1, 'range\x00'}, @void}]}, {0x18c, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}]}}, @objref={{0xb, 0x1, 'objref\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffff5335}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x106}]}}, @payload={{0xc, 0x1, 'payload\x00'}, @void}, @rt={{0x7, 0x1, 'rt\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_DREG={0x8}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @void}]}, {0x7c, 0x1, 0x0, 0x1, [@connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @void}]}, {0x24, 0x1, 0x0, 0x1, [@flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @void}]}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "60c7254c3f63f656886dc856009d184c5f0076e2f396f0a849300834f7e5117dd36c55009722d1d37b124a366e55d2dc61b08144b472972e78274d087352b1f214cab53586702c71a17ebcbfbd51b2d4d7db5d444f5cea5ed8f3e5688928164f85c3095c438552d97cc9b04489492a28e913beef37a609fa5b055a47f54d3b9c7c8fcb39b4800f766dc8e9431bea40f9da95ae8b05d45363fb7bc6c8d76c"}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0xae4732e9881a7b1c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0xe20, 0x8, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x238, 0x4, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x200}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}]}}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}]}, {0x10, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @void}]}, {0x38, 0x1, 0x0, 0x1, [@osf={{0x8, 0x1, 'osf\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}]}}]}, {0xb8, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}]}, {0x88, 0x1, 0x0, 0x1, [@dup_ipv4={{0x8, 0x1, 'dup\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}]}}]}]}, @NFTA_RULE_EXPRESSIONS={0x5cc, 0x4, 0x0, 0x1, [{0x260, 0x1, 0x0, 0x1, [@cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x1f4, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x1d8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "eb0d10861f7fbe46d5d0bc3c453a7b763f12844c49ddcc619f863e29fdb173d5f875e71dab0f831d26e063a0481c9edb4a6dc2c0758bfe906e299e5a815a86c1eda0631efcbd23d2d7559747ab260de0fbf2a39f1f9a51c4d7ec1b12808924f4e964ea8543aeb0d5e08b9dfd2a4492a4d2b64774eefbc48a1f3f33b16578b03dad9c6910de5e604f8b0924b2921e44"}, @NFTA_DATA_VALUE={0xec, 0x1, "941a3f5c370b5957876348c70af6be1e2fd7a66771bb6daaedd3016fb49aad7b63824dfb0c3bcc77313032663e67eefa7c34e3d05d3d80c050f9e9e74b5d04f0b1238a83b9660f07c4f04f8cbad79559a07b3c5a7fe5324682e157c49734603fa1376164b2e4c04052adf25f54947d0953147e580a471db5d99fa893b83b6b0703db23ee0b5685bf4dee22f62bcabf6f7797776acd481f1b3bf83b505f7bf8f208f7f7b542d94f539412dcadbb7585bdfe3335a9dc725740ed7758405cb78c6657cf7a98941f94ceb6e18f7bbf0c01c541e8f639ca0af243a891956d580f5eb3919550da8752b7b7"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}, {0x60, 0x1, 0x0, 0x1, [@numgen={{0xb, 0x1, 'numgen\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_TYPE={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}, @fib={{0x8, 0x1, 'fib\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}]}, {0xd4, 0x1, 0x0, 0x1, [@limit={{0xa, 0x1, 'limit\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}]}, {0x128, 0x1, 0x0, 0x1, [@dup={{0x8, 0x1, 'dup\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x45b}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x43ce}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8}]}}]}, {0x78, 0x1, 0x0, 0x1, [@dup={{0x8, 0x1, 'dup\x00'}, @val={0x4}}, @log={{0x8, 0x1, 'log\x00'}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4783}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x1c, 0x2, 0x1, 0x0, 'vboxnet0(cpusetself*em0\x00'}]}}]}, {0x94, 0x1, 0x0, 0x1, [@limit={{0xa, 0x1, 'limit\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x1e}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}]}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x5fc, 0x4, 0x0, 0x1, [{0x7c, 0x1, 0x0, 0x1, [@match={{0xa, 0x1, 'match\x00'}, @void}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}, @rt={{0x7, 0x1, 'rt\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x18}]}}, @queue={{0xa, 0x1, 'queue\x00'}, @void}]}, {0x1cc, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @val={0x134, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x51ba}, @NFTA_MATCH_INFO={0xb6, 0x3, "8d6e23b52cfbee60a4543ec37b3b5466b75da4d072ac4928f67243f0da61348231f75a1929051ce2d6100ff89b25b4501a706897efecbbfb1e50c2f77ec9b820a91c367eecb9b5523bb53c79cdb758e4ecc0b90d3f5e66ffd50a5c14d247d1f87b026825db5294508cc169b130ae7219a5b441e2788718908d475e266b470f4b69a6db47ba25e0bea112a9ae70faadca81b016d82d882ed384bf241169aed8c345e4b585fda7f39d5f88975588093cd2f568"}, @NFTA_MATCH_INFO={0x66, 0x3, "fe44926a14a9d3c1e4b3721dffdd533bf74c0c9f3e1bd01d2cda6ae17b5bf3a5a4c31c3fae9258deca6e7293e0897968abddcc18dc55b038afec6ced3b3f8bbfd7be09678859f5fe4557fd20bcac15fc7940bb100df3f45d6d687cf5fc3b345d4054"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @match={{0xa, 0x1, 'match\x00'}, @void}]}, {0x30, 0x1, 0x0, 0x1, [@dup={{0x8, 0x1, 'dup\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}]}, {0x2a0, 0x1, 0x0, 0x1, [@match={{0xa, 0x1, 'match\x00'}, @val={0x1a4, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x1b, 0x3, "96f64e83e52a1ef25dae5b7e9e0d066c909362685448e0"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_MATCH_INFO={0xc2, 0x3, "88cd2868dbd14018bffec87f0fd4386c619f77c224f79b6f98debba1130e10c0cb9120f0830a4305db8e07b567f9e4f7ffde5f81b4436976edbf7d181e1e4b07a382fa8e7bf98f243ca90a0188795ae6bdb4788345f6b8f424c8b32e14c08f3e54f6e1d4f851aa914981a1f02351c443a3d16b01ae3106959e2a38453e817d4f2badb7b7fb8779a680454b8837454ddd91497520d4ea2002015fa7fca92f3ac549d0e5e6b170586582b288b6f7828ec9ef1943b30d7f8de5889144d38391"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_MATCH_INFO={0x9d, 0x3, "aad629a6f3cd4b601426563c4a4768f34dc10ddf19aa79ce6004853648b30c848bc7cd9963f7fd48c34aff640cebf6ae8e54fee634283de52d55ea06d0c1fb123d5d47b333c74fe5614c9f4751d547c750f33953aab07eca696970239d521e0dd52bb125bf1e22c7ed17e7e86d4899ce3423352bb0cd133b1ea18eea82cd476c2fdfe365a815e2cd8d0d7c2e0485237c94416b6fde44d23ce4"}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x41}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xb5}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x63}, @NFTA_BYTEORDER_OP={0x8}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xb}]}}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_FLAGS={0x8}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}]}, {0x10, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @void}]}, {0xd0, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffff7f}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x4}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x4}]}}]}]}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x19f8}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x3, 'veth1_virt_wifi\x00', {0x9b81}}) [ 1302.256362][T30119] CPU: 0 PID: 30119 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1302.266327][T30119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.276392][T30119] Call Trace: [ 1302.279715][T30119] dump_stack+0x197/0x210 [ 1302.284074][T30119] should_fail.cold+0x5/0xf [ 1302.288598][T30119] ? setup_fault_attr+0x1f0/0x1f0 [ 1302.293637][T30119] ? ctr_crypt+0x30/0x30 [ 1302.297894][T30119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.304146][T30119] ? skcipher_walk_done+0x5a2/0xe90 [ 1302.309356][T30119] ? ahash_def_finup_finish1+0x100/0x100 [ 1302.315000][T30119] __should_failslab+0xb7/0x100 [ 1302.319870][T30119] should_failslab+0x9/0x14 [ 1302.324390][T30119] __kmalloc+0x71/0x770 [ 1302.328666][T30119] ? ahash_save_req+0x138/0x380 [ 1302.333531][T30119] ? ahash_def_finup_finish1+0x100/0x100 [ 1302.339199][T30119] ahash_save_req+0x138/0x380 [ 1302.343899][T30119] ahash_def_finup+0x43/0xe0 [ 1302.348497][T30119] ? crypto_ahash_digest+0xd0/0xd0 [ 1302.353621][T30119] crypto_ahash_op+0xcc/0x180 [ 1302.358320][T30119] crypto_ahash_finup+0x57/0x70 [ 1302.363197][T30119] gcm_hash_crypt_remain_continue+0x2c9/0x540 [ 1302.369288][T30119] gcm_hash_assoc_remain_continue+0x2a7/0x370 [ 1302.375368][T30119] gcm_hash_init_continue+0x29f/0x380 [ 1302.380763][T30119] gcm_hash+0x20b/0x2a0 [ 1302.384927][T30119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.391179][T30119] gcm_encrypt_continue+0x1c3/0x240 [ 1302.396392][T30119] crypto_gcm_encrypt+0x3cb/0x4b0 [ 1302.401449][T30119] crypto_aead_encrypt+0xaf/0xf0 06:55:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 1302.406403][T30119] aead_recvmsg+0x125b/0x17c0 [ 1302.411142][T30119] ? aead_bind+0x170/0x170 [ 1302.415568][T30119] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1302.421035][T30119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.427281][T30119] ? security_socket_recvmsg+0x95/0xc0 [ 1302.432751][T30119] ? aead_bind+0x170/0x170 [ 1302.437185][T30119] sock_recvmsg+0xce/0x110 [ 1302.441614][T30119] ____sys_recvmsg+0x22c/0x5f0 [ 1302.446400][T30119] ? sock_read_iter+0x420/0x420 [ 1302.451272][T30119] ? move_addr_to_kernel.part.0+0x110/0x110 06:55:56 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x69000000, 0xd, &(0x7f0000000000)=""/208) [ 1302.457186][T30119] ? lock_downgrade+0x920/0x920 [ 1302.462067][T30119] ___sys_recvmsg+0xe4/0x150 [ 1302.466678][T30119] ? recvmsg_copy_msghdr+0x80/0x80 [ 1302.471820][T30119] ? do_dup2+0x4f0/0x4f0 [ 1302.476087][T30119] ? __fget_light+0x1ad/0x270 [ 1302.480777][T30119] ? __fdget+0x1b/0x20 [ 1302.484851][T30119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.491107][T30119] __sys_recvmsg+0x102/0x1d0 [ 1302.495707][T30119] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1302.500763][T30119] ? trace_hardirqs_on_thunk+0x1a/0x1c 06:55:56 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) mq_notify(r3, 0x0) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000380)) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r6, 0x0, 0xd, &(0x7f00000002c0)='vmnet0loeth1\x00'}, 0x30) sched_setscheduler(r8, 0x5, &(0x7f0000000340)=0x1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}) [ 1302.506229][T30119] ? do_syscall_64+0x26/0x790 [ 1302.510914][T30119] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1302.516984][T30119] ? do_syscall_64+0x26/0x790 [ 1302.521686][T30119] __x64_sys_recvmsg+0x78/0xb0 [ 1302.526470][T30119] do_syscall_64+0xfa/0x790 [ 1302.531025][T30119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1302.536904][T30119] RIP: 0033:0x45c479 [ 1302.540812][T30119] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1302.560416][T30119] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1302.568831][T30119] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1302.576791][T30119] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1302.584756][T30119] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1302.592726][T30119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 06:55:56 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x77359400}}, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$cont(0x18, r3, 0x2a2, 0x1f) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000080)=0x3, 0x4) 06:55:56 executing program 1 (fault-call:8 fault-nth:10): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1302.600687][T30119] R13: 0000000000000898 R14: 00000000004cb09f R15: 0000000000000009 [ 1302.688494][T30122] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:56 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x69010000, 0xd, &(0x7f0000000000)=""/208) [ 1302.815914][T30157] FAULT_INJECTION: forcing a failure. [ 1302.815914][T30157] name failslab, interval 1, probability 0, space 0, times 0 [ 1302.832708][T30157] CPU: 1 PID: 30157 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1302.842614][T30157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.852670][T30157] Call Trace: [ 1302.855983][T30157] dump_stack+0x197/0x210 [ 1302.860332][T30157] should_fail.cold+0x5/0xf [ 1302.864848][T30157] ? setup_fault_attr+0x1f0/0x1f0 [ 1302.869885][T30157] ? ___might_sleep+0x163/0x2c0 [ 1302.874754][T30157] __should_failslab+0xb7/0x100 [ 1302.879613][T30157] should_failslab+0x9/0x14 [ 1302.884126][T30157] __kmalloc+0x2e0/0x770 [ 1302.888383][T30157] ? af_alg_wait_for_wmem+0x520/0x520 [ 1302.893759][T30157] ? __kasan_check_write+0x14/0x20 [ 1302.898876][T30157] ? sock_kmalloc+0xc6/0x120 [ 1302.903481][T30157] sock_kmalloc+0xc6/0x120 [ 1302.907921][T30157] af_alg_alloc_areq+0x24/0x1e0 [ 1302.912789][T30157] aead_recvmsg+0x45d/0x17c0 [ 1302.917417][T30157] ? aead_bind+0x170/0x170 [ 1302.921846][T30157] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1302.927320][T30157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1302.933572][T30157] ? security_socket_recvmsg+0x95/0xc0 [ 1302.939059][T30157] ? aead_bind+0x170/0x170 [ 1302.943495][T30157] sock_recvmsg+0xce/0x110 [ 1302.947933][T30157] ____sys_recvmsg+0x22c/0x5f0 [ 1302.952728][T30157] ? sock_read_iter+0x420/0x420 [ 1302.957591][T30157] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1302.963512][T30157] ? lock_downgrade+0x920/0x920 [ 1302.968397][T30157] ___sys_recvmsg+0xe4/0x150 [ 1302.973007][T30157] ? recvmsg_copy_msghdr+0x80/0x80 [ 1302.978137][T30157] ? do_dup2+0x4f0/0x4f0 [ 1302.982419][T30157] ? __fget_light+0x1ad/0x270 [ 1302.987114][T30157] ? __fdget+0x1b/0x20 [ 1302.991194][T30157] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.997457][T30157] __sys_recvmsg+0x102/0x1d0 [ 1303.002060][T30157] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1303.007123][T30157] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1303.012599][T30157] ? do_syscall_64+0x26/0x790 [ 1303.017290][T30157] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.023364][T30157] ? do_syscall_64+0x26/0x790 [ 1303.028063][T30157] __x64_sys_recvmsg+0x78/0xb0 [ 1303.032844][T30157] do_syscall_64+0xfa/0x790 [ 1303.037389][T30157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.043318][T30157] RIP: 0033:0x45c479 [ 1303.047230][T30157] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:55:56 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 06:55:56 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6a000000, 0xd, &(0x7f0000000000)=""/208) [ 1303.066840][T30157] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1303.075260][T30157] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1303.083234][T30157] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1303.091209][T30157] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1303.099185][T30157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1303.107164][T30157] R13: 0000000000000898 R14: 00000000004cb09f R15: 000000000000000a 06:55:56 executing program 1 (fault-call:8 fault-nth:11): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:56 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6a010000, 0xd, &(0x7f0000000000)=""/208) [ 1303.229896][T30177] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:55:57 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6b000000, 0xd, &(0x7f0000000000)=""/208) 06:55:57 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6b010000, 0xd, &(0x7f0000000000)=""/208) [ 1303.389342][T30195] FAULT_INJECTION: forcing a failure. [ 1303.389342][T30195] name failslab, interval 1, probability 0, space 0, times 0 [ 1303.400678][T30184] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1303.402300][T30195] CPU: 1 PID: 30195 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1303.418997][T30195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.429034][T30195] Call Trace: [ 1303.432309][T30195] dump_stack+0x197/0x210 [ 1303.436636][T30195] should_fail.cold+0x5/0xf [ 1303.441127][T30195] ? setup_fault_attr+0x1f0/0x1f0 [ 1303.446137][T30195] ? ctr_crypt+0x30/0x30 [ 1303.450395][T30195] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.456627][T30195] ? skcipher_walk_done+0x5a2/0xe90 [ 1303.461815][T30195] ? ahash_def_finup_finish1+0x100/0x100 [ 1303.467436][T30195] __should_failslab+0xb7/0x100 [ 1303.472294][T30195] should_failslab+0x9/0x14 [ 1303.476783][T30195] __kmalloc+0x71/0x770 [ 1303.480935][T30195] ? ahash_save_req+0x138/0x380 [ 1303.485775][T30195] ? ahash_def_finup_finish1+0x100/0x100 [ 1303.491478][T30195] ahash_save_req+0x138/0x380 [ 1303.496142][T30195] ahash_def_finup+0x43/0xe0 [ 1303.500712][T30195] ? crypto_ahash_digest+0xd0/0xd0 [ 1303.505820][T30195] crypto_ahash_op+0xcc/0x180 [ 1303.510505][T30195] crypto_ahash_finup+0x57/0x70 [ 1303.515344][T30195] gcm_hash_crypt_remain_continue+0x2c9/0x540 [ 1303.521399][T30195] gcm_hash_assoc_remain_continue+0x2a7/0x370 [ 1303.527456][T30195] gcm_hash_init_continue+0x29f/0x380 [ 1303.532817][T30195] gcm_hash+0x20b/0x2a0 [ 1303.536956][T30195] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.543231][T30195] gcm_encrypt_continue+0x1c3/0x240 [ 1303.548415][T30195] crypto_gcm_encrypt+0x3cb/0x4b0 [ 1303.553426][T30195] crypto_aead_encrypt+0xaf/0xf0 [ 1303.558401][T30195] aead_recvmsg+0x125b/0x17c0 [ 1303.563119][T30195] ? aead_bind+0x170/0x170 [ 1303.567534][T30195] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1303.572986][T30195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1303.579214][T30195] ? security_socket_recvmsg+0x95/0xc0 [ 1303.584655][T30195] ? aead_bind+0x170/0x170 [ 1303.589059][T30195] sock_recvmsg+0xce/0x110 [ 1303.593459][T30195] ____sys_recvmsg+0x22c/0x5f0 [ 1303.598212][T30195] ? sock_read_iter+0x420/0x420 [ 1303.603059][T30195] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1303.608954][T30195] ? lock_downgrade+0x920/0x920 [ 1303.613798][T30195] ___sys_recvmsg+0xe4/0x150 [ 1303.618418][T30195] ? recvmsg_copy_msghdr+0x80/0x80 [ 1303.623548][T30195] ? do_dup2+0x4f0/0x4f0 [ 1303.627790][T30195] ? __fget_light+0x1ad/0x270 [ 1303.632452][T30195] ? __fdget+0x1b/0x20 [ 1303.636511][T30195] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.642746][T30195] __sys_recvmsg+0x102/0x1d0 [ 1303.647328][T30195] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1303.652360][T30195] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1303.657806][T30195] ? do_syscall_64+0x26/0x790 [ 1303.662493][T30195] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.668555][T30195] ? do_syscall_64+0x26/0x790 [ 1303.673221][T30195] __x64_sys_recvmsg+0x78/0xb0 [ 1303.678005][T30195] do_syscall_64+0xfa/0x790 [ 1303.682496][T30195] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.688412][T30195] RIP: 0033:0x45c479 [ 1303.692318][T30195] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1303.711917][T30195] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1303.720305][T30195] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1303.728256][T30195] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 06:55:57 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x86040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000a09a000000000100007669623a40"], 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r3, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xff, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) prctl$PR_GET_SECCOMP(0x15) [ 1303.736206][T30195] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1303.744163][T30195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1303.752115][T30195] R13: 0000000000000898 R14: 00000000004cb09f R15: 000000000000000b 06:55:59 executing program 5: r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) mq_notify(r2, 0x0) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x2a, 0x0, @thr={&(0x7f0000000240)="a3e3270077297f519441ec75bf560a4f7b0a6c4a14d2d659aa83274afb759dbc12ccbd75ffb61453861980dc393c8245eac65e00c5b348c2a74455a7b9e2cdc2209a47c1d3297a65f491c6f09cbcff595653a595cc618ce4faef2e3b9bc3c0deb9c8fa11f01c9b80eabaf66764a58ad83d6227c51dae93f17cb736a9bd92945d4561f041d555c4bcbe88a118baae6ef58ba04d408bd45e9b1e01d68eb59d66dd59e81b60a09853bd243ac5b24183e013bd22c199f28be68ff3e94ce2edd1834eca36dac350d1fca4683e0a416ff77f63", &(0x7f0000000440)="5d6f0cea25858960e81a4d96dda3620067ef64106eafec0e29624953099da1c5aa94f5a66c13cc5035b95fd550d14b01157cc0a6fc6fe55a7eca61ab8d31e1d95c0e6c5c7dbc923ada57a92ab6418ef2e0465649187f4315638661758e84597a45653e6872454b86d0bfa66ddee82a306e53e84a51e67584a076531f4be806161fc46a5722ad5536bf4544643cb240d75020311c86c3d964ffa6c9cb107f5c76ab0a2c88d4460ea0e680fb5791ebc1bca8535f7eb6fff11a9c9bc32ae7e0fc819a820b2f3ceb389a8dda196505"}}, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x4, 0x4) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000340)=""/78, 0x4e}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:55:59 executing program 1 (fault-call:8 fault-nth:12): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:55:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:55:59 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6c000000, 0xd, &(0x7f0000000000)=""/208) 06:55:59 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'macvlan1\x00', 0x9}) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) 06:55:59 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x6f, 0x3, &(0x7f0000000280)=[{&(0x7f0000000140)="c864323ca531753f07576033e0585fd8e6cfa082ea7c3783ba6c588d171ebaf1550e18752a7a365d1c6af36d32c2914830ef64addc123b31758cf38179d20e50a61d0727027204832df0004884ec681c3c7eea141eb35e9dc8d0efb4", 0x5c, 0xfffffffffffffffb}, {&(0x7f0000000240)="491562ea204159aac896540246ceb12dd72da1db7d182e9d269c4246a18dd8d0369abb18fb250fc1714252811b026e64395d9f1552f1018476", 0x39, 0xa49f}, {0xfffffffffffffffe, 0x0, 0x7fffffff}], 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX=r2, @ANYBLOB=',rootcontext=sysadm_u,smackfstransmute=$vboxnet0(mimetype,measure,fowner=', @ANYRESDEC=r4, @ANYBLOB=',audit,\x00']) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1305.719475][T30222] macvlan1: mtu less than device minimum [ 1305.752826][T30224] FAULT_INJECTION: forcing a failure. [ 1305.752826][T30224] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.797958][T30224] CPU: 0 PID: 30224 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1305.807879][T30224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1305.816452][T30222] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1305.817930][T30224] Call Trace: [ 1305.817957][T30224] dump_stack+0x197/0x210 [ 1305.817987][T30224] should_fail.cold+0x5/0xf [ 1305.839693][T30224] ? setup_fault_attr+0x1f0/0x1f0 06:55:59 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6c010000, 0xd, &(0x7f0000000000)=""/208) [ 1305.844727][T30224] ? ___might_sleep+0x163/0x2c0 [ 1305.849588][T30224] __should_failslab+0xb7/0x100 [ 1305.854448][T30224] should_failslab+0x9/0x14 [ 1305.858952][T30224] __kmalloc+0x2e0/0x770 [ 1305.863212][T30224] ? af_alg_wait_for_wmem+0x520/0x520 [ 1305.868595][T30224] ? __kasan_check_write+0x14/0x20 [ 1305.873719][T30224] ? sock_kmalloc+0xc6/0x120 [ 1305.878329][T30224] sock_kmalloc+0xc6/0x120 [ 1305.882763][T30224] af_alg_alloc_areq+0x24/0x1e0 [ 1305.887630][T30224] aead_recvmsg+0x45d/0x17c0 [ 1305.892265][T30224] ? aead_bind+0x170/0x170 06:55:59 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='hsr0\x00', 0x8, 0x1, 0xfb1}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xe, 0x0, 0x5}) [ 1305.896690][T30224] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1305.902180][T30224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1305.906731][T30219] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1305.908450][T30224] ? security_socket_recvmsg+0x95/0xc0 [ 1305.908467][T30224] ? aead_bind+0x170/0x170 [ 1305.908489][T30224] sock_recvmsg+0xce/0x110 [ 1305.929845][T30224] ____sys_recvmsg+0x22c/0x5f0 [ 1305.934632][T30224] ? sock_read_iter+0x420/0x420 [ 1305.939491][T30224] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1305.945430][T30224] ? lock_downgrade+0x920/0x920 [ 1305.950318][T30224] ___sys_recvmsg+0xe4/0x150 [ 1305.954922][T30224] ? recvmsg_copy_msghdr+0x80/0x80 [ 1305.960044][T30224] ? do_dup2+0x4f0/0x4f0 [ 1305.964319][T30224] ? __fget_light+0x1ad/0x270 [ 1305.969007][T30224] ? __fdget+0x1b/0x20 [ 1305.973088][T30224] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1305.979348][T30224] __sys_recvmsg+0x102/0x1d0 [ 1305.983952][T30224] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1305.989014][T30224] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1305.994481][T30224] ? do_syscall_64+0x26/0x790 [ 1305.999164][T30224] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1306.005236][T30224] ? do_syscall_64+0x26/0x790 [ 1306.009952][T30224] __x64_sys_recvmsg+0x78/0xb0 [ 1306.014735][T30224] do_syscall_64+0xfa/0x790 [ 1306.019257][T30224] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1306.025175][T30224] RIP: 0033:0x45c479 [ 1306.029184][T30224] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:55:59 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6d000000, 0xd, &(0x7f0000000000)=""/208) [ 1306.048792][T30224] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1306.057208][T30224] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1306.065182][T30224] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1306.073158][T30224] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1306.081132][T30224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1306.089111][T30224] R13: 0000000000000898 R14: 00000000004cb09f R15: 000000000000000c 06:55:59 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x94281, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:55:59 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:55:59 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x2, 0x4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1dfc03, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000040)) 06:55:59 executing program 1 (fault-call:8 fault-nth:13): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) [ 1306.200344][T30222] macvlan1: mtu less than device minimum 06:56:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6d010000, 0xd, &(0x7f0000000000)=""/208) [ 1306.273535][T30243] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:00 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) waitid$P_PIDFD(0x3, r3, 0x0, 0x40000000, &(0x7f0000000240)) [ 1306.417949][T30257] FAULT_INJECTION: forcing a failure. [ 1306.417949][T30257] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.433201][T30259] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 1306.494042][T30257] CPU: 0 PID: 30257 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1306.503977][T30257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.514031][T30257] Call Trace: [ 1306.517333][T30257] dump_stack+0x197/0x210 [ 1306.521689][T30257] should_fail.cold+0x5/0xf [ 1306.526208][T30257] ? setup_fault_attr+0x1f0/0x1f0 [ 1306.531248][T30257] ? ctr_crypt+0x30/0x30 [ 1306.535504][T30257] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 06:56:00 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000040)=0x6) [ 1306.541756][T30257] ? skcipher_walk_done+0x5a2/0xe90 [ 1306.546988][T30257] ? ahash_def_finup_finish1+0x100/0x100 [ 1306.552632][T30257] __should_failslab+0xb7/0x100 [ 1306.557494][T30257] should_failslab+0x9/0x14 [ 1306.562005][T30257] __kmalloc+0x71/0x770 [ 1306.566202][T30257] ? ahash_save_req+0x138/0x380 [ 1306.571065][T30257] ? ahash_def_finup_finish1+0x100/0x100 [ 1306.576705][T30257] ahash_save_req+0x138/0x380 [ 1306.581396][T30257] ahash_def_finup+0x43/0xe0 [ 1306.586001][T30257] ? crypto_ahash_digest+0xd0/0xd0 [ 1306.591148][T30257] crypto_ahash_op+0xcc/0x180 [ 1306.595839][T30257] crypto_ahash_finup+0x57/0x70 [ 1306.600703][T30257] gcm_hash_crypt_remain_continue+0x2c9/0x540 [ 1306.607835][T30257] gcm_hash_assoc_remain_continue+0x2a7/0x370 [ 1306.613915][T30257] gcm_hash_init_continue+0x29f/0x380 [ 1306.619304][T30257] gcm_hash+0x20b/0x2a0 [ 1306.623475][T30257] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1306.629729][T30257] gcm_encrypt_continue+0x1c3/0x240 [ 1306.634953][T30257] crypto_gcm_encrypt+0x3cb/0x4b0 [ 1306.640388][T30257] crypto_aead_encrypt+0xaf/0xf0 [ 1306.645355][T30257] aead_recvmsg+0x125b/0x17c0 [ 1306.650098][T30257] ? aead_bind+0x170/0x170 [ 1306.654532][T30257] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1306.660008][T30257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1306.666261][T30257] ? security_socket_recvmsg+0x95/0xc0 [ 1306.671731][T30257] ? aead_bind+0x170/0x170 [ 1306.676166][T30257] sock_recvmsg+0xce/0x110 [ 1306.680600][T30257] ____sys_recvmsg+0x22c/0x5f0 [ 1306.685390][T30257] ? sock_read_iter+0x420/0x420 06:56:00 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0xfffffffffffffd80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1306.690253][T30257] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1306.696182][T30257] ? lock_downgrade+0x920/0x920 [ 1306.701067][T30257] ___sys_recvmsg+0xe4/0x150 [ 1306.705669][T30257] ? recvmsg_copy_msghdr+0x80/0x80 [ 1306.710797][T30257] ? do_dup2+0x4f0/0x4f0 [ 1306.715067][T30257] ? __fget_light+0x1ad/0x270 [ 1306.719756][T30257] ? __fdget+0x1b/0x20 [ 1306.723831][T30257] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1306.730089][T30257] __sys_recvmsg+0x102/0x1d0 [ 1306.734694][T30257] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1306.739754][T30257] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1306.745226][T30257] ? do_syscall_64+0x26/0x790 [ 1306.749922][T30257] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1306.756004][T30257] ? do_syscall_64+0x26/0x790 [ 1306.760709][T30257] __x64_sys_recvmsg+0x78/0xb0 [ 1306.765492][T30257] do_syscall_64+0xfa/0x790 [ 1306.770019][T30257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1306.775915][T30257] RIP: 0033:0x45c479 [ 1306.779818][T30257] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1306.799425][T30257] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1306.807886][T30257] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1306.815901][T30257] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1306.823879][T30257] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1306.831857][T30257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 06:56:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6e000000, 0xd, &(0x7f0000000000)=""/208) [ 1306.839837][T30257] R13: 0000000000000898 R14: 00000000004cb09f R15: 000000000000000d 06:56:00 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) 06:56:00 executing program 1 (fault-call:8 fault-nth:14): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:56:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6e010000, 0xd, &(0x7f0000000000)=""/208) 06:56:00 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) write$eventfd(r0, &(0x7f0000000040)=0x4, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x3f70eb5114f9b145) readv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) write(r3, &(0x7f0000000240)="5a868ac8c40be3dea7b8311e160df0c4b2a96a63997d73177ca2f9b0cb09bcc7bb15b6190c5c2a8d179734ecf880671280abdb50c25d433ffee4d7c519b867fd8efa214d3443e80916245197c213432ebeb4569a31f46c183560a5bd9d95c8cd58570f9f7da04225b5ff66bbd2a45057f42c21e0b1ac2ce5ebe51ee088beaf7da37cfb8a45550ba37a31", 0x8a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r0, 0x8, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) tkill(r1, 0x1000000000016) [ 1307.174469][T30282] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:00 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6f000000, 0xd, &(0x7f0000000000)=""/208) [ 1307.243928][T30296] FAULT_INJECTION: forcing a failure. [ 1307.243928][T30296] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.265763][T30296] CPU: 0 PID: 30296 Comm: syz-executor.1 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1307.275689][T30296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1307.285768][T30296] Call Trace: [ 1307.289089][T30296] dump_stack+0x197/0x210 [ 1307.293462][T30296] should_fail.cold+0x5/0xf [ 1307.297986][T30296] ? setup_fault_attr+0x1f0/0x1f0 [ 1307.303037][T30296] ? ___might_sleep+0x163/0x2c0 [ 1307.307977][T30296] __should_failslab+0xb7/0x100 [ 1307.312872][T30296] should_failslab+0x9/0x14 [ 1307.317459][T30296] __kmalloc+0x2e0/0x770 [ 1307.321728][T30296] ? af_alg_wait_for_wmem+0x520/0x520 [ 1307.327110][T30296] ? __kasan_check_write+0x14/0x20 [ 1307.332238][T30296] ? sock_kmalloc+0xc6/0x120 [ 1307.336844][T30296] sock_kmalloc+0xc6/0x120 06:56:01 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ptrace$getenv(0x4201, r0, 0x5, &(0x7f0000000180)) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$setregset(0x4205, r2, 0x200, &(0x7f0000000140)={&(0x7f0000000040)="900e1ab8ddecf37e5667bcd76dad8034a9c48b4f772e53d0a1cad99956f6d2654bf561d30668501fc87a3b6645401dfe503b423f60f0e2f84311e47e17bd16da166e", 0x42}) tkill(r0, 0x1000000000016) 06:56:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 1307.341656][T30296] af_alg_alloc_areq+0x24/0x1e0 [ 1307.346536][T30296] aead_recvmsg+0x45d/0x17c0 [ 1307.351172][T30296] ? aead_bind+0x170/0x170 [ 1307.355622][T30296] ? apparmor_socket_recvmsg+0x2a/0x30 [ 1307.361106][T30296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1307.367367][T30296] ? security_socket_recvmsg+0x95/0xc0 [ 1307.372854][T30296] ? aead_bind+0x170/0x170 [ 1307.377314][T30296] sock_recvmsg+0xce/0x110 [ 1307.381765][T30296] ____sys_recvmsg+0x22c/0x5f0 [ 1307.386578][T30296] ? sock_read_iter+0x420/0x420 [ 1307.391447][T30296] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1307.397372][T30296] ? lock_downgrade+0x920/0x920 [ 1307.402258][T30296] ___sys_recvmsg+0xe4/0x150 [ 1307.406867][T30296] ? recvmsg_copy_msghdr+0x80/0x80 [ 1307.411997][T30296] ? do_dup2+0x4f0/0x4f0 [ 1307.416268][T30296] ? __fget_light+0x1ad/0x270 [ 1307.420967][T30296] ? __fdget+0x1b/0x20 [ 1307.425169][T30296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1307.431496][T30296] __sys_recvmsg+0x102/0x1d0 [ 1307.436122][T30296] ? __sys_recvmsg_sock+0xe0/0xe0 [ 1307.441182][T30296] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1307.446668][T30296] ? do_syscall_64+0x26/0x790 [ 1307.451365][T30296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1307.457530][T30296] ? do_syscall_64+0x26/0x790 [ 1307.462238][T30296] __x64_sys_recvmsg+0x78/0xb0 [ 1307.467039][T30296] do_syscall_64+0xfa/0x790 [ 1307.471574][T30296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1307.477572][T30296] RIP: 0033:0x45c479 06:56:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x6f010000, 0xd, &(0x7f0000000000)=""/208) 06:56:01 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1307.481481][T30296] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1307.502220][T30296] RSP: 002b:00007fb5a431fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1307.510635][T30296] RAX: ffffffffffffffda RBX: 00007fb5a43206d4 RCX: 000000000045c479 [ 1307.518612][T30296] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 1307.526591][T30296] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1307.534605][T30296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1307.543007][T30296] R13: 0000000000000898 R14: 00000000004cb09f R15: 000000000000000e [ 1307.602023][T30307] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:56:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x670242, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f00000001c0)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x2, 0x1, 0x4, 0x4000, 0x5, {r4, r5/1000+10000}, {0x3, 0xc, 0x8, 0x1, 0x4, 0x0, "5b7771b9"}, 0x8000, 0x2, @userptr=0x8001, 0x64, 0x0, r0}) setsockopt$inet_tcp_buf(r6, 0x6, 0xb, &(0x7f00000001c0), 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = syz_open_procfs(r7, &(0x7f0000000240)='net/icmp6\x00') sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000009030000000000000000000c00630208000340000000080800054000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) 06:56:01 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r6, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x70000000, 0xd, &(0x7f0000000000)=""/208) [ 1307.933472][T30321] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) 06:56:01 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x70010000, 0xd, &(0x7f0000000000)=""/208) 06:56:01 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000100)={{0x1, @name="e42ac33ad182d3e5cfa114b2f304c7f2d3bca0152326464f42326d625dcf9ecb"}, "9c739ef0b18381568ac85f288a6868726bb50039f47aec5340327e9675ec52c2", 0x5}) 06:56:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:56:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x71000000, 0xd, &(0x7f0000000000)=""/208) [ 1308.403914][T30343] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x1000006, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x12, 0x8}}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000000)={0xffffffff, 0x2, "3dd77bfcedb233d613f94edab0191906da6ef78033db4b7bbef763ff077a6957", 0xfff, 0x80000000, 0x7fff, 0x60, 0x1a3}) 06:56:02 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000300)={0x0, 0x2, 0x2, [], &(0x7f00000002c0)=0x3}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x5c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x800}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4c041) readv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x10000000000000d1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 06:56:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x71010000, 0xd, &(0x7f0000000000)=""/208) 06:56:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 06:56:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x72000000, 0xd, &(0x7f0000000000)=""/208) 06:56:02 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x840) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000000140)="f98a3c12aa8f830fd7acddfd643dfb3e17fc0f", 0x13, 0x20008000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1308.814994][T30362] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x72010000, 0xd, &(0x7f0000000000)=""/208) 06:56:02 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:56:02 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x73000000, 0xd, &(0x7f0000000000)=""/208) 06:56:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001840)={'team0\x00', 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000300)={0x3, 0x1ff}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001880)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000001980)=0xe8) sendmsg$nl_route(r2, &(0x7f0000001a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)=@ipv6_getroute={0x58, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x20, 0x94, 0x3f, 0xff, 0x1, 0xfe, 0xd25dd0747dada451, 0x1200}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_MARK={0x8, 0x10, 0x9b8e}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_MARK={0x8, 0x10, 0x9}, @RTA_IIF={0x8, 0x3, r5}, @RTA_EXPIRES={0x8, 0x17, 0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0xf3e2b7ab56808b50) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x8, "f99c7109aa697addeb7cd9378bd0c850f846c5a1105b188684f8f0a2b0c81846", 0x0, 0x1}) r6 = msgget$private(0x0, 0x2b) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="010000007f0061bbcc1d972a1326427a8b8f3f335bdb4bec682d2c123c4170d0d244a42820bd35634f4e39dd1a2194b7d5347e7a875c16b9b87ed584bba15b47e42f769b852fedb49bab268daff8f66540795dde452a1334680569feb80085faa60ec2c2be45d60d99b0697d22fa3cc3ef734f17a7eb58403cb36b7171ab3067a7351fbd8ba4f9a3"], 0x6) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000080)=""/1) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xffff7fff, 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000100)={0xcc, 0xde91}) 06:56:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x11}], 0x1}, 0x0) 06:56:02 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)=0x7) r2 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000240)={'veth1_to_bridge\x00', 0xfffb}) readv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) pwrite64(r2, &(0x7f0000000040)="95424c9640eb33687976c395bad37b902f5c54dfebafb790d6f0178993137496636503ef16dff4c05d37534a0018d58036e495723c73e4cd0b991b36a7a89b42f9c24149869476bbaaa21a1f3f1fb503ee991763b6a5ba1baab6a36a591d698b7f399eaea88b67f26e510c1f56", 0x6d, 0xff) 06:56:03 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:56:03 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x73010000, 0xd, &(0x7f0000000000)=""/208) 06:56:03 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) setpgid(r0, r1) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 06:56:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x21}], 0x1}, 0x0) 06:56:03 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x74000000, 0xd, &(0x7f0000000000)=""/208) 06:56:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000740)={0x1, 0x1, 0x14, 0x16, 0x1d6, &(0x7f0000000340)}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x76, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000300)=r7, 0x4) r8 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ustat(0xffff, &(0x7f00000002c0)) ioctl$VIDIOC_S_FREQUENCY(r8, 0x402c5639, &(0x7f0000000040)={0xe367a85, 0x4, 0x100}) [ 1309.724414][T30404] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:03 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x7, 0x3}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2010, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x31}], 0x1}, 0x0) 06:56:03 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x74010000, 0xd, &(0x7f0000000000)=""/208) 06:56:03 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:56:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000040)=0x72, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) 06:56:03 executing program 5: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20200, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r3 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, r3}) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x801, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) open(0x0, 0x141042, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x18) sendto$inet6(r4, 0x0, 0x0, 0x24008040, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r4, 0x0, r1, 0x0, 0x1000000000000003, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000100)=0x10) 06:56:03 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x75000000, 0xd, &(0x7f0000000000)=""/208) [ 1310.198765][T30430] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x41}], 0x1}, 0x0) 06:56:03 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xa5b04d4694af49e2}}) [ 1310.247096][ T27] audit: type=1804 audit(1583045763.943:8334): pid=30439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir452954676/syzkaller.VmPtiT/2244/file0" dev="sda1" ino=16944 res=1 06:56:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x75010000, 0xd, &(0x7f0000000000)=""/208) 06:56:04 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1310.406667][ T27] audit: type=1804 audit(1583045763.953:8335): pid=30442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir452954676/syzkaller.VmPtiT/2244/file0" dev="sda1" ino=16944 res=1 06:56:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x51}], 0x1}, 0x0) 06:56:04 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x20000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000180)={0x7}, 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) 06:56:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x76000000, 0xd, &(0x7f0000000000)=""/208) [ 1310.672800][T30460] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:04 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x61}], 0x1}, 0x0) 06:56:04 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x76010000, 0xd, &(0x7f0000000000)=""/208) [ 1311.169249][T30482] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:06 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") recvmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/72, 0x48}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/158, 0x9e}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x7}], 0x1, 0x12100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0xfffffff8, 0x91, 0xa84], 0x4, 0x800, 0x0, r3}) truncate(&(0x7f0000000080)='./file0\x00', 0x4) 06:56:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x71}], 0x1}, 0x0) 06:56:06 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x77000000, 0xd, &(0x7f0000000000)=""/208) 06:56:06 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:06 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x77010000, 0xd, &(0x7f0000000000)=""/208) 06:56:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x91}], 0x1}, 0x0) 06:56:07 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)) [ 1313.331110][T30496] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:56:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x78000000, 0xd, &(0x7f0000000000)=""/208) 06:56:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xa1}], 0x1}, 0x0) 06:56:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000080)=0x1c) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)={0x6, 0x8, 0x4, 0x20000, 0x0, {}, {0x5, 0x8, 0xf7, 0x1, 0x9, 0xf7, "3ad354dc"}, 0x9, 0x1, @planes=&(0x7f0000000000)={0x2, 0xfff, @userptr=0x3cfb000000000000, 0xb5}, 0x7ff, 0x0, r3}) [ 1313.690512][T30520] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x78010000, 0xd, &(0x7f0000000000)=""/208) 06:56:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:56:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x79000000, 0xd, &(0x7f0000000000)=""/208) 06:56:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xb1}], 0x1}, 0x0) [ 1314.000666][T30539] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:07 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x7ff}}) 06:56:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 06:56:07 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x79010000, 0xd, &(0x7f0000000000)=""/208) 06:56:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xc1}], 0x1}, 0x0) 06:56:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202000, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x418000, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) [ 1314.360392][T30555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7a000000, 0xd, &(0x7f0000000000)=""/208) 06:56:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xd1}], 0x1}, 0x0) 06:56:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7a010000, 0xd, &(0x7f0000000000)=""/208) 06:56:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0x3, 0x3, 0x10001}, 0x9, 0xd19, 0x2000000000000000}) 06:56:08 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x5}}) [ 1314.809583][T30576] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7b000000, 0xd, &(0x7f0000000000)=""/208) 06:56:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xe1}], 0x1}, 0x0) 06:56:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:08 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0xfffffffd, 0x10}, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x6a) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x8000, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) syz_genetlink_get_family_id$smc(&(0x7f0000000300)='SMC_PNETID\x00') write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004001000f8066600d2f5605aae7acc7b48e3d65660f8667e75bed7ad5453c6f87da45b21cc83bab7a61203504891e20d4dcd2f66289834dc7302f8bc88d1d483f657379c797119096cead0ba3884472d688b5016511da055e5499e2fafd65b4445adc05808a537b7cce6caf8a796"], 0x72) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:56:08 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7b010000, 0xd, &(0x7f0000000000)=""/208) [ 1315.212065][T30602] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7c000000, 0xd, &(0x7f0000000000)=""/208) 06:56:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xf1}], 0x1}, 0x0) 06:56:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r3, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={{r4}, 0x3, 0x400, 0x1}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x119100, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7ffffffd, 0xffffffff, 0x7fff}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={r8, 0x9, 0x3, 0xc0000, 0x8, 0x1}, 0x14) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r9, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x7, 0x80000001, 0x47, 0x2, 0x1, 0x0, 0x44, 0x20ec0d1e, 0x7, 0x644, 0xc7, 0x6, 0x5, 0x1, 0x0, 0x1, 0x1, 0xaeff, 0x2, 0x1ff, 0x5dae, 0x3, 0xdc8, 0x3, 0x0, 0x4, 0x2876e7f4, 0xfffffff8, 0x67, 0xfff, 0x7, 0xffff]}) 06:56:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7c010000, 0xd, &(0x7f0000000000)=""/208) 06:56:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x111}], 0x1}, 0x0) [ 1315.621342][T30627] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x121}], 0x1}, 0x0) 06:56:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x284f02, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) 06:56:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7d000000, 0xd, &(0x7f0000000000)=""/208) 06:56:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x131}], 0x1}, 0x0) 06:56:09 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x12}}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x280) 06:56:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x141}], 0x1}, 0x0) 06:56:09 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7d010000, 0xd, &(0x7f0000000000)=""/208) [ 1316.125228][T30650] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x151}], 0x1}, 0x0) 06:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7e000000, 0xd, &(0x7f0000000000)=""/208) [ 1316.492598][T30678] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7e010000, 0xd, &(0x7f0000000000)=""/208) 06:56:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x161}], 0x1}, 0x0) 06:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7f000000, 0xd, &(0x7f0000000000)=""/208) 06:56:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x171}], 0x1}, 0x0) 06:56:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x7f010000, 0xd, &(0x7f0000000000)=""/208) 06:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x181}], 0x1}, 0x0) 06:56:10 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x80010000, 0xd, &(0x7f0000000000)=""/208) [ 1317.085942][T30709] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x191}], 0x1}, 0x0) 06:56:11 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x81000000, 0xd, &(0x7f0000000000)=""/208) 06:56:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000000)={{0x80, 0x9}, 'port1\x00', 0x2, 0x161410, 0x4, 0x1, 0x8, 0x3, 0x7, 0x0, 0x4, 0x2}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r5, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") fstat(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r8) r9 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000780)={0x9, 0xa, 0x4, 0x4000, 0xcdf83c8, {r10, r11/1000+30000}, {0x4, 0x8, 0x6, 0x80, 0x1, 0x45, "fd005229"}, 0x6, 0x1, @planes=&(0x7f0000000740)={0x2, 0x1, @userptr=0x7}, 0x37b, 0x0, r2}) bind$netlink(r12, &(0x7f0000000800)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r13) getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) r16 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r17) getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) getgroups(0x9, &(0x7f00000006c0)=[r4, r6, r8, r13, r14, r15, r17, 0xee01, r18]) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000100)=0x76) [ 1317.372521][T30724] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:11 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x81010000, 0xd, &(0x7f0000000000)=""/208) 06:56:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x1a1}], 0x1}, 0x0) 06:56:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 06:56:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, r3, 0x10001, 0x5e1f}) 06:56:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x1b1}], 0x1}, 0x0) 06:56:11 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x82000000, 0xd, &(0x7f0000000000)=""/208) [ 1317.829764][T30744] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:11 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x82010000, 0xd, &(0x7f0000000000)=""/208) 06:56:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x1c1}], 0x1}, 0x0) 06:56:11 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x83000000, 0xd, &(0x7f0000000000)=""/208) 06:56:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00') writev(r0, &(0x7f0000002740)=[{&(0x7f0000000440)="03", 0x1}], 0x1) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x7f, 0x0, 0x1ff, 0x2, 0x7f, 0x1f, 0x400, 0x0, 0x8001, 0x4, 0x9, 0x6, 0x6, 0x14, 0x3, 0xfffffbff, 0x3, 0xfff, 0x4, 0x7c0, 0x7, 0x5, 0x4, 0x6, 0x0, 0x6c8, 0x5, 0x5, 0x10001, 0x7f, 0x80, 0x5]}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x428803, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="98000000000000000600000000000000020000000000000001010000000000faffffffffffffff002f6465762f766964656f3337000000000300000000000000050000000000000001000000090000004000000000000000030000000000000000000100000000002500000053000000707070302d6c6f62646576626465762f706f7369785f61636c5f6163636573736e6f646576000000d62bc8779aaac1"], 0x98) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) mq_notify(r6, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f00000002c0)={0x0, &(0x7f0000000080), 0x1}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto(r4, &(0x7f0000000040)="9f50265345b29cf1f3fe2c86c5f59e7fa6d2f32e866c74b6fc33ff3effd1c549aa320ecab61fa4a11209a15959fb306460711fb0fc09afbf", 0x38, 0x804, 0x0, 0x0) [ 1318.185253][T30764] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:12 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x83010000, 0xd, &(0x7f0000000000)=""/208) 06:56:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x1d1}], 0x1}, 0x0) 06:56:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x9a0000, 0x3, 0x7b3, r1, 0x0, &(0x7f0000000040)={0x9909d8, 0x3, [], @p_u32=&(0x7f0000000000)=0x8001}}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4, 0x0, 0x0, 0xfffffffffffffffe}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000100)={0x40, 0x4, {r5}, {0xffffffffffffffff}, 0x0, 0x6}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, [], 0x1d}, 0x4e23, 0x6, 0x4e24, 0x8, 0xa, 0xa0, 0xa0, 0x84, 0x0, r6}, {0xfffffffffffffffa, 0xff, 0xff, 0x1, 0xa7e, 0x400, 0x8, 0x400}, {0x80000001, 0x1ff, 0xdf7, 0x1}, 0xfff, 0x6e6bb4, 0x1, 0x0, 0x1, 0x3}, {{@in6=@rand_addr="a374a3841f538d6870013675425cae91", 0x4d2, 0x3c}, 0xa, @in6=@ipv4={[], [], @local}, 0x3506, 0x4, 0x3, 0xff, 0x9, 0x6, 0x4}}, 0xe8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:56:12 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x84000000, 0xd, &(0x7f0000000000)=""/208) [ 1318.625905][T30790] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x1e1}], 0x1}, 0x0) 06:56:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:12 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x84010000, 0xd, &(0x7f0000000000)=""/208) [ 1318.914729][T30807] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x1f1}], 0x1}, 0x0) 06:56:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:12 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x85000000, 0xd, &(0x7f0000000000)=""/208) 06:56:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r3) mq_notify(r4, 0x0) read$midi(r4, &(0x7f0000000100)=""/139, 0x8b) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[0x7fffffff, 0x33b, 0x0, 0x1, 0x9]}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0xfff, 0x3, 0x444b, 0x9e34, 0x0, 0x6, 0x3, 0x8001, 0xffff, 0x40, 0x9, 0x1, 0x0, 0xb3, 0x6b, 0x0, 0x1, 0x20000, 0x3f, 0x6, 0x1, 0x0, 0xed, 0x2, 0x2, 0x401, 0xead, 0x20, 0x200, 0xbaa, 0x0, 0x7]}) 06:56:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x201}], 0x1}, 0x0) 06:56:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:56:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x85010000, 0xd, &(0x7f0000000000)=""/208) 06:56:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x4, 0x0, 0x439e35c6, 0x7, 0x4, 0x5, 0x2, 0x9, 0x1, 0x10001, 0x0, 0x3, 0xffff, 0x8, 0x7, 0x400, 0x0, 0x2b56, 0x101, 0x8001, 0x4, 0x1, 0x8, 0x81, 0xff, 0x0, 0x95, 0x10000, 0x4, 0x9a1, 0x57c]}) 06:56:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x211}], 0x1}, 0x0) 06:56:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x86000000, 0xd, &(0x7f0000000000)=""/208) 06:56:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x86010000, 0xd, &(0x7f0000000000)=""/208) 06:56:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x221}], 0x1}, 0x0) 06:56:13 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f00000002c0)={0x9, 0x8}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000300)=0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r7, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d71b66e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)={0x7fff, 0x6, 0x4, 0x1000000, 0x7, {0x77359400}, {0x3, 0xa, 0xbb, 0x0, 0x4, 0xfe, "9fc1bb9b"}, 0x8, 0x2, @offset=0x4, 0x6, 0x0, r1}) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0xe8280, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000140)={0x12000, &(0x7f0000000080), 0x4, r9, 0x5}) 06:56:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x87000000, 0xd, &(0x7f0000000000)=""/208) 06:56:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x231}], 0x1}, 0x0) 06:56:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:13 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x87010000, 0xd, &(0x7f0000000000)=""/208) 06:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:14 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x88000000, 0xd, &(0x7f0000000000)=""/208) 06:56:14 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='/dev/video37\x00') r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r6, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x4, 0x4) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000002c0)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x1}}) 06:56:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x241}], 0x1}, 0x0) 06:56:14 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x88010000, 0xd, &(0x7f0000000000)=""/208) 06:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x251}], 0x1}, 0x0) 06:56:14 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x89000000, 0xd, &(0x7f0000000000)=""/208) 06:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:14 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x1090c0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x501000, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0x2}, 0x18) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$x25(r5, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000300)=0x12, 0x800) 06:56:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x261}], 0x1}, 0x0) 06:56:14 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x89010000, 0xd, &(0x7f0000000000)=""/208) 06:56:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:15 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000001c0)=0x8, 0x8) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x9, 0x7ff, 0x2, 0x9eb0, 0x2}, 0x14) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x9, 0x0) 06:56:15 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8a000000, 0xd, &(0x7f0000000000)=""/208) 06:56:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x271}], 0x1}, 0x0) 06:56:15 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8a010000, 0xd, &(0x7f0000000000)=""/208) 06:56:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x281}], 0x1}, 0x0) 06:56:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:15 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8b000000, 0xd, &(0x7f0000000000)=""/208) 06:56:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x291}], 0x1}, 0x0) 06:56:15 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8b010000, 0xd, &(0x7f0000000000)=""/208) 06:56:15 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x96, &(0x7f0000000080)="8e14c8767c86ff70798c365e38900f86d036b4848ab92eccc9d49f9b5dd229d20c6e32be66656a03a7d15c5812ffd4c94cc401cd5b80c72781037ed113dc5a7e606d8100b7e455abddfe19690fa637faf9b9e14d4f4616c0489a0eef6c69f2a04dd1dbd5f1217c2106cbc0fe502210a569a9fa72a3688856eef0014c963739417b6d671e8e6eb9b5e4a21c089a9022f97519ef7e4e71"}) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x6}}) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000abffe6e1ccb257b5ddc81bf37067000000140012800900019e77c6066825d91df621007663"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r5, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x200000, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="44fb8749e23e7db6eeb6ee7eba0000005c62766a0fbce37d746210ba913156e9b1b6d9fbe4dfb818379097152ea03aa8a1c900165a0429866f7df35697c85c18d2f3bdf3366988e9b33d769a7eea28b80feb96053ce1afe7160de25797f4b226cfb43d15c7038efa96e7544c2b0d8033a0ac5c8e87ba06ddb4f2519414fb4f11957b37be4d721d2b4898a068effc82dc8823d4434fcb9168b0924371dc0a1a890d029e1c314a54716a02f2dfd867708a28f8cd328b7fb35abcb49efea01d12a874e1076a7659c98e9dcf88f85da8f071fcb18d5094d00a980e64800d3270e49f4b46721af949b80dea233ec7ea9810de5e955a", @ANYRES16=r7, @ANYBLOB="08002abd7000fedbdf250000000006000e0002000000140020000000000000000000000000000000000114001f00fe80000000000000000000000000001e"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_L2SPEC_LEN={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8085) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x280, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = dup2(r8, r1) getsockopt$inet_mtu(r9, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r9, 0x4c07) ioctl$VIDIOC_SUBDEV_G_SELECTION(r9, 0xc040563d, &(0x7f0000000180)={0x0, 0x0, 0x103, 0x2, {0x401, 0x8, 0x5, 0xb35}}) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f0000000040)=0x1f, 0x4) 06:56:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x2a1}], 0x1}, 0x0) [ 1322.199833][T30996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 06:56:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8c000000, 0xd, &(0x7f0000000000)=""/208) [ 1322.321398][T31003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 06:56:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x1, 0x4, 0x88, 0x80, 0x2, 0x7f, 0x3, 0x6, 0x766f, 0x81b, 0xffffffff, 0x9b, 0x8, 0x3, 0x6, 0x9, 0x3f, 0x2, 0x4, 0x9, 0x6, 0x2, 0x5, 0x0, 0xa4d, 0x5, 0x4, 0x1, 0x7, 0xa, 0x4, 0x2]}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) 06:56:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x2b1}], 0x1}, 0x0) 06:56:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8c010000, 0xd, &(0x7f0000000000)=""/208) 06:56:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8d000000, 0xd, &(0x7f0000000000)=""/208) 06:56:16 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2c0000, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x388, 0x15, 0x2, 0x70bd28, 0x25dfdbfe, {0x1e, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xce, 0x1, "ed91a2677f59329d861f55409af889a91959a803e870df44fa823101c3fb81cf538eafb01e21a95f94dadb7fdf5742adaf8745678185246c9f5ceb6c18457be6792aa8f96f1d753203dda46263aff504453301169ef137e7b9914d0845f65444cac55b6195c6a3e39528aee5d37c60cd794df7b9086e88e66609878ea7175ea49c4796de673a3d20573e034fc5822fa4b2c2d183aeaf89ff197be1b0882403f6a9af1e9b794bde4a8cf2308f8366cd8fcdd7f2035bbece211bf0375d95348a6bebaeb83ef6f76386d08a"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "e779067baf412c05b1d8c48eeaf26f5ef249a90e536743528a9f4bb0ad566ee414b8eee04b1ed2c5b8"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "2d32a3bb45faf34f3e690893caecf9352e5bb6d60be91a470abfe2f7ad07a980fd94911dbc1b8ed55fcf9a2e7f43efab3621d4dda46ec4966bd2efed95a410065c74bee81adfc78c84b4878fa70221b8d56425d03838dce26b629de9a5fcbf2e0db118361d2de756f4e138a864c74ebb7250020c1b55e9ba7c815de7ce1d7ce60ffd951857811ef73dec87d3455c23e67ddcb824009718d0ae7c8c282822d982d06333c7bd88f4525427e0af4862db1661ec160c6dcbb0eedc2215c9cff07239f3f1a2e1c25fe9d330266c09c43588e73ae79111b58e3f869ae27cf149cd39652301e4b9c5edeeb9b2c38e2ae221123ffede39fa622e89f4"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "ec8c60cc04bd9c360f8119ac3abae6d1bdaf7263f8f09030137d722713c9f0a6a1c2e1209a20e6bf98a5d9cab29134f5327d0e8b392c82edbe5be939cf5176a7009bc83f8dbb2bc405c53c70aa5294d94e0a66d11321a256016845d1bfdcc9a11deca666068d50926b79698ab8de849d856848665a1c1f8e0c2b5076123a6b5f491e0e0100b32b3dfe494e565dddc7255f29969642fd99"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "f4ec8bd70a5fa784b2941e0c4ad38b21ef8bd718ddc803654a65afbfdc0be575e9f43fb71fe1274778a2346e948404d1fb9c4c503fb241e85bea31e8d0393aadfab0dc932c83817d6f79f0cb60ded9e5ccb6cbfdde18e5d368687477eed22da53fb3072509e9adfdd573ae0cd4805de22705a0657c5938bf07185a04319d0ae397501b5c299b201c36e687939a4efc40fb333c5dcbaa5a2716cf28eb9e56b18e417b276591705835487fe93011e589857fffcd16e4b0802e6d064a96cb7d1c9560ed92d27b3d098d591b96a63fd24d658ac8c2d74c485d3d"}]}, 0x388}}, 0x40) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x6, 0x80000000, 0x1000, 0xfffffffffffffffe, 0x0, 0x9}}) 06:56:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x2c1}], 0x1}, 0x0) 06:56:16 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8d010000, 0xd, &(0x7f0000000000)=""/208) 06:56:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x800, 0x0, 0x4, 0x10000, 0x6, 0x5, 0x3ff, 0x3, 0x4, 0x7ff, 0x4, 0xc4, 0x8, 0x8000, 0xc9, 0xdfb, 0x6, 0x7fff, 0x8e, 0x7ff, 0xa355, 0xfff, 0x6, 0x80, 0x1, 0x1fe, 0xb524, 0x380, 0x8, 0x800, 0x4, 0x3]}) [ 1323.027475][T31042] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x2d1}], 0x1}, 0x0) 06:56:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:17 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8e000000, 0xd, &(0x7f0000000000)=""/208) 06:56:17 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)={0x7ff, 0x2, 0x4, 0x4000, 0x9, {}, {0x6, 0x0, 0x81, 0x9, 0x3, 0x6, "5153ffe4"}, 0x4, 0x0, @planes=&(0x7f0000000080)={0x4, 0x5, @userptr=0x10001, 0x7ad6}, 0x7, 0x0, 0xffffffffffffffff}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x7fffffff, 0xc}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) fcntl$getflags(r4, 0x401) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x8, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x9, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000014000100001e0000000000000cb9021b0000", @ANYRES32=r7, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @raw_data=[0x5, 0x80000001, 0x10001, 0x4, 0xff, 0x2, 0xd6e5, 0x2, 0x0, 0x207, 0xe9, 0x8, 0x5, 0x9, 0xffff, 0x239a, 0x1, 0x4, 0x49c, 0x401, 0x7fff, 0x7, 0x7, 0x3, 0x10001, 0x8, 0xa7a2, 0x1, 0x9, 0x550, 0x101, 0x7]}) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000200)) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 06:56:17 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8e010000, 0xd, &(0x7f0000000000)=""/208) 06:56:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x2e1}], 0x1}, 0x0) 06:56:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x7fffffff, @local, 0xfffffffe}, r4}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1323.461863][T31063] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1323.478188][T31074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1323.487697][T31074] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1323.574475][T31080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1323.675879][T31080] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 06:56:17 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8f000000, 0xd, &(0x7f0000000000)=""/208) 06:56:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x2f1}], 0x1}, 0x0) 06:56:17 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x84, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x54, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x84}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r5, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r5}, 0x10) [ 1323.808290][T31086] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:17 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x8f010000, 0xd, &(0x7f0000000000)=""/208) 06:56:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x301}], 0x1}, 0x0) 06:56:17 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x5, 0x0, 0x0, 0x0, 0x9}}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 06:56:17 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x90000000, 0xd, &(0x7f0000000000)=""/208) [ 1324.241283][T31106] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:18 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x1f, 0x2, 0x0, 0x800, 0x1, 0x0, 0x2, 0x0, 0xd3, 0x7fffffff, 0xffff, 0x800, 0x401, 0x800, 0x8001, 0x1c0000, 0x77e, 0x4, 0x7fff, 0x7, 0x20, 0xffffffff, 0xffffffff, 0x81, 0x0, 0xfffffffc, 0x6, 0x3, 0x140000, 0x5, 0x12a, 0x7fffffff]}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x3, 0x5, 0x3ff, 0x8, 0x3, 0x3, 0x8df6]}, &(0x7f0000000040)=0x12) 06:56:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x90010000, 0xd, &(0x7f0000000000)=""/208) 06:56:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x311}], 0x1}, 0x0) 06:56:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x91000000, 0xd, &(0x7f0000000000)=""/208) [ 1324.647691][T31133] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x321}], 0x1}, 0x0) 06:56:18 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video37\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r5, 0x0, 0x1, &(0x7f0000000040)='\x00'}, 0x30) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x5, 0x5, 0x201, 0x70bd29, 0x25dfdbff, {0x5, 0x0, 0x9}, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x4c0c2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x81, 0x4, 0x1, 0xffff34cb, 0xffff7ce2, 0x80000002, 0x2, 0x18000000, 0x2, 0x1000, 0x80000001, 0xdee, 0xfffffffe, 0x6, 0x0, 0xb8c1, 0xffff, 0x36f5, 0x9, 0x1, 0x2, 0x8001, 0x800, 0x40, 0x5, 0xffffffff, 0x3, 0x0, 0x8, 0x8, 0x5, 0x14]}) 06:56:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x91010000, 0xd, &(0x7f0000000000)=""/208) 06:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x331}], 0x1}, 0x0) 06:56:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x341}], 0x1}, 0x0) 06:56:18 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x92000000, 0xd, &(0x7f0000000000)=""/208) 06:56:18 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x202000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) read$eventfd(r0, &(0x7f0000000080), 0x8) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000100)={0xb, 0x33, {0x1, 0x6, 0x7, {0x1ff, 0x100}, {0xffff, 0x5}, @const={0x7, {0x5, 0x5f, 0x4}}}, {0x52, 0x4, 0x7ff, {0x9, 0x1}, {0x0, 0xc00b}, @ramp={0x5, 0x1ff, {0x401, 0x9, 0x0, 0x5}}}}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x800, 0x0, 0xffffffff, 0x0, 0x0, 0x2}}) 06:56:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x92010000, 0xd, &(0x7f0000000000)=""/208) 06:56:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x351}], 0x1}, 0x0) 06:56:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x93000000, 0xd, &(0x7f0000000000)=""/208) 06:56:19 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x3, 0x9, 0x61cf, 0x401, 0x8, 0x5, 0x7ee0, 0x65, 0x3f, 0x1d96000, 0x5, 0x200, 0x5, 0x0, 0x7fff, 0x0, 0x1, 0x2, 0x4, 0x3, 0x0, 0x3ff, 0x4, 0x8001, 0xee8, 0x5, 0xbd23, 0xa7, 0x1, 0xba4, 0x5, 0x78cb]}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000001c0)={0x10000, 0x3}) 06:56:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) 06:56:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x361}], 0x1}, 0x0) 06:56:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x93010000, 0xd, &(0x7f0000000000)=""/208) 06:56:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40800200}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x204, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd3, 0xbe, "50d772665807204f052343f7f059c861c3d4b76b6479841bc5f698e95a64ed6c199553dd21cd8c83acb5846c249970dddcc47ff04c322f33c205eadb8e6f7be101624a176a0825818f14646efed80f21cbdb56cb747b2ff9787ecdf6fbec0c7f5d291ae08b50bb59a28d29aaf132dcdd61c8a8855c635ce7ed5b7878ca49fc5ffacb1a2c0307c742ffe17beff76818cf3f397f984110f418163fc844c09722995dc72ac88c21cb199a00a95af8b1e8442c9d90868e635709454c12cc74532c869f4f657672bdf80a78622945bb0bff"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4a, 0xbe, "c0bfeffd70ed792552b509e2b18a78e21202c6ec1cf69d43b76468e9cb9a9fdd991dcbcb23fd4fc26631178911272387232f035a480c44efb4c1f19f885e304cb3cef12477bb"}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9f, 0xbe, "161d803f2f07d727342e70b291633a0539918607aa16963c05744d921bf0299c3e02fc744d2c9c1193b7e66067d261fc42a74af9d2fb52e68194195d5bd369c1886f9763e3884cda33372ad51c84cc6939fc91f2a524c3ccb90052514f75c6266ca561055373539abda62ab247e4a95fc8bfef022c13f4654926fa9c2de1046a8c64806e14ac0cb070d0c3889dfc50c7a6db1902c2f373daa89333"}]}, 0x204}, 0x1, 0x0, 0x0, 0x24000020}, 0x2004040) 06:56:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) 06:56:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x94000000, 0xd, &(0x7f0000000000)=""/208) 06:56:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x371}], 0x1}, 0x0) 06:56:19 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x94010000, 0xd, &(0x7f0000000000)=""/208) 06:56:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, 0x0, 0x0) 06:56:19 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x84500) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7ff, 0x480) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) mq_notify(r5, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x8000, 0x0) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000100)={0x9bc, 0xb, 0x4, 0x0, 0x5, {r1, r2/1000+10000}, {0x1, 0x0, 0x20, 0x3f, 0x6, 0x3f, "ffe74c05"}, 0x10000006, 0x1, @fd=r5, 0x3, 0x0, r3}) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000000180)) 06:56:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x381}], 0x1}, 0x0) 06:56:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:20 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x95000000, 0xd, &(0x7f0000000000)=""/208) 06:56:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x391}], 0x1}, 0x0) 06:56:20 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x1e}}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x1c) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) socket$vsock_stream(0x28, 0x1, 0x0) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) mq_notify(r6, 0x0) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000040)={0xfffffff8, 0x7fffffff, 0xd5, 0x4, 0xffffffff, 0x90}) 06:56:20 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x95010000, 0xd, &(0x7f0000000000)=""/208) 06:56:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x3a1}], 0x1}, 0x0) 06:56:20 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x96000000, 0xd, &(0x7f0000000000)=""/208) 06:56:20 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x8}}) 06:56:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8}, 0x10) 06:56:20 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8d}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) 06:56:20 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x96010000, 0xd, &(0x7f0000000000)=""/208) 06:56:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x3b1}], 0x1}, 0x0) 06:56:20 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") recvmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/72, 0x48}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/158, 0x9e}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x7}], 0x1, 0x12100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x97000000, 0xd, &(0x7f0000000000)=""/208) 06:56:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x2, @pix={0xa, 0x2, 0x34343459, 0x8, 0x801, 0xff, 0x3, 0x7, 0x1, 0x1, 0x0, 0x6}}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000080)={0x10, 0x6, &(0x7f0000000000)="0f57642ea4fafe5cfc25135c1e471ff822980358b7c57e45d8a11cf256eb306ed0341748e17a4944ebb2fcae4e7242d5d9b0ce70d623a969bfd881db99310e715347fdf1d759d51b822da4f6162f630bbdcaa554244d303536eaf87326236dd1eb2d06b730f64047eca0181fda8f25e7977d58d8d1ebb7328004954ec50181", {0xdcc2, 0x8001, 0x4745504a, 0x7, 0xdca, 0xf5b, 0x9, 0x9}}) 06:56:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x3c1}], 0x1}, 0x0) 06:56:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x97010000, 0xd, &(0x7f0000000000)=""/208) 06:56:21 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") recvmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/72, 0x48}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/158, 0x9e}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x7}], 0x1, 0x12100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x3d1}], 0x1}, 0x0) 06:56:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x98000000, 0xd, &(0x7f0000000000)=""/208) 06:56:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000)) 06:56:21 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") recvmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/72, 0x48}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/158, 0x9e}], 0x3, &(0x7f0000000680)=""/4096, 0x1000}, 0x7}], 0x1, 0x12100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) dup(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)) 06:56:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x98010000, 0xd, &(0x7f0000000000)=""/208) 06:56:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x3e1}], 0x1}, 0x0) 06:56:21 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20200, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r3 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, r3}) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x801, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) open(0x0, 0x141042, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x18) sendto$inet6(r4, 0x0, 0x0, 0x24008040, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r4, 0x0, r1, 0x0, 0x1000000000000003, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000100)=0x10) 06:56:21 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffff9cdc, 0x80000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x1407, 0x10, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000013}, 0x1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:56:21 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x99000000, 0xd, &(0x7f0000000000)=""/208) 06:56:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x3f1}], 0x1}, 0x0) 06:56:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x99010000, 0xd, &(0x7f0000000000)=""/208) [ 1328.433332][ T27] audit: type=1804 audit(1583045782.133:8336): pid=31361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir893481189/syzkaller.VE3ahk/2212/file0" dev="sda1" ino=16881 res=1 [ 1328.524072][ T27] audit: type=1804 audit(1583045782.133:8337): pid=31366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir893481189/syzkaller.VE3ahk/2212/file0" dev="sda1" ino=16881 res=1 06:56:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x411}], 0x1}, 0x0) 06:56:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9a000000, 0xd, &(0x7f0000000000)=""/208) 06:56:22 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={[], 0x1}, 0x4, 'vlan1\x00'}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000005380)={0x1c, r3, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x7) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r8, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x19e}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x3ff, 0x1ff, 0x9, 0x9, 0x3f, 0x9, 0x3, 0x20a, 0x7, 0x7fff, 0x3, 0x10000, 0xe0000000, 0x0, 0xa46, 0x1, 0x1, 0xb95f, 0x6, 0xfff, 0x6b1, 0x6, 0x1000, 0x3, 0x6, 0x1f, 0x8, 0xb3, 0x3, 0x80, 0x40, 0x2]}) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000300)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000480)={r11, 0x1, 0x6b, "e76c4e914692cc7c2e6e54db0a55037acb9f4a1e81f145d0c41526eec90f57c28c317c34e1db8b322fec598d0ae705ad16cc78fd55a9a9164c981e4eb5ab35e3eefe78156c8835056d747ad34bcebf2a8ae393a120c84a907b58f95865f105fc01fc36de33c429daee4480"}, 0x73) 06:56:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9a010000, 0xd, &(0x7f0000000000)=""/208) 06:56:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x421}], 0x1}, 0x0) 06:56:22 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9b000000, 0xd, &(0x7f0000000000)=""/208) 06:56:22 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) 06:56:24 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20200, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r3 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, r3}) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x801, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) open(0x0, 0x141042, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x18) sendto$inet6(r4, 0x0, 0x0, 0x24008040, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r4, 0x0, r1, 0x0, 0x1000000000000003, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000100)=0x10) 06:56:24 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9b010000, 0xd, &(0x7f0000000000)=""/208) 06:56:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x431}], 0x1}, 0x0) 06:56:24 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x258301, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000200)) 06:56:24 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x4a00) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, r3}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r5, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x78f, 0x9, 0x80, 0x6, 0xd3e8}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r6, 0x4fc3}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x6, 0x794, [0x200004c0, 0x0, 0x0, 0x20000714, 0x2000081a], 0x0, &(0x7f0000000380), &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]}, 0x83c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(0xffffffffffffffff, r7) mq_notify(r8, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, r8}) 06:56:24 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount$9p_rdma(&(0x7f0000000600)='127.0.0.1\x00', &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='9p\x00', 0x90, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,sq=0x0000000000000003,timeout=0x0000000000000009,mask=MAY_APPEND,subj_type=/dev/snd/timer\x00,smackfsdef=\x00\x00ev/snd/timer\x00,dont_hash,func=FIRMWARE_CHECK,\x00']) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f00000000c0)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000580)={r4, 0x20, 0x7, [0x0, 0xfffd, 0x3, 0xffff, 0x101, 0x400, 0x4]}, &(0x7f00000005c0)=0x16) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x15) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = msgget$private(0x0, 0x0) msgrcv(r8, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r8, 0x0) msgctl$IPC_STAT(r8, 0x2, &(0x7f0000000440)=""/148) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r9, 0x100, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x20000050) r10 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x7fffffff, 0x200) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8100}, 0x80) tkill(r0, 0x1000000000016) 06:56:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9c000000, 0xd, &(0x7f0000000000)=""/208) [ 1331.282358][T31411] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9c010000, 0xd, &(0x7f0000000000)=""/208) 06:56:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0x9) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xa000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000080)={0xfc, &(0x7f0000000100)=""/252}) [ 1331.429421][T31411] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9d000000, 0xd, &(0x7f0000000000)=""/208) 06:56:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x1, 0xfff, 0x1007, 0x101, 0x3, 0x2, 0xd44, 0x3, 0x4, 0x6, 0x9, 0x4, 0x43, 0xff, 0x4, 0x7, 0x7f, 0x7, 0x80000000, 0xb4, 0x3, 0x10000, 0x400, 0xffff, 0x10001, 0x8c9, 0x100, 0x4, 0x1, 0x2, 0x7ff, 0x8001]}) r1 = socket(0x10, 0x803, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000012c0)=""/105, 0x69) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000002c0)="0cb7abfcd4ca7ca761a3f35261c156bf501d50093c26a8a7c4281781d2037809bc80243894b4a05e91f80ef6c033ab6473cf533b48245da937a37e52aa7c3cf2b090e0b8e0bcd5a6bc5c2c93fec4932bf72b9635e379a61f12733bb3048c54fca69957d7ed5c7db4f8a0919f2c36b7fd2541a3aeb80a7b34fff4fa0b5ef12743e4c2f713fb04d494c52ac869733c1e6b406be19ae7719323bda5cf50445c287673f9365e8602782f3d74d3c3de8314b15394fbddc4273a018cad60df19e261d45991203aec854943fe3105437ae677047ca7b0c945719f51f917a9e6ab83ad15224ea35fb7363c61a8007745fd21a77725fd954c319589a6ae57adaf48a4bd6463da7a1fe7f7a02a3d56e03419ab1f40552e0f9bd1a242230a4c68268c73b5e25c8603137c7a05e37667bc98c37c80a9149c9ed2573827cc7f7234a5962a8443c58dc3a40da0d75067ce4c57cedfeb05549dca39b8e822c84840df7c9bb1e9cc65f8b9fdad62623c3e490a20f57f2808ec923001652923b95e6947fd1a3377bf48279c870806735c5ae67c86e0080f13aecf85dbfda08be6652ed4b3191f89755455f3a8af6ece9ffccc2b10596b441285aa65cacb565233053de07c53097f5fb591cb7548617e12827b91d61665464316c455be4b5792fab7a9906b9626f1a305d735f6af9277296b5e16c378ae2cb2c18aba46f4b1e3af982d7d2d1177ccf793925c3983beff4369c7a16cdffe4c417479cb5b5be6dab8c4d2936c4aa85b524691ea484235d3a56d12e2a099453ff5d787d9f9369da614bb6fb06a6bc62bcc3720a1fb374c5de835684f1fdd91577f8913dd87a630a1016974de4d2c3e06f8bc00999e043590836c3b92403ef1703aeab602f524560a266556cadc236e89e48910cbc5b60687b5b16c600831c697eb8f9c63e5ac65afabffd83827031dfbc0a48f876697d246474292c1d377ad4b80a1eb8bd721558ee01337802f9cad68ebabdc825326490a4bd397dd0db30a06a5a05940847fc4957e067d87efc83da92b060ed750c220eb5725801303a8b592320fe7711c6743b634ce3aaf5a20a1249facf8e940496ce121246cf05bb025281f8b8f702160bdc08cf1caa7bb4e40d3a5d294b3b8e1a429d8eaca150e53c1acd8f9f65a30b9e286ccbc17f88e23475a61447be6903072ff4f1432b5ae8c133d51c9cc6cd391c0f20c3fe31797c49af6ba5a0432c57e465ade5849a9f8f94c7f5c27cc9b6a4147589bd0d4621fb3f3d4ccc0eec97e6f293a808e21ee8d59a4179d8127e322feded30627e612f632b50a5d795241708583b517794c300707ee224f5e6ec9404eb99b8f88210e5c84617ab1795ae938398391cd291d5775afc4b6547edcdee87d4a0268b41b94f7402bca4fcd3de1488af220ef64830367f8d85157fa8ce9d5f14d065185fa332d23312be787038f218b35e2b201fa4a08c665b3a94a12c2b5969c9fe65e05e943653085deb15604b883dfd0420882a0bd219584e9692853ff10739fe1827a35ac354565b1af2fec0ac2310cf22ad2db713d4ffa1cecfec2da421322987c925fc626580ad1e42605f09190045cd4e150f69610dc6a33255f8eab59ff1fb1ebb6f4a0549fc5ed1114dea014ecc5adb375fc64f3e9ac5399e7001b163ef5f03f8c5a5385714ebd23231a6f5bc6096e7706ef888a35937057d9e7a126851f8c58995d450ee6df4ff80dcd75df3d07cb1b624d4ef49b64677b500d8f43aaf623f4f97be338a93f6549a195ee05ffb4d41523c6bed81659ec30228dae3a9d20c89dab0684f498f5e782f280a8389548e346cdabda6fb2cdd213dab1761916f5ea8129e6b62e505f86cc66e9fea1e7737e3c129c4e6bd52637f1db847c185dd7bf907268fbcac08bf74179151ffccbc462957edd61c7777599214b534d7966db2cda2dfc1261efa615d63f0b47233447046ded10ec4e789661544866ae521df6267b9c9e3769b6aeffe7de4132d531e9e9c6fa0ab54c2d98bb4741cec027e0a8dda6429943bf552d27392a17721a665228a5ed196d91d63b1b2af6b4db616706ed860eca8a7e448f97a21c582dfb05dd69365093a9c46a0dabeb634e14cd7a0edc2d3a154123c05b5231f9bf37c9c3391811815320fbd52b67486ca073c20b279ae70c567bc83590ac2da1a8116351176cf8a4b3f5a743f664b0c2413a43c81d6af2a3510c55202b27bb4c133507e6401242f7d9ab6c82ce3b65b4e33300099c8f133453c718bba263183965769d07c25bc3f76a404c22ba18e1176a63254d51be96c2a10f8daeff782842d689302b68d577e2f361c60b39b9d78cd5a7e70a934ceeb15341712c29ed660dcb457e942578c738bd34bc5320d752e6eeb5d2b7b3641e722f4f1bfedcc8a85204ffcc190b7bb8177fe93ddc412ce9146c2b95b3e2e4886c13727863bb62211b8845e0bd3be73d7da5db66e978b5f631c8b12c1ab6c91f2af1e84889571fc0c90362009327c1512a9f092acf14f43a3115d675beb378a46cd5d8914a934e8a63dbfb39cb7a9ea0d694e0b05ba5e7851542cf9683de6f0656eac1dc8693ee717d3721784b9338cc3ff246a7b987a778c9db56e0fe09340cbeda1155ace818ddfaa3e933b4deb1b2d9f22bde71a8d386a6e79f14bdcf5f06c97c5ed942093c0a61bfa3f86e30978c419d11c25a801252dab8f0a02516e9ff5d9821b22591061fc18a768f5b88d05f8bffbe1697641bc8ea8ae3a25654b6eb303488f4484b62506805ea81961a49e2fcd4f6c69097fe13fc9f7d65a746e6a8b42ae0d8e4f1186bf45c8f60dcb750d2985862ea0fc40faa87c9da62d6e4b784dbb50e9115e95f9338639ee316037dc329e03d15e1459f618e8a2b43a970cd04ea6d5f5e58f74e1f51a4303dc8e65965bdd966afcc65bd443f3f3d6340b801ad6b61132440f24804de423ed474ec14c099ffae2be9327f51c092059b8627c173e2801507030cb9a03800a41a19171bb65fded6e6801431857d6d65f55a4fc5be0954bb616e1ed6742eb74bf12c29c804b9bf24a2d0a6baff4c9c036b16d9233bde4ef231ed823c5e660fc0d6e03859e1d80905a48161f7bb03f58b802bea9b04b252187ab9fb7c542e6127eb65b117ae567081abaf602c79bbcb2b37d255b00c840c61a4c609c040ea85d0a9ce7dbdc89c16f1ec129dc9a4419c439af329a60125d9ca8f14fd2b1d76cc486e884fabf0420f7161b1ed3c4681ee3656977a22eff279fb3cf2a9edf1668e57454f2529e583d3ab3b9f84e0628b7d39e320ad6ec5792f52ca6a2e87d9cd8420fb9f27f57e5246c8fc9df5e979cc906f598b3d0c3eb18148388209f24955239298c34878eb13ebabe51bf746eab50e7663cd91bb888b3770207ace9f946179a7316ff9f09c52e905160656a3ebb7fd4ececf9c301eee7b9baa36bf1838366d144efe4fa5622e24f5acb995fa053abdefbfe0154417bce95fb18c9a3ef15fec28405fdd9c75f6de318a228c81233cce76e5bbc5b8e12ab44ac3b5ec6a8d385fc49a686ae2f2a995cebb25d95c9af9da26f6c0b77c1b61bec8167e19bc8b2eb72b9e23c3883101e4f062f32fc615a75a6f9ec33e3adb24ca04b9ac143da44c6b6fcd70e05c1fc4e8408cd4f0bde991e4f4fe8b35cddd1064ac8f2db8efd5be1bdd169b7080071edb1a628e7ad90ea2a7e7f7e056abd13361d7dde5fc8822dd6b74855d0901361fef96297d226a81d380663c09914d6358724903dd6917988ee54c3f4926f67961f2e63c863813ded49fdde7ea71a75bfd660e45094f5a822ef6d2c3bbe35cc91e9da685ddb611d8ca3b099b75bfc288e3442bf8b972353206ded708d6fccba4f692d0dfc6bd1fbc5ec5e1838f249ba6c9b140a0a8f801b0da88bfa20f84c971a04e571b6a6febb72a3ccada738ca5c0409cc7bc3d6137c2aabab0072e199954246762497775d4c080ba385688bec83b841a5fa95d7084f477ce45d450daec904ca575b319d88df97077a3412220ece12c258d06959431a76f618ec27b48fe6af40150be2df75c307202b6d13f4172a6e1e86a2f5fb9974fdbeb1670468c47ede1a5c289cb21430a1013c10b0080f9f3af1a2c89d36b13d1102ac5b6613276d03604aee988becca216c8c86cedb8ec6fa8b4bc506b0d11e063f49a7d0ee0f0faa1c662ac3bf2c827139d4f5e00c7220e4b66d5298ed0ff67fb5cd4cce4eeabd5738f2a47f0005ceb417d42a59a928457db66b24aae6552813505f6517d7fc1ee8fcfc847f64ce3b8ad29568f3e3fa2b8ec3bf98eda83a721243e8ac92918efd4e4364980513767727f997a911c7330553e8319efe3b66633aca9fa97342533be19b5a48235df93c1c2edb3019a08bb174597692a9f8466c65834110cab04129676fae1b3dff12f2b8295574e7af8646028bc17ced8ea828be89da0d994c772748bd14a5d5f25cf3eaa4a89d9af81686bb8e55f6f9d08c68f7680e031ec5ca0bddcefa700799054a4b5042951eb2f108635e294dca178938bbef3de63dc6dbf0a4bc3164bcb441cb3884aec7bd4bab2235c79a448a9c315a6928723ac6702fd41fde28f534bf951d3e76299dd5d31510348bd9307b10899ebd18dbd8ccb910be649c2a33982c243272013ece1c225dabf549e15d19651cf12ae80ec11729b08c15593c0d644ec5c715d2dd90089eca1d218102f02f2876a6e5157a2508de81727e70e63dfad0372c4f88e2d8abccfcbfd7059554c7a378f6e49828fc285647a5b669db2d49a8a3c9002230e849851c553333eb71f1417b4d9e5339d8567134c88c78b068f44acaa024521f429985d02f68eea7ba8cee31a460cf01fdab39c12b5112e9978472b0236071ac10352d93ecce36af63d95aa38c40543c7a599ea99048786a1c1d3fea9058d74c41da54f14a1f3b5f276046294f79e9eba32071ba893c91e036f6aecce25b95393232d60f6ac5c2a6b63be5eca62fead18fa10d4028808f6a71bc57dabafb39af9aa44b800b49a06130e4693a3a61cbb90fbc1b2207c85b64a50c45f78e2b0fedeedd995a954272bbd4ea6445357ce32fabdee34c21561425820024f72abeb93fc3ce31140f38d9a5912440084a8caefdfaa0a7dbd5bcd39a04c995eef3d98a011ce01281c6797602c8d5741ac60ce8ced389d8725aa897cbe08577c8934735fc4baf998688b0ce07aea45aae057ac40b8284fcb1b1cac336cb18761a5dc33c0f1b9e26fb3574c7b5839fdaef25a6a18266d08656fb5c7c41dd62ec5d5ba5a5c92429dfd4ac1c19f5579ab558992a32e4d59e517c49f723d13519cd4a03e4128786ab46f876079288da078307b44a59a857f80cd1dd39c032ae4f313037f6628fe0429205a376a9cd24994580969a291fdd61804c34c77b151de5362472bf1083664b673d67cf529fff314d9050a6ad4ab46efd6d6a736b77e0847f8183bba670f57ef40380ad2f44909289b3a4338a81fc8cdeef789b531d3dcd48827a4bbb7d0a2d0e53c12fae20a379d68719ebd84b284690ae972fa57367079b3b20a8ea88d76243e5a3ebab87fb08fc1eadb8b16b051a210bf509a70bf28edb86fd9e5d9cb74f81bc98c76027fe7e816d0ef5fc382771e5ccb1af5ff4ff2c3393ef47e799dbfbfcdb8a3f37ee432eee39ebbedf7e2f955ea86114cc72f99265558cfb39758e5b6e70e5289eee6e135b61aad2e61022c06c624988e13a1d5cc7a67825e679dd758be99013d9340c08f2cd709c32ecd98eec325e2bd0c5da6473d5e97de66afa3262ca5b60169285640e7") getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0xffff7fff) 06:56:25 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x220200c, &(0x7f0000000480)=ANY=[@ANYBLOB="65639dbe00"]) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x190) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = msgget$private(0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000100)=""/166) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) keyctl$join(0x1, &(0x7f0000000400)={'syz', 0x2}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5, 0x3f, 0x0, 0x8001}) statx(r4, &(0x7f00000001c0)='./bus\x00', 0x6000, 0x80, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500)='/dev/btrfs-control\x00', 0x40000, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast2, 0x4e21, 0x4292, 0x4e21, 0xfbc0, 0xa, 0x20, 0xe0, 0x33, 0x0, r6}, {0x85, 0x10001, 0x0, 0x4, 0x1, 0x5, 0x5, 0xfff}, {0x1240, 0x3ff, 0x7, 0x6c2}, 0x7ff, 0x6e6bbb, 0x1, 0x1, 0x3, 0x1}, {{@in=@remote, 0x4d6, 0x6c}, 0xa, @in=@remote, 0x3505, 0x1, 0x3, 0xb, 0x9, 0x5, 0x7}}, 0xe8) name_to_handle_at(r0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x6a, 0x733, "7535b70300bf1c7ae0fb56ea245944fc1d3e123504238d869e2307a4fd84d72300d3452cf158e6a66dcad8b925ad323a27e409fe8c27652674f30920adaa9356c20b76e384bba3582e8503fe1c3308de2b88336715a15240b65d618541199901f0e2"}, &(0x7f00000000c0), 0x1000) [ 1331.591993][ T27] audit: type=1804 audit(1583045785.293:8338): pid=31435 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir893481189/syzkaller.VE3ahk/2213/file0" dev="sda1" ino=16769 res=1 [ 1331.654312][ T27] audit: type=1804 audit(1583045785.343:8339): pid=31445 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir893481189/syzkaller.VE3ahk/2213/file0" dev="sda1" ino=16769 res=1 06:56:25 executing program 3: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20200, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r3 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, r3}) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x801, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) open(0x0, 0x141042, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x18) sendto$inet6(r4, 0x0, 0x0, 0x24008040, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r4, 0x0, r1, 0x0, 0x1000000000000003, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000), &(0x7f0000000100)=0x10) 06:56:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x441}], 0x1}, 0x0) 06:56:25 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9d010000, 0xd, &(0x7f0000000000)=""/208) 06:56:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x40, 0x8, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x1, 0x0, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x5, 0x0, 0x9, 0x9, 0x7fffffff, 0xffffffff, 0x100, 0x1f, 0x3, 0x4, 0x0, 0xfffffff9, 0x5e, 0x20, 0x4, 0x0, 0x400, 0x8]}) 06:56:25 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000001a00)={r3, 0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000180)={r3, 0x8}) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000240)) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000140)=0x1) tkill(r0, 0x1000000000016) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x141400, 0x0) 06:56:25 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nouser_xattr='nouser_xattr'}]}) 06:56:26 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9e000000, 0xd, &(0x7f0000000000)=""/208) 06:56:26 executing program 5: gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x20802) r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x5, 0x40083) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/87, 0x57}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) 06:56:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x451}], 0x1}, 0x0) 06:56:26 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_notify(0xffffffffffffffff, 0x0) r2 = getpid() syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00') sched_setscheduler(r2, 0x2, &(0x7f0000000380)) r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/connector\x00') ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000080)={0x5, 0x1}) r4 = semget(0x2, 0x2, 0x20) bind$bt_hci(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x0, 0x1}, 0x6) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000100)=""/232) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x3, 0x9, 0x0, 0x81}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000400)) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x76, &(0x7f00000000c0)={r9}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r9, 0x80, 0x2, 0x7fff, 0x1, 0x9}, &(0x7f0000000480)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000004c0)={r10, 0x9, 0x2, 0x3f, 0x6, 0x64}, 0x14) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000540)={0x7, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:56:26 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x23) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000140)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), 0x4) tkill(r0, 0x1000000000016) [ 1332.558487][T31486] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:26 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x100, 0x0, 0x4000000, {0x0, 0x0, 0x0, r3, 0x1790}}, 0x20}}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)=""/188, &(0x7f0000000080)=0xbc) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r3, @ANYBLOB="08000200e0000000e196b00180559fceffb07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000000)) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0xb20, 0x8f, 0xff, 0x1, 0x1, 0xfffffff8, 0x7, 0x20, 0x25, 0x2, 0xffffff16, 0x0, 0x1000, 0x3, 0x8, 0x800, 0x8, 0x6, 0x4, 0x2000000, 0x7ff, 0xfffffffe, 0x80000001, 0xc1, 0x400, 0x6, 0x0, 0x3a, 0x9, 0x3342, 0xffffffff, 0x80000001]}) [ 1332.591596][ T27] audit: type=1804 audit(1583045786.293:8340): pid=31487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir893481189/syzkaller.VE3ahk/2214/file0" dev="sda1" ino=16547 res=1 [ 1332.730531][ T27] audit: type=1804 audit(1583045786.293:8341): pid=31500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir893481189/syzkaller.VE3ahk/2214/file0" dev="sda1" ino=16547 res=1 [ 1332.783303][T31486] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:26 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 06:56:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x461}], 0x1}, 0x0) 06:56:26 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9e010000, 0xd, &(0x7f0000000000)=""/208) 06:56:26 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x800, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r5, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f00000008c0)=""/102400, 0x19000}, {&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000840)=""/79, 0x4f}], 0x5) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:26 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x0, 0xe918, 0xffffffff}}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x6a9c3, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000100)={0x1}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x2}, 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x101880, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) 06:56:26 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x20e01, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x76, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r4, 0xfffffbff}, 0x8) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 06:56:27 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9f000000, 0xd, &(0x7f0000000000)=""/208) [ 1333.266621][T31534] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:27 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) sendmsg$rds(r0, &(0x7f0000002940)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1, &(0x7f0000002740)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x3ff}, &(0x7f00000001c0)=0x8000, &(0x7f00000002c0)=0xffffffffffffffc0, 0x100, 0x100, 0x400, 0x800000, 0x60, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x10000000, 0x9}, {&(0x7f0000000300)=""/131, 0x83}, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000000400)=""/184, 0xb8}], 0x2, 0x0, 0x80}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0xffffffe0}, &(0x7f0000000500)=0x1, &(0x7f0000000540)=0x41e, 0x3f, 0xb7e0, 0x800, 0x0, 0xa, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000580)=""/4096, 0x1000}, &(0x7f0000001580)}}, @rdma_args={0x48, 0x114, 0x1, {{0x8000, 0x81}, {&(0x7f00000015c0)=""/148, 0x94}, &(0x7f0000002680)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, 0x42, 0xffff}}, @fadd={0x58, 0x114, 0x6, {{0xfffffffd, 0x67}, &(0x7f00000026c0)=0x3, &(0x7f0000002700)=0x1134, 0x9, 0x3fa, 0x6e, 0xdaaf8f0, 0x4, 0x8000}}], 0x1c8, 0x4000}, 0x40) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000200)) 06:56:27 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x600, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0xc0000000, 0x100, "3a2c03d3af65ca499c31516d0ed25ce07f1a7e3c78fbb9ab4ea6270e1e98ebb3", 0x7, 0x100, 0x0, 0xffffffffffffffc1, 0xfffffffc, 0x2e1, 0xbb, 0x0, [0x0, 0x2000200, 0x20, 0x6]}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) [ 1333.354638][T31543] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" 06:56:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x471}], 0x1}, 0x0) 06:56:27 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1333.489658][T31534] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x481}], 0x1}, 0x0) 06:56:27 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x9f010000, 0xd, &(0x7f0000000000)=""/208) 06:56:27 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:56:27 executing program 4: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0xecb}, 0xf) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) [ 1333.699156][T31573] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 1333.893924][T31591] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:29 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x10002) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x9, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x8, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x4, 0x5, 0x6, 0x3}, &(0x7f0000000240)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r3}, 0xc) fcntl$setstatus(r2, 0x4, 0x6000) exit(0x1) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r6 = openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) mmap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x1000002, 0x1010, r6, 0xffff9000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000ec3f14000100181e000000000000021b0000", @ANYRES32=r10, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r14, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000400)={0xf9d, 0x1, 0x3, 0x0, 0x0, [{{r7}, 0x6}, {{r11}, 0x3656}, {{r4}, 0x8}]}) tkill(r0, 0x1000000000016) 06:56:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x491}], 0x1}, 0x0) 06:56:29 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e23, 0x8, @ipv4={[], [], @remote}, 0x8001}, {0xa, 0x4e21, 0x3, @rand_addr="8bf7d00f6325dea49f164745e3b5a7e8", 0x3}, 0x7, [0x7, 0x9, 0xec06, 0x6, 0x3, 0x60b5, 0x6, 0x40]}, 0x5c) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) 06:56:29 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa0000000, 0xd, &(0x7f0000000000)=""/208) 06:56:29 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 06:56:29 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="bb"]) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r4, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) ioctl$void(r0, 0xc0045878) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x1) 06:56:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa0010000, 0xd, &(0x7f0000000000)=""/208) [ 1336.348939][T31609] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "" [ 1336.358850][T31611] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "»" 06:56:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x4a1}], 0x1}, 0x0) 06:56:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa1000000, 0xd, &(0x7f0000000000)=""/208) [ 1336.775370][T31611] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "»" 06:56:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x4b1}], 0x1}, 0x0) 06:56:30 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa1010000, 0xd, &(0x7f0000000000)=""/208) [ 1337.068879][T31643] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:31 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x7fff, {0x2, 0x8, 0x174, 0x7fff, 0x9, 0xffffffff}}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x4c1}], 0x1}, 0x0) 06:56:31 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@resize={'resize', 0x3d, 0x8}}, {@barrier_none='barrier=none'}, {@usrquota='usrquota'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}]}) 06:56:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa2000000, 0xd, &(0x7f0000000000)=""/208) 06:56:31 executing program 3 (fault-call:6 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1337.523350][T31667] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1337.556185][T31677] FAULT_INJECTION: forcing a failure. [ 1337.556185][T31677] name failslab, interval 1, probability 0, space 0, times 0 06:56:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa2010000, 0xd, &(0x7f0000000000)=""/208) [ 1337.578382][T31677] CPU: 0 PID: 31677 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1337.588304][T31677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.598375][T31677] Call Trace: [ 1337.601689][T31677] dump_stack+0x197/0x210 [ 1337.606049][T31677] should_fail.cold+0x5/0xf [ 1337.610583][T31677] ? setup_fault_attr+0x1f0/0x1f0 [ 1337.615667][T31677] ? ___might_sleep+0x163/0x2c0 [ 1337.620539][T31677] __should_failslab+0xb7/0x100 [ 1337.625414][T31677] should_failslab+0x9/0x14 [ 1337.629936][T31677] kmem_cache_alloc_trace+0x2d3/0x790 [ 1337.635325][T31677] ? xas_find_conflict+0x890/0x890 [ 1337.640493][T31677] ? rcu_read_lock_held+0x9c/0xb0 [ 1337.645551][T31677] cma_alloc_port+0x56/0x1b0 [ 1337.650159][T31677] rdma_bind_addr+0x1659/0x1f80 [ 1337.655034][T31677] ? cma_ndev_work_handler+0x190/0x190 [ 1337.660496][T31677] ? lock_downgrade+0x920/0x920 [ 1337.665357][T31677] ? rwlock_bug.part.0+0x90/0x90 [ 1337.670325][T31677] rdma_listen+0xa3/0x970 06:56:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa3000000, 0xd, &(0x7f0000000000)=""/208) [ 1337.674665][T31677] ? _raw_spin_unlock+0x28/0x40 [ 1337.679573][T31677] ucma_listen+0x14d/0x1c0 [ 1337.684006][T31677] ? ucma_notify+0x190/0x190 [ 1337.688615][T31677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1337.694868][T31677] ? _copy_from_user+0x12c/0x1a0 [ 1337.699834][T31677] ucma_write+0x2d7/0x3c0 [ 1337.704182][T31677] ? ucma_notify+0x190/0x190 [ 1337.708795][T31677] ? ucma_open+0x290/0x290 [ 1337.713223][T31677] ? apparmor_file_permission+0x27/0x30 [ 1337.718779][T31677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1337.725031][T31677] ? security_file_permission+0x8f/0x380 [ 1337.730672][T31677] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1337.735982][T31677] __vfs_write+0x8a/0x110 [ 1337.740334][T31677] ? ucma_open+0x290/0x290 [ 1337.744803][T31677] vfs_write+0x268/0x5d0 [ 1337.749068][T31677] ksys_write+0x220/0x290 [ 1337.753413][T31677] ? __ia32_sys_read+0xb0/0xb0 [ 1337.758273][T31677] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1337.763737][T31677] ? do_syscall_64+0x26/0x790 [ 1337.768420][T31677] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1337.774490][T31677] ? do_syscall_64+0x26/0x790 06:56:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa3010000, 0xd, &(0x7f0000000000)=""/208) [ 1337.779182][T31677] __x64_sys_write+0x73/0xb0 [ 1337.783787][T31677] do_syscall_64+0xfa/0x790 [ 1337.788303][T31677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1337.794199][T31677] RIP: 0033:0x45c479 [ 1337.798102][T31677] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1337.817709][T31677] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1337.826122][T31677] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1337.834095][T31677] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1337.842072][T31677] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1337.850052][T31677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1337.858031][T31677] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000000 06:56:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa4000000, 0xd, &(0x7f0000000000)=""/208) 06:56:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x4d1}], 0x1}, 0x0) [ 1338.022165][T31667] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:31 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa4010000, 0xd, &(0x7f0000000000)=""/208) 06:56:31 executing program 3 (fault-call:6 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1338.353383][T31709] FAULT_INJECTION: forcing a failure. [ 1338.353383][T31709] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.366689][T31709] CPU: 1 PID: 31709 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1338.376584][T31709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.386650][T31709] Call Trace: [ 1338.389958][T31709] dump_stack+0x197/0x210 [ 1338.394314][T31709] should_fail.cold+0x5/0xf [ 1338.398839][T31709] ? setup_fault_attr+0x1f0/0x1f0 [ 1338.403877][T31709] ? stack_trace_save+0x8f/0xc0 [ 1338.408733][T31709] ? stack_trace_consume_entry+0x170/0x170 [ 1338.414587][T31709] __should_failslab+0xb7/0x100 [ 1338.419473][T31709] should_failslab+0x9/0x14 [ 1338.424073][T31709] kmem_cache_alloc+0x47/0x710 [ 1338.428841][T31709] ? save_stack+0x5c/0x90 [ 1338.433171][T31709] ? save_stack+0x23/0x90 [ 1338.437504][T31709] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1338.443313][T31709] ? kasan_kmalloc+0x9/0x10 [ 1338.447819][T31709] ? kmem_cache_alloc_trace+0x158/0x790 [ 1338.453379][T31709] xas_alloc+0x346/0x460 [ 1338.457634][T31709] xas_create+0x2cd/0x1060 [ 1338.462074][T31709] xas_store+0x9a/0x1a00 [ 1338.466321][T31709] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1338.472561][T31709] ? xas_start+0x166/0x560 [ 1338.476988][T31709] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1338.483233][T31709] ? xas_load+0x67/0x150 [ 1338.487491][T31709] __xa_insert+0x17b/0x2a0 [ 1338.491924][T31709] ? __xa_cmpxchg+0x2f0/0x2f0 [ 1338.496631][T31709] cma_alloc_port+0xb9/0x1b0 [ 1338.501239][T31709] rdma_bind_addr+0x1659/0x1f80 [ 1338.506113][T31709] ? cma_ndev_work_handler+0x190/0x190 [ 1338.511575][T31709] ? lock_downgrade+0x920/0x920 [ 1338.516426][T31709] ? rwlock_bug.part.0+0x90/0x90 [ 1338.521382][T31709] rdma_listen+0xa3/0x970 [ 1338.525712][T31709] ? _raw_spin_unlock+0x28/0x40 [ 1338.530574][T31709] ucma_listen+0x14d/0x1c0 [ 1338.534999][T31709] ? ucma_notify+0x190/0x190 [ 1338.539773][T31709] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1338.546018][T31709] ? _copy_from_user+0x12c/0x1a0 [ 1338.550967][T31709] ucma_write+0x2d7/0x3c0 [ 1338.555300][T31709] ? ucma_notify+0x190/0x190 [ 1338.559894][T31709] ? ucma_open+0x290/0x290 [ 1338.564319][T31709] ? apparmor_file_permission+0x27/0x30 [ 1338.569869][T31709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1338.576114][T31709] ? security_file_permission+0x8f/0x380 [ 1338.581745][T31709] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1338.587046][T31709] __vfs_write+0x8a/0x110 [ 1338.591388][T31709] ? ucma_open+0x290/0x290 [ 1338.595834][T31709] vfs_write+0x268/0x5d0 [ 1338.600090][T31709] ksys_write+0x220/0x290 [ 1338.604427][T31709] ? __ia32_sys_read+0xb0/0xb0 [ 1338.609197][T31709] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1338.614658][T31709] ? do_syscall_64+0x26/0x790 [ 1338.619336][T31709] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1338.625398][T31709] ? do_syscall_64+0x26/0x790 [ 1338.630101][T31709] __x64_sys_write+0x73/0xb0 [ 1338.634699][T31709] do_syscall_64+0xfa/0x790 [ 1338.639213][T31709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1338.645100][T31709] RIP: 0033:0x45c479 [ 1338.648994][T31709] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1338.668598][T31709] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1338.677013][T31709] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1338.684979][T31709] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1338.692955][T31709] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1338.701043][T31709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1338.709014][T31709] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000001 [ 1338.795565][T31709] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:34 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000140)={0x9}, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x800) 06:56:34 executing program 3 (fault-call:6 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:34 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/48) 06:56:34 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa5000000, 0xd, &(0x7f0000000000)=""/208) 06:56:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x4e1}], 0x1}, 0x0) [ 1340.646189][T31722] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1340.668400][T31721] FAULT_INJECTION: forcing a failure. [ 1340.668400][T31721] name failslab, interval 1, probability 0, space 0, times 0 [ 1340.681101][T31721] CPU: 1 PID: 31721 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1340.690990][T31721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.701049][T31721] Call Trace: [ 1340.704358][T31721] dump_stack+0x197/0x210 [ 1340.708714][T31721] should_fail.cold+0x5/0xf [ 1340.713257][T31721] ? setup_fault_attr+0x1f0/0x1f0 [ 1340.718304][T31721] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1340.723866][T31721] __should_failslab+0xb7/0x100 [ 1340.728728][T31721] should_failslab+0x9/0x14 [ 1340.733235][T31721] kmem_cache_alloc+0x47/0x710 [ 1340.738058][T31721] xas_alloc+0x346/0x460 [ 1340.742317][T31721] xas_create+0x2cd/0x1060 [ 1340.746763][T31721] xas_store+0x9a/0x1a00 [ 1340.751020][T31721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.757268][T31721] ? xas_start+0x166/0x560 [ 1340.761701][T31721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.767955][T31721] ? xas_load+0x67/0x150 [ 1340.772212][T31721] __xa_insert+0x17b/0x2a0 [ 1340.776646][T31721] ? __xa_cmpxchg+0x2f0/0x2f0 [ 1340.781360][T31721] cma_alloc_port+0xb9/0x1b0 [ 1340.785970][T31721] rdma_bind_addr+0x1659/0x1f80 [ 1340.790849][T31721] ? cma_ndev_work_handler+0x190/0x190 [ 1340.796314][T31721] ? lock_downgrade+0x920/0x920 [ 1340.801174][T31721] ? rwlock_bug.part.0+0x90/0x90 [ 1340.806133][T31721] rdma_listen+0xa3/0x970 [ 1340.810474][T31721] ? _raw_spin_unlock+0x28/0x40 [ 1340.815346][T31721] ucma_listen+0x14d/0x1c0 [ 1340.819779][T31721] ? ucma_notify+0x190/0x190 [ 1340.824386][T31721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1340.830638][T31721] ? _copy_from_user+0x12c/0x1a0 [ 1340.835615][T31721] ucma_write+0x2d7/0x3c0 [ 1340.839964][T31721] ? ucma_notify+0x190/0x190 [ 1340.844561][T31721] ? ucma_open+0x290/0x290 [ 1340.848989][T31721] ? apparmor_file_permission+0x27/0x30 [ 1340.854546][T31721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1340.860796][T31721] ? security_file_permission+0x8f/0x380 [ 1340.866434][T31721] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1340.871730][T31721] __vfs_write+0x8a/0x110 [ 1340.876064][T31721] ? ucma_open+0x290/0x290 [ 1340.880510][T31721] vfs_write+0x268/0x5d0 [ 1340.884774][T31721] ksys_write+0x220/0x290 [ 1340.889116][T31721] ? __ia32_sys_read+0xb0/0xb0 [ 1340.893893][T31721] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1340.899366][T31721] ? do_syscall_64+0x26/0x790 [ 1340.904056][T31721] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1340.910131][T31721] ? do_syscall_64+0x26/0x790 [ 1340.914827][T31721] __x64_sys_write+0x73/0xb0 [ 1340.919432][T31721] do_syscall_64+0xfa/0x790 [ 1340.923957][T31721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1340.929858][T31721] RIP: 0033:0x45c479 [ 1340.933936][T31721] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1340.953552][T31721] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1340.961969][T31721] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1340.969943][T31721] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1340.977942][T31721] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1340.985916][T31721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 06:56:34 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa5010000, 0xd, &(0x7f0000000000)=""/208) 06:56:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x4f1}], 0x1}, 0x0) 06:56:34 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa6000000, 0xd, &(0x7f0000000000)=""/208) 06:56:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x501}], 0x1}, 0x0) [ 1340.993888][T31721] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000002 06:56:34 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa6010000, 0xd, &(0x7f0000000000)=""/208) [ 1341.136832][T31721] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x511}], 0x1}, 0x0) 06:56:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa7000000, 0xd, &(0x7f0000000000)=""/208) [ 1341.255848][T31722] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:35 executing program 5: r0 = gettid() timer_create(0x2, &(0x7f0000044000)={0x0, 0x12, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x92280) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/75, 0x4b}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x50, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001580)={&(0x7f00000002c0)={0x12bc, 0xc, 0x1, 0x0, 0x70bd2d, 0x25dfdbfc, {0x1, 0x0, 0x8}, [@generic="35ebe75a6381204b313707bdf066ebdb8334258a6207", @generic="26964d4d3c87d165782eba94ac9ffa6de0366f6920f6608fe1f81edb6b4baab2a381eb0b876fec9f8aa437064189a3072745e6e8d8858da123fd6cb169fd988905f1493e4ffc7c3dc0ab51e0e01466059b713e107c3a3a9e86d4fe049efbf4f7086c7139b4cf087c25e2c6103b52272c484c362435ea12bf61b0bad66e49d7e67a6c936d89f444d0b7fd3d96687da5ca7ca04fdde84a6c82ff0a016f4f8b77db6eef97d93124b5734c429b2329a228d120cda8c7f7ea81aaa883f4a9ded721666c3d631ad19aa012329ed1da9ee33ae9c7f36996108280245aabd30137", @nested={0x11ab, 0x6d, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r2}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x2}, @generic="cbc06e7d901025ff54f8a2f5c211974898603f11e8d7b30211757ffbbd02738a063a470bda15bef526ecaac5cfd09ddded503583458908356aa1564f9c48fec83dc76c0d77124ddc0458f1db1030daea51b4f4ddbcd5d88a09776e8d47275e5a0146ee5dcf749006650dba2f6ff7a982c3e3e509ca6b", @generic="90b16a5741d32e736e5e9f8871df9c5b665c4c14b0806053d0d19f72a5ab7a6f9d3c29774ecdc34582737e0b1fc0cacab05454eac7c8", @generic="16df7bf7e5912b42de2af219ad554f41624f6afee298ed1b7c16aa5ee3e3448b1aec5b5566a80acb125c9604f800cc343bb96331b8200128a726591217f1dc10324803bba6e3272b", @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x9}, @generic="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", @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@multicast1}, @generic="f1a7d7b33441569509d12b93efbe7f3d38ae9772beab7a02eb5a7a24aefe077d665602b7d8e44e749836532ec7514c7b27dcfffe1e4814d5e894a37a449fd01c3749db26e4914a6293dee4b44b78f46a4f0999ebc8dc5c6b2daba0d98ff02bbe9d8d7268d2005051f271b9a8a52fe2cb6e382a53ce656e7aac187484b57826dea83bc3c0d02e5e427c8a66"]}, @typed={0x8, 0x7e, 0x0, 0x0, @pid=r0}]}, 0x12bc}, 0x1, 0x0, 0x0, 0x4004}, 0x5) 06:56:35 executing program 3 (fault-call:6 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1341.456912][T31768] FAULT_INJECTION: forcing a failure. [ 1341.456912][T31768] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.469778][T31768] CPU: 1 PID: 31768 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1341.479678][T31768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.489743][T31768] Call Trace: [ 1341.493151][T31768] dump_stack+0x197/0x210 [ 1341.497509][T31768] should_fail.cold+0x5/0xf [ 1341.502044][T31768] ? setup_fault_attr+0x1f0/0x1f0 [ 1341.507095][T31768] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1341.512656][T31768] __should_failslab+0xb7/0x100 [ 1341.517513][T31768] should_failslab+0x9/0x14 [ 1341.522027][T31768] kmem_cache_alloc+0x47/0x710 [ 1341.526815][T31768] xas_alloc+0x346/0x460 [ 1341.531072][T31768] xas_create+0x2cd/0x1060 [ 1341.535519][T31768] xas_store+0x9a/0x1a00 [ 1341.539772][T31768] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.546023][T31768] ? xas_start+0x166/0x560 [ 1341.550459][T31768] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.556709][T31768] ? xas_load+0x67/0x150 [ 1341.560973][T31768] __xa_insert+0x17b/0x2a0 [ 1341.565406][T31768] ? __xa_cmpxchg+0x2f0/0x2f0 [ 1341.570122][T31768] cma_alloc_port+0xb9/0x1b0 [ 1341.574728][T31768] rdma_bind_addr+0x1659/0x1f80 [ 1341.579609][T31768] ? cma_ndev_work_handler+0x190/0x190 [ 1341.585076][T31768] ? lock_downgrade+0x920/0x920 [ 1341.589944][T31768] ? rwlock_bug.part.0+0x90/0x90 [ 1341.594905][T31768] rdma_listen+0xa3/0x970 [ 1341.599256][T31768] ? _raw_spin_unlock+0x28/0x40 [ 1341.604133][T31768] ucma_listen+0x14d/0x1c0 [ 1341.608587][T31768] ? ucma_notify+0x190/0x190 [ 1341.613195][T31768] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1341.619451][T31768] ? _copy_from_user+0x12c/0x1a0 [ 1341.624413][T31768] ucma_write+0x2d7/0x3c0 [ 1341.628755][T31768] ? ucma_notify+0x190/0x190 [ 1341.633357][T31768] ? ucma_open+0x290/0x290 [ 1341.637782][T31768] ? apparmor_file_permission+0x27/0x30 [ 1341.643336][T31768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1341.649581][T31768] ? security_file_permission+0x8f/0x380 [ 1341.655218][T31768] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1341.660514][T31768] __vfs_write+0x8a/0x110 [ 1341.664854][T31768] ? ucma_open+0x290/0x290 [ 1341.669285][T31768] vfs_write+0x268/0x5d0 [ 1341.673555][T31768] ksys_write+0x220/0x290 [ 1341.677895][T31768] ? __ia32_sys_read+0xb0/0xb0 [ 1341.682680][T31768] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1341.688149][T31768] ? do_syscall_64+0x26/0x790 [ 1341.692835][T31768] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1341.698945][T31768] ? do_syscall_64+0x26/0x790 [ 1341.703642][T31768] __x64_sys_write+0x73/0xb0 [ 1341.708249][T31768] do_syscall_64+0xfa/0x790 [ 1341.712775][T31768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1341.718671][T31768] RIP: 0033:0x45c479 [ 1341.722576][T31768] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1341.742181][T31768] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1341.750605][T31768] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 06:56:35 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000040)='./bus\x00', 0xf6, 0xabd, &(0x7f0000000080), 0x2104020, &(0x7f00000002c0)={[], [{@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, 'usrjquota=syz'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@appraise='appraise'}, {@fowner_lt={'fowner<', r0}}, {@subj_type={'subj_type', 0x3d, 'hash=r5'}}]}) 06:56:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa7010000, 0xd, &(0x7f0000000000)=""/208) [ 1341.758580][T31768] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1341.766560][T31768] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1341.774540][T31768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1341.782515][T31768] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000003 06:56:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa8000000, 0xd, &(0x7f0000000000)=""/208) 06:56:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa8010000, 0xd, &(0x7f0000000000)=""/208) 06:56:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x521}], 0x1}, 0x0) 06:56:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa9000000, 0xd, &(0x7f0000000000)=""/208) [ 1341.920276][T31780] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1341.975633][T31768] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 06:56:35 executing program 3 (fault-call:6 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1342.094697][T31780] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1342.170511][T31799] FAULT_INJECTION: forcing a failure. [ 1342.170511][T31799] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.184962][T31799] CPU: 1 PID: 31799 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1342.194867][T31799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.204951][T31799] Call Trace: [ 1342.208260][T31799] dump_stack+0x197/0x210 [ 1342.212623][T31799] should_fail.cold+0x5/0xf [ 1342.217153][T31799] ? setup_fault_attr+0x1f0/0x1f0 [ 1342.222217][T31799] ? ___might_sleep+0x163/0x2c0 [ 1342.227090][T31799] __should_failslab+0xb7/0x100 [ 1342.231953][T31799] should_failslab+0x9/0x14 [ 1342.236514][T31799] kmem_cache_alloc_trace+0x2d3/0x790 [ 1342.241898][T31799] ? lock_downgrade+0x920/0x920 [ 1342.246764][T31799] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1342.252584][T31799] ? cma_comp_exch+0xac/0xd0 [ 1342.257185][T31799] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1342.263010][T31799] ? cma_alloc_port+0x1b0/0x1b0 [ 1342.267877][T31799] __rdma_create_id+0x5e/0x870 [ 1342.272668][T31799] cma_listen_on_dev+0x1cd/0x730 [ 1342.277636][T31799] rdma_listen+0x772/0x970 [ 1342.282066][T31799] ? _raw_spin_unlock+0x28/0x40 [ 1342.286937][T31799] ucma_listen+0x14d/0x1c0 [ 1342.291378][T31799] ? ucma_notify+0x190/0x190 [ 1342.295987][T31799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1342.302243][T31799] ? _copy_from_user+0x12c/0x1a0 [ 1342.307199][T31799] ucma_write+0x2d7/0x3c0 [ 1342.311548][T31799] ? ucma_notify+0x190/0x190 [ 1342.316153][T31799] ? ucma_open+0x290/0x290 06:56:35 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xa9010000, 0xd, &(0x7f0000000000)=""/208) 06:56:36 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x745200, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd9a}]}, 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="20002abd7000fedbdf25010000000800020000000000180004000300000003000000040000000500000003000000050006000100000014002619082a0000000000000000ffffe000000205000500040000000500050003000000050005000400000014000100fe880000001100000000000000000101"], 0x7c}, 0x1, 0x0, 0x0, 0x400d4}, 0x4004) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x76, &(0x7f00000000c0)={r6}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0x8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f00000006c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000380)="f321629c663bb9e0ebdf563029e491d0067931572d0d3d7df4708f92e48d87b55ef4de9ea0edbfbd3a93157a5174fc1643115fded13320dcfcbacc17343b3011f95380afb0dacdcd2e432b55dcd6662e88067e9cd4eab3681b33d43ef788ecff74572844e80bf803b7391da7fe39b22b3332c92b223386d421100fbe49ad07a99ba0970dc710b57c4bef50ea2127d7973f8d", 0x92, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000480)={r9, 0x37, &(0x7f0000000440)=""/55}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r11, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$RTC_SET_TIME(r11, 0x4024700a, &(0x7f00000002c0)={0x33, 0x5, 0x12, 0xe, 0xa, 0x7, 0x2, 0x10d}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000180)={r7, 0x8000}, &(0x7f00000001c0)=0x8) 06:56:36 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x3, 0xf4, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000100)=""/244}, &(0x7f0000000080)=0x78) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x0, 0xffffffff, 0x8, 0x3f, 0x7, 0x1, 0xffff8001, 0x1, 0x7, 0x4, 0x2, 0x1, 0xa9b5, 0x6, 0x0, 0x101, 0x1, 0x40, 0x7ff, 0x7b3c3343, 0xfffff000, 0x9, 0xfffffffe, 0x3f, 0x80000001, 0x5, 0x0, 0xffff, 0x5, 0xfffffff8, 0xa1, 0x4]}) [ 1342.320582][T31799] ? apparmor_file_permission+0x27/0x30 [ 1342.326174][T31799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1342.332428][T31799] ? security_file_permission+0x8f/0x380 [ 1342.338099][T31799] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1342.343458][T31799] __vfs_write+0x8a/0x110 [ 1342.347802][T31799] ? ucma_open+0x290/0x290 [ 1342.352235][T31799] vfs_write+0x268/0x5d0 [ 1342.356503][T31799] ksys_write+0x220/0x290 [ 1342.360853][T31799] ? __ia32_sys_read+0xb0/0xb0 [ 1342.365680][T31799] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1342.371175][T31799] ? do_syscall_64+0x26/0x790 [ 1342.375858][T31799] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1342.381909][T31799] ? do_syscall_64+0x26/0x790 [ 1342.386583][T31799] __x64_sys_write+0x73/0xb0 [ 1342.391165][T31799] do_syscall_64+0xfa/0x790 [ 1342.395661][T31799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1342.401565][T31799] RIP: 0033:0x45c479 [ 1342.405459][T31799] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1342.425046][T31799] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1342.433443][T31799] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1342.441399][T31799] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1342.449358][T31799] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1342.457334][T31799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1342.465330][T31799] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000004 06:56:38 executing program 3 (fault-call:6 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x531}], 0x1}, 0x0) 06:56:38 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@acl='acl'}], [{@context={'context', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'acl'}}, {@fowner_lt={'fowner<', r1}}]}) 06:56:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xaa000000, 0xd, &(0x7f0000000000)=""/208) 06:56:38 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x111001, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x29, 0x3, 0x2) r7 = syz_open_dev$sndmidi(&(0x7f0000000440)='/dev/snd/midiC#D#\x00', 0x1, 0x100) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x46c03, 0x0) r9 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r9, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_mtu(r10, 0x0, 0xa, 0x0, &(0x7f00000000c0)) ioctl$LOOP_SET_CAPACITY(r10, 0x4c07) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003c00)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r14, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r14, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000003840)={0x20, 0xb, 0x4, 0x80000000, 0x6, {}, {0x2, 0x1, 0x7f, 0x4, 0x10, 0x0, "3845c568"}, 0xffff, 0x0, @planes=&(0x7f0000003800)={0x200, 0x2, @fd, 0x2}, 0x2, 0x0, r11}) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = dup2(0xffffffffffffffff, r17) mq_notify(r18, 0x0) io_submit(r1, 0xa, &(0x7f0000003b80)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x4, r4, &(0x7f0000000140)="03f390070d1201502849fded252fc3244d242166390c1e648193dde2d876b9390bf8fce81a720a8ecd9cfa11747f62ed2446d4562b84d0fc11acdf94c9aa2d7166df890d091517b6e5", 0x49, 0xfe, 0x0, 0x3, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x7, r5, &(0x7f0000000580)="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", 0x1000, 0x4, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x20, r6, &(0x7f0000000300)="849c4bcfd3d3f083e173413d5a668cf0f6be25df7d522af23a0a6a6f356ddfd6c7e8cd9dbf3b44e43e0d16ba2e16acc9c64cf0d6162deced82de1f6c532ec7f92bc2f54d4d211bb3d7925b9cd7f691072c1576c677fd21c38ce251db6ca190859aa275ab085e5cea9bc7893178f669afa30e1c0faf1de8ab9b8315a1a38a47e3c028fdc8e98ff18b4e25f0bbf448074d09bcc790177d6c3a1317ff387383f624cf545a8f0d8fa6c4374f4dd9136b6847c695dca8c1bb0e8e8174818b4869b6c381c5a738c0e338", 0xc7, 0xa7, 0x0, 0x1, r0}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x8, 0x200, r7, &(0x7f0000000480)="cade07304128637f93ba940cd9ce997fb66f2822cc92c068e98dcffe052fb360586130814a2876c340571db8af4a89b6c7ee65ea", 0x34, 0xf2, 0x0, 0x3, r8}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f00000015c0)="388677724422ad10f5442b255afd3e5131fa1397c269d649f78a10c9ddaa9cbd6c7fda70b2609ca69f7b41119c3f04e75c10cfd668713f3434f46bfc79c251135309b239db933dcfaf2594ccffcfc7b3680f02536ae20d321038d37aaf31efb87047c2762f1ddfc6f0fd4fe51e57c0e6a03ab006b9edae02", 0x78, 0x5f}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x3, 0xff81, r9, &(0x7f0000001680)="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", 0x1000, 0x6, 0x0, 0x2}, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x6, 0xffff, r0, &(0x7f00000026c0)="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", 0x1000, 0x7, 0x0, 0x2, r10}, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x3, 0x1000, r2, &(0x7f0000003700)="79b1f1ce22be750694c1f1acd91e5cfa8b0160a477a4c5e100eb2422ba9765a1dadaf6f0a89480ac2a1d366d1c24e4adca4545521e5952c355170b0feec8d59ba4c7e4d87a22d2376dac64a389aab26b4aaa3735e66367e5ec4e36c428402823170eee00a16791b51cd45f53ad827c2f5bb5dbabff38a9ebbcdb0322186eaf92086278d40359d784af6e191d471dd3d23a25988bf973fd69e21dd2308ce5ada43904cc543f9c03f968bd56773c2168dbcf27740b38bd87ea68bc0008e04895d740effb4aae5a054ba1319b0cac1c", 0xce, 0xb, 0x0, 0x3, r15}, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x8, 0x0, r16, &(0x7f0000003900)="12d034079ef83c80baa71d13511f6e3090a5af33b250b6a9331c4cae2e54bd393c80394c9dfe1845f3daf7568e88d528e34ac0d12577d3909667d91e6f3f09da0eb9c3427a906106a46cd18e6b203ffd8b73ed1d29bb1c668c2d647b1ce76fa1f554a8502e13f91604be19336b11a75dc3c9351951a68fc571f476f22fac43622d192379959e1fd1e4747afbf17a7e6b51bdad7ffa83bbf36b44f59c3880aa38686c4d52ef28e3ae36edca56d8893a643f4808b9176dbf192cb1e9cadf4f1a8b0be0c5405ee4f9ab81c264b906f4d10211111f3d7f5cdcc92b52a7ae9faed67ff639129404c0f56e6699bc9c1ff49fea7510c61f531a83cf", 0xf8, 0x40, 0x0, 0x3}, &(0x7f0000003b40)={0x0, 0x0, 0x0, 0x7, 0x4b, r0, &(0x7f0000003a40)="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", 0xfd, 0x0, 0x0, 0x0, r18}]) r19 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r19, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x76, &(0x7f00000000c0)={r20}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r20, 0x3, 0x100}, &(0x7f0000000080)=0x8) r21 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r21, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @bt={0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}}) 06:56:38 executing program 5: r0 = gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000004c0)={0x0, 0x0}) process_vm_writev(r1, &(0x7f0000000680)=[{&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000580)=""/131, 0x83}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/155, 0x9b}, {&(0x7f0000000780)=""/197, 0xc5}, {&(0x7f0000000880)=""/27, 0x1b}, {&(0x7f00000008c0)=""/154, 0x9a}], 0x4, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280), 0x1033b) fdatasync(r5) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x0, r5}) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x3, 0x400000) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000140)={0x0, 0x0, [0x8001, 0x8, 0x7, 0x1]}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r3, r4) fdatasync(r8) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000440)='security.capability\x00', &(0x7f0000000480)=@v1={0x1000000, [{0x20, 0x80000000}]}, 0xc, 0x3) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r11, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) readv(r6, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000000)) tkill(r0, 0x1000000000016) [ 1344.567441][T31833] FAULT_INJECTION: forcing a failure. [ 1344.567441][T31833] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.571415][T31831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1344.580544][T31833] CPU: 0 PID: 31833 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1344.580573][T31833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.580587][T31833] Call Trace: [ 1344.612993][T31833] dump_stack+0x197/0x210 [ 1344.617342][T31833] should_fail.cold+0x5/0xf [ 1344.621864][T31833] ? setup_fault_attr+0x1f0/0x1f0 [ 1344.626903][T31833] ? is_bpf_image_address+0x1da/0x290 [ 1344.632301][T31833] __should_failslab+0xb7/0x100 [ 1344.637164][T31833] should_failslab+0x9/0x14 [ 1344.641679][T31833] kmem_cache_alloc+0x47/0x710 [ 1344.646477][T31833] ? arch_stack_walk+0x97/0xf0 [ 1344.651271][T31833] xas_alloc+0x346/0x460 [ 1344.655533][T31833] xas_create+0x5b2/0x1060 [ 1344.659975][T31833] ? __lock_acquire+0x1af3/0x6320 06:56:38 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x4000, &(0x7f0000000480)={[{@acl='acl'}]}) [ 1344.665031][T31833] xas_store+0x9a/0x1a00 [ 1344.669288][T31833] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1344.675022][T31833] ? xas_find_marked+0x365/0xf00 [ 1344.679976][T31833] ? mark_lock+0xc2/0x1220 [ 1344.684436][T31833] __xa_alloc+0x243/0x3b0 [ 1344.688792][T31833] ? xas_find_marked+0xf00/0xf00 [ 1344.693759][T31833] ? trace_hardirqs_on+0x67/0x240 [ 1344.698812][T31833] ? mark_held_locks+0xf0/0xf0 [ 1344.703598][T31833] __xa_alloc_cyclic+0x119/0x390 [ 1344.708554][T31833] ? __xa_alloc+0x3b0/0x3b0 [ 1344.713165][T31833] rdma_restrack_add+0x193/0x3f0 06:56:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xaa010000, 0xd, &(0x7f0000000000)=""/208) 06:56:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x541}], 0x1}, 0x0) [ 1344.718127][T31833] rdma_restrack_uadd+0x12b/0x160 [ 1344.723179][T31833] _cma_attach_to_dev+0x2b4/0x370 [ 1344.728231][T31833] cma_listen_on_dev+0x252/0x730 [ 1344.733197][T31833] rdma_listen+0x772/0x970 [ 1344.737622][T31833] ? _raw_spin_unlock+0x28/0x40 [ 1344.742491][T31833] ucma_listen+0x14d/0x1c0 [ 1344.746919][T31833] ? ucma_notify+0x190/0x190 [ 1344.751533][T31833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1344.757786][T31833] ? _copy_from_user+0x12c/0x1a0 [ 1344.762745][T31833] ucma_write+0x2d7/0x3c0 [ 1344.767087][T31833] ? ucma_notify+0x190/0x190 [ 1344.771694][T31833] ? ucma_open+0x290/0x290 [ 1344.776125][T31833] ? apparmor_file_permission+0x27/0x30 [ 1344.781681][T31833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1344.787931][T31833] ? security_file_permission+0x8f/0x380 [ 1344.793568][T31833] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1344.798890][T31833] __vfs_write+0x8a/0x110 [ 1344.803229][T31833] ? ucma_open+0x290/0x290 [ 1344.807660][T31833] vfs_write+0x268/0x5d0 [ 1344.811917][T31833] ksys_write+0x220/0x290 [ 1344.816257][T31833] ? __ia32_sys_read+0xb0/0xb0 [ 1344.821033][T31833] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1344.826500][T31833] ? do_syscall_64+0x26/0x790 [ 1344.831186][T31833] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1344.837259][T31833] ? do_syscall_64+0x26/0x790 [ 1344.841953][T31833] __x64_sys_write+0x73/0xb0 [ 1344.846577][T31833] do_syscall_64+0xfa/0x790 [ 1344.851094][T31833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1344.857010][T31833] RIP: 0033:0x45c479 [ 1344.860922][T31833] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1344.880527][T31833] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1344.888943][T31833] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1344.896921][T31833] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1344.904893][T31833] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1344.912872][T31833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1344.920849][T31833] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000005 [ 1344.950622][T31848] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xab000000, 0xd, &(0x7f0000000000)=""/208) [ 1344.964998][T31840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:56:38 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xab010000, 0xd, &(0x7f0000000000)=""/208) [ 1345.056163][T31833] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1345.089775][T31848] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) exit_group(0x101) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x4e0000, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) 06:56:38 executing program 3 (fault-call:6 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x551}], 0x1}, 0x0) 06:56:39 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@acl='acl'}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x442100, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000600)={0xff, &(0x7f00000005c0)}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r8, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r9, 0x4040aea4, &(0x7f00000002c0)={0x0, 0x2, 0x171, 0x9, 0x8}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv6_getrule={0x1c, 0x22, 0x10, 0x70bd2b, 0x25dfdbfb, {0xa, 0x20, 0x20, 0x3, 0x1f, 0x0, 0x0, 0x8, 0x12}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100009e000000000000021b0000", @ANYRES32=r3, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0xe, 0x4) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f00000004c0)={{0x3, 0x0, @descriptor="af93876fcb41235c"}, 0xa1, [], "8e91353ad7a8dd36339f3ea703fb9ff1d1b1ebc65cb0c495665190ea12b2e53a98d56b2887e0640782009ebf23a05cd53ae807b2dd73bab2cc926477ebc83ebfb13080a803a49994c803ea1edd14391a35b8b0e16970102f9bb281e3744a1bd5fa9a367e2949349843a23b511d234aafd54df492bca8accc4b74db699b873e6c67f4e1c36a5382b2916da7fd135152f77c26e3e3119e441cfcdc9d97d9fccb1e72"}) 06:56:39 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xac000000, 0xd, &(0x7f0000000000)=""/208) 06:56:39 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) [ 1345.405436][T31880] FAULT_INJECTION: forcing a failure. [ 1345.405436][T31880] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.418323][T31880] CPU: 1 PID: 31880 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1345.428220][T31880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.438462][T31880] Call Trace: [ 1345.441823][T31880] dump_stack+0x197/0x210 [ 1345.446186][T31880] should_fail.cold+0x5/0xf [ 1345.450706][T31880] ? setup_fault_attr+0x1f0/0x1f0 [ 1345.455750][T31880] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1345.461314][T31880] __should_failslab+0xb7/0x100 [ 1345.466179][T31880] should_failslab+0x9/0x14 [ 1345.470701][T31880] kmem_cache_alloc+0x47/0x710 [ 1345.475502][T31880] xas_alloc+0x346/0x460 [ 1345.479760][T31880] xas_create+0x2cd/0x1060 [ 1345.484207][T31880] xas_store+0x9a/0x1a00 [ 1345.488465][T31880] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1345.494194][T31880] ? xas_find_marked+0x365/0xf00 [ 1345.499150][T31880] ? mark_lock+0xc2/0x1220 [ 1345.503588][T31880] __xa_alloc+0x243/0x3b0 [ 1345.507953][T31880] ? xas_find_marked+0xf00/0xf00 [ 1345.512901][T31880] ? trace_hardirqs_on+0x67/0x240 [ 1345.517963][T31880] ? mark_held_locks+0xf0/0xf0 [ 1345.522749][T31880] __xa_alloc_cyclic+0x119/0x390 [ 1345.527704][T31880] ? __xa_alloc+0x3b0/0x3b0 [ 1345.529017][T31883] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" [ 1345.532235][T31880] rdma_restrack_add+0x193/0x3f0 [ 1345.532257][T31880] rdma_restrack_uadd+0x12b/0x160 [ 1345.532282][T31880] _cma_attach_to_dev+0x2b4/0x370 [ 1345.556874][T31880] cma_listen_on_dev+0x252/0x730 [ 1345.561856][T31880] rdma_listen+0x772/0x970 [ 1345.566283][T31880] ? _raw_spin_unlock+0x28/0x40 [ 1345.571154][T31880] ucma_listen+0x14d/0x1c0 [ 1345.575579][T31880] ? ucma_notify+0x190/0x190 [ 1345.580187][T31880] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1345.586437][T31880] ? _copy_from_user+0x12c/0x1a0 [ 1345.591394][T31880] ucma_write+0x2d7/0x3c0 [ 1345.595736][T31880] ? ucma_notify+0x190/0x190 [ 1345.600339][T31880] ? ucma_open+0x290/0x290 [ 1345.604767][T31880] ? apparmor_file_permission+0x27/0x30 [ 1345.610326][T31880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1345.616577][T31880] ? security_file_permission+0x8f/0x380 [ 1345.622220][T31880] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1345.627519][T31880] __vfs_write+0x8a/0x110 [ 1345.631856][T31880] ? ucma_open+0x290/0x290 [ 1345.636308][T31880] vfs_write+0x268/0x5d0 [ 1345.640571][T31880] ksys_write+0x220/0x290 [ 1345.644915][T31880] ? __ia32_sys_read+0xb0/0xb0 [ 1345.649692][T31880] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1345.655164][T31880] ? do_syscall_64+0x26/0x790 [ 1345.659849][T31880] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1345.665940][T31880] ? do_syscall_64+0x26/0x790 [ 1345.670631][T31880] __x64_sys_write+0x73/0xb0 [ 1345.675230][T31880] do_syscall_64+0xfa/0x790 [ 1345.679748][T31880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1345.685662][T31880] RIP: 0033:0x45c479 [ 1345.689585][T31880] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1345.709193][T31880] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1345.717607][T31880] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1345.725599][T31880] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1345.733575][T31880] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1345.741552][T31880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1345.749528][T31880] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000006 [ 1345.831264][T31880] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -19 [ 1345.892893][T31883] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "" 06:56:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xac010000, 0xd, &(0x7f0000000000)=""/208) 06:56:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x561}], 0x1}, 0x0) 06:56:41 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @bt={0x0, 0x1000000}}) 06:56:41 executing program 3 (fault-call:6 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:41 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="61636c5b7ec7423b1b6c4b43d52c00091d4b1ae8e5b21db052809aa910b051e2044a03cc136e227f6a435c7ee99737e1a497e43695ca319d4d62efa471ffd0e257dad628f3b1e388c506f67c8e6248caf0aa5befc53f6c545b6aed7101235a7c05eb10bd6c7427cfddd84314dda1a7fa5bdb14849d7283f9fbbfc4a549aa488826a2686dfec82dd351ecb078826ed37f36f4f9500d14a721db4ce36222c88f201c4b60c703e06a6d141d1812c1b7a557270c4f0f5aca2edd018dccf8c9227f4bfc0ad87ece22c379b04f9a8af5fa9d5dd2a69b93d2598a3c2a4a5a7944fcb8d4c3fcf1c32db4ddcdd0257a964ae2"]) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 06:56:41 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$unix(r2, &(0x7f0000000380)=""/132, 0x84, 0x2142, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x60, 0x4, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) r9 = dup(r3) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r9, 0x800442d3, &(0x7f0000000040)={0x7, 0x9, 0x1ce, @remote, 'caif0\x00'}) tkill(r0, 0x1000000000016) 06:56:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xad000000, 0xd, &(0x7f0000000000)=""/208) [ 1347.655035][T31919] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1347.655035][T31919] [ 1347.670464][T31917] FAULT_INJECTION: forcing a failure. [ 1347.670464][T31917] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.744360][T31917] CPU: 0 PID: 31917 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1347.754413][T31917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.764472][T31917] Call Trace: [ 1347.767777][T31917] dump_stack+0x197/0x210 [ 1347.772136][T31917] should_fail.cold+0x5/0xf [ 1347.776680][T31917] ? setup_fault_attr+0x1f0/0x1f0 [ 1347.781729][T31917] ? ___might_sleep+0x163/0x2c0 [ 1347.786600][T31917] __should_failslab+0xb7/0x100 [ 1347.791465][T31917] should_failslab+0x9/0x14 [ 1347.795981][T31917] kmem_cache_alloc_trace+0x2d3/0x790 [ 1347.801362][T31917] ? trace_hardirqs_on+0x67/0x240 [ 1347.806409][T31917] ? cma_ib_req_handler+0x5580/0x5580 [ 1347.811796][T31917] iw_create_cm_id+0x57/0x3a0 [ 1347.816497][T31917] rdma_listen+0x48c/0x970 [ 1347.820928][T31917] cma_listen_on_dev+0x58b/0x730 [ 1347.825889][T31917] rdma_listen+0x772/0x970 [ 1347.830318][T31917] ? _raw_spin_unlock+0x28/0x40 [ 1347.835187][T31917] ucma_listen+0x14d/0x1c0 [ 1347.839615][T31917] ? ucma_notify+0x190/0x190 [ 1347.844221][T31917] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1347.850475][T31917] ? _copy_from_user+0x12c/0x1a0 [ 1347.855441][T31917] ucma_write+0x2d7/0x3c0 [ 1347.859787][T31917] ? ucma_notify+0x190/0x190 [ 1347.864389][T31917] ? ucma_open+0x290/0x290 [ 1347.868820][T31917] ? apparmor_file_permission+0x27/0x30 [ 1347.874379][T31917] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1347.880635][T31917] ? security_file_permission+0x8f/0x380 [ 1347.886295][T31917] ? rcu_read_lock_bh_held+0xb0/0xb0 06:56:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xad010000, 0xd, &(0x7f0000000000)=""/208) [ 1347.891598][T31917] __vfs_write+0x8a/0x110 [ 1347.895935][T31917] ? ucma_open+0x290/0x290 [ 1347.900367][T31917] vfs_write+0x268/0x5d0 [ 1347.904627][T31917] ksys_write+0x220/0x290 [ 1347.908970][T31917] ? __ia32_sys_read+0xb0/0xb0 [ 1347.913741][T31917] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1347.919212][T31917] ? do_syscall_64+0x26/0x790 [ 1347.923894][T31917] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.929970][T31917] ? do_syscall_64+0x26/0x790 [ 1347.934665][T31917] __x64_sys_write+0x73/0xb0 [ 1347.939381][T31917] do_syscall_64+0xfa/0x790 06:56:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x571}], 0x1}, 0x0) 06:56:41 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x4202, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x76, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r4, 0xfffffffb}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x76, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r7, 0x1000}, 0x8) r8 = accept(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) r9 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r9, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r15, @ANYBLOB="08000200e0000000e196b00180559fca03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000011000100000000000000000002000000", @ANYRES32=r15, @ANYBLOB="48000200ac1e0001a1672abb915b8c309f08c7107d455038b773c0ffa61c037f02e48894f9449f81747308c36877f63fe1874dbcdc5bcee313ce7647de0ae71cc56f74390df1748c22146196c1418602c70e2e99ce2180d40da18aaa115869512582a81dd02825ec145ade1f7884d4837485eb1cc45b40f37e"], 0x20}, 0x1, 0xf0ffffff}, 0x0) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100001e000000000000021b0000", @ANYRES32=r19, @ANYBLOB="08000200e0000000e196b00180559fce03b07dbae92af05e38efdc58cdea1320d167f2013f88a2d4b741ceb490f1131c9140676cf1e451ced06a4fd1ed6379d03933d3fd0cce905156d0f9cd70260b0166c4a0ed157da89c1dadf63f68ce35fdc5173e23304d6f349343424b89730eea7ef72fd5faa842ff6a95158dbf621c99e716679397c7727bdc5596249377923049f4b146d7fe65e4f475c6e87a"], 0x20}, 0x1, 0xf0ffffff}, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r22}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000640)={0xa10000, 0x5, 0x235d, r20, 0x0, &(0x7f0000000600)={0x98091f, 0x5, [], @ptr=0xd4}}) ppoll(&(0x7f00000003c0)=[{r10, 0x1000}, {r23, 0x1004}, {r16, 0x384}, {r11, 0x40}, {r10, 0x3044}], 0x5, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)={[0x9]}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xba}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000180)={r24, 0x6}, 0xc) r25 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r25, 0xc0905664, &(0x7f0000000200)) [ 1347.943906][T31917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1347.949805][T31917] RIP: 0033:0x45c479 [ 1347.953711][T31917] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1347.973321][T31917] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1347.981736][T31917] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 06:56:41 executing program 5: r0 = gettid() r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r2, r1, r1}, &(0x7f0000000680)=""/268, 0x10c, &(0x7f0000000300)={&(0x7f0000000d00)={'rmd128-generic\x00'}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, r4) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) r6 = semget$private(0x0, 0x20000000102, 0x0) semop(r6, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r6, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$GETVAL(r6, 0x1, 0xc, &(0x7f0000000880)=""/203) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) ioctl$SOUND_MIXER_READ_CAPS(r5, 0x80044dfc, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340)="bbab8d128278d2318f98d8d6e91f8474fad6702725bdc06c1b5fcc8c11c70353dc1c6d0f19b4fa9aae88caf961cf42ea24902edc6fa99211720620cc31895b108df4659f27597299b740260ff1d89a4d8f58fd9df636e7b4c931097d9dcbec447f47548447e305fda9c1808f69b7aaf05e54a50a78c036d8c6b9236f7e94ed14bf3f91225504e5b5aaaae391da", &(0x7f0000000680)="03628c90433eb99dad31c2aa316c77f3948f001b1bac825fbbe703b564f05f079b0ee48b293143426af28e0b5bd0ced7e22a30538c3ee4f52ce55a38b7482be7c8bc5431b0addd40c42c86ba5bb5fa8a1e7674d560a2bbaa50aa9b954256cb0a64664ad79c1ee8600dc37a0b822f22d5bd8a0f44d67fd2bb0bcfd12503ca7df28a09bf78c85fb267af63c9f45d62a4839dc78e6abfaecd5e9d9240c95eced3e6beaefb18f96d251bfc5b6837fd1d3de0ebd0206a3494ad2ac09c5cf7d2e3fe0e33f262f6f1ccafa6b21ca1a212c356172100c5842e74e305b12df6ae403f1a2589aa9fbf9f28c4d881c0000000000000000000"}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0xbc882) socket$inet_udplite(0x2, 0x2, 0x88) sendto(r5, &(0x7f0000000240)="32e5a12af85b1428dfe91e2f35711ae7226b74c8b107c128671f186adf0e14d8d6375f5b530d93d09d506a52e8a34a2e73a8fa271caff7c9bb698a9bb7cd1fbc04575165d27cfbe6df2733ac5f94cd174e9a169d0ca69e712b7a01c3cae5e7b39854f661e89c4baa578703b4cc3afea7c5813bc9e441aeb4faba5808fbbbb52c72c60447dcdfef4f65a50e17544ed0e3c38551261925fef872d30a757d0dc18c8be916a892fdd3a1c269d5c42a1ce0c769ba6e9d48fb421a2753109a8f1568653f", 0xc1, 0x40000, &(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x80) readv(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1347.989711][T31917] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1347.997688][T31917] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1348.005682][T31917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1348.013657][T31917] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000007 [ 1348.068749][T31917] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12 06:56:41 executing program 3 (fault-call:6 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) [ 1348.141726][T31919] REISERFS warning (device loop4): super-6505 reiserfs_getopt: head of option "acl" is only correct [ 1348.141726][T31919] 06:56:41 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xae000000, 0xd, &(0x7f0000000000)=""/208) 06:56:42 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000040)={[{@errors_continue='errors=continue'}]}) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./file0\x00') [ 1348.343577][T31957] FAULT_INJECTION: forcing a failure. [ 1348.343577][T31957] name failslab, interval 1, probability 0, space 0, times 0 06:56:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xae010000, 0xd, &(0x7f0000000000)=""/208) [ 1348.396143][T31957] CPU: 0 PID: 31957 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1348.406075][T31957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.416155][T31957] Call Trace: [ 1348.419462][T31957] dump_stack+0x197/0x210 [ 1348.423819][T31957] should_fail.cold+0x5/0xf [ 1348.428348][T31957] ? setup_fault_attr+0x1f0/0x1f0 [ 1348.433396][T31957] ? ___might_sleep+0x163/0x2c0 [ 1348.438268][T31957] __should_failslab+0xb7/0x100 [ 1348.443133][T31957] should_failslab+0x9/0x14 [ 1348.447645][T31957] kmem_cache_alloc_trace+0x2d3/0x790 [ 1348.453023][T31957] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1348.458851][T31957] alloc_work_entries+0xaf/0x240 [ 1348.463801][T31957] iw_cm_listen+0x47/0x1f0 [ 1348.468242][T31957] rdma_listen+0x613/0x970 [ 1348.472681][T31957] cma_listen_on_dev+0x58b/0x730 [ 1348.477637][T31957] rdma_listen+0x772/0x970 [ 1348.482061][T31957] ? _raw_spin_unlock+0x28/0x40 [ 1348.486925][T31957] ucma_listen+0x14d/0x1c0 [ 1348.491361][T31957] ? ucma_notify+0x190/0x190 [ 1348.495974][T31957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1348.502225][T31957] ? _copy_from_user+0x12c/0x1a0 [ 1348.507179][T31957] ucma_write+0x2d7/0x3c0 [ 1348.511514][T31957] ? ucma_notify+0x190/0x190 [ 1348.516108][T31957] ? ucma_open+0x290/0x290 [ 1348.520577][T31957] ? apparmor_file_permission+0x27/0x30 [ 1348.526136][T31957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1348.532392][T31957] ? security_file_permission+0x8f/0x380 [ 1348.538042][T31957] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1348.543346][T31957] __vfs_write+0x8a/0x110 [ 1348.547692][T31957] ? ucma_open+0x290/0x290 [ 1348.552119][T31957] vfs_write+0x268/0x5d0 [ 1348.556381][T31957] ksys_write+0x220/0x290 [ 1348.560725][T31957] ? __ia32_sys_read+0xb0/0xb0 [ 1348.565496][T31957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1348.570969][T31957] ? do_syscall_64+0x26/0x790 [ 1348.575651][T31957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.581726][T31957] ? do_syscall_64+0x26/0x790 [ 1348.586424][T31957] __x64_sys_write+0x73/0xb0 [ 1348.591028][T31957] do_syscall_64+0xfa/0x790 [ 1348.595558][T31957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1348.601454][T31957] RIP: 0033:0x45c479 [ 1348.605355][T31957] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1348.624959][T31957] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1348.633373][T31957] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 06:56:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xaf000000, 0xd, &(0x7f0000000000)=""/208) 06:56:42 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40882) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000240)) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000e425096610ff8ecaccd8808310ef00000000000000000000000000000000009fd643cd510000005a33891d7bba3d437042d84bf78f95f96790895eac3dfeb7586d250cd00df86f9c5887e1b981e3660f30ada58c0bff69a39b26dd8f857c2ae5cbce6fa1dba87da5a57d4816d209234c3fe13a3d1166f9abdf9427b3326a98111e71d1033debdbe2c1e2c5d20542c379d57a32"], &(0x7f0000000300)=0x24) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x0, 0x4, 0x7, 0x8, 0x0, 0x2, 0x5, 0x10000, 0x1}, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 1348.641347][T31957] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1348.649319][T31957] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1348.657293][T31957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1348.665277][T31957] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000008 06:56:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000180)="ea", 0x1}], 0x1, &(0x7f0000002a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x581}], 0x1}, 0x0) [ 1348.693161][T31957] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12 06:56:42 executing program 3 (fault-call:6 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 06:56:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xaf010000, 0xd, &(0x7f0000000000)=""/208) [ 1348.722629][T31974] REISERFS warning (device loop4): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1348.722629][T31974] 06:56:42 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(0xffffffffffffffff, r2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000040)=0x3f, &(0x7f0000000080)=0x2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x6) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) write$cgroup_pid(r3, &(0x7f0000000080)=r5, 0x12) tkill(r0, 0x1000000000016) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000240)={'broute\x00'}, &(0x7f0000000140)=0x78) 06:56:42 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x9) [ 1348.953131][T31999] FAULT_INJECTION: forcing a failure. [ 1348.953131][T31999] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.975795][T31999] CPU: 1 PID: 31999 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1348.985705][T31999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.995763][T31999] Call Trace: [ 1348.999077][T31999] dump_stack+0x197/0x210 [ 1349.003441][T31999] should_fail.cold+0x5/0xf [ 1349.007970][T31999] ? setup_fault_attr+0x1f0/0x1f0 [ 1349.013025][T31999] ? ___might_sleep+0x163/0x2c0 [ 1349.017898][T31999] __should_failslab+0xb7/0x100 [ 1349.022760][T31999] should_failslab+0x9/0x14 [ 1349.027280][T31999] kmem_cache_alloc_trace+0x2d3/0x790 [ 1349.032661][T31999] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1349.038482][T31999] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1349.044735][T31999] ? put_work+0x126/0x180 [ 1349.049087][T31999] alloc_work_entries+0xaf/0x240 [ 1349.054046][T31999] iw_cm_listen+0x47/0x1f0 [ 1349.058476][T31999] rdma_listen+0x613/0x970 [ 1349.062911][T31999] cma_listen_on_dev+0x58b/0x730 [ 1349.067878][T31999] rdma_listen+0x772/0x970 [ 1349.072309][T31999] ? _raw_spin_unlock+0x28/0x40 [ 1349.077180][T31999] ucma_listen+0x14d/0x1c0 [ 1349.081608][T31999] ? ucma_notify+0x190/0x190 [ 1349.086236][T31999] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1349.092507][T31999] ? _copy_from_user+0x12c/0x1a0 [ 1349.097462][T31999] ucma_write+0x2d7/0x3c0 [ 1349.101808][T31999] ? ucma_notify+0x190/0x190 [ 1349.106413][T31999] ? ucma_open+0x290/0x290 [ 1349.110840][T31999] ? apparmor_file_permission+0x27/0x30 [ 1349.116399][T31999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.122653][T31999] ? security_file_permission+0x8f/0x380 [ 1349.128292][T31999] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1349.133595][T31999] __vfs_write+0x8a/0x110 [ 1349.137943][T31999] ? ucma_open+0x290/0x290 [ 1349.142373][T31999] vfs_write+0x268/0x5d0 [ 1349.146636][T31999] ksys_write+0x220/0x290 [ 1349.150986][T31999] ? __ia32_sys_read+0xb0/0xb0 [ 1349.155764][T31999] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1349.161232][T31999] ? do_syscall_64+0x26/0x790 [ 1349.165928][T31999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.172000][T31999] ? do_syscall_64+0x26/0x790 [ 1349.176719][T31999] __x64_sys_write+0x73/0xb0 [ 1349.181325][T31999] do_syscall_64+0xfa/0x790 [ 1349.185844][T31999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.191739][T31999] RIP: 0033:0x45c479 [ 1349.195643][T31999] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1349.215253][T31999] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1349.223671][T31999] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1349.231650][T31999] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1349.239625][T31999] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 06:56:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xb0000000, 0xd, &(0x7f0000000000)=""/208) 06:56:42 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_create(0x3, &(0x7f0000000080)={0x0, 0xc, 0x1}, &(0x7f0000000140)=0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$peeksig(0x4209, r2, &(0x7f00000000c0)={0x10000, 0x0, 0x2}, &(0x7f0000000240)=[{}, {}]) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) gettid() r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)) r5 = syz_open_dev$sndtimer(&(0x7f0000000640)='/dev/snd/timer\x00', 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/75, 0x4b}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x100000032, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 06:56:42 executing program 0: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, 0x0, 0x0) semctl$GETALL(r0, 0xb0010000, 0xd, &(0x7f0000000000)=""/208) [ 1349.247603][T31999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1349.255583][T31999] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000009 [ 1349.306402][T31974] REISERFS warning (device loop4): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1349.306402][T31974] [ 1349.315125][T31999] ================================================================== [ 1349.328144][T31999] BUG: KASAN: use-after-free in iwcm_deref_id+0x1d3/0x1e0 [ 1349.335261][T31999] Read of size 8 at addr ffff8880a3ec0d78 by task syz-executor.3/31999 [ 1349.343493][T31999] [ 1349.345833][T31999] CPU: 1 PID: 31999 Comm: syz-executor.3 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 1349.355865][T31999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.365931][T31999] Call Trace: [ 1349.369237][T31999] dump_stack+0x197/0x210 [ 1349.373580][T31999] ? iwcm_deref_id+0x1d3/0x1e0 [ 1349.378367][T31999] print_address_description.constprop.0.cold+0xd4/0x30b [ 1349.385392][T31999] ? iwcm_deref_id+0x1d3/0x1e0 [ 1349.390376][T31999] ? iwcm_deref_id+0x1d3/0x1e0 [ 1349.395184][T31999] __kasan_report.cold+0x1b/0x32 [ 1349.400159][T31999] ? destroy_cm_id+0x160/0x540 [ 1349.404948][T31999] ? iwcm_deref_id+0x1d3/0x1e0 [ 1349.409748][T31999] kasan_report+0x12/0x20 [ 1349.414106][T31999] __asan_report_load8_noabort+0x14/0x20 [ 1349.419792][T31999] iwcm_deref_id+0x1d3/0x1e0 [ 1349.424410][T31999] destroy_cm_id+0x27c/0x540 [ 1349.429022][T31999] ? rem_ref+0x20/0x20 [ 1349.433123][T31999] ? alloc_work_entries+0x12a/0x240 [ 1349.438375][T31999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.444647][T31999] iw_destroy_cm_id+0x16/0x20 [ 1349.449340][T31999] rdma_listen+0x656/0x970 [ 1349.453813][T31999] cma_listen_on_dev+0x58b/0x730 [ 1349.458835][T31999] rdma_listen+0x772/0x970 [ 1349.463268][T31999] ? _raw_spin_unlock+0x28/0x40 [ 1349.468176][T31999] ucma_listen+0x14d/0x1c0 [ 1349.472618][T31999] ? ucma_notify+0x190/0x190 [ 1349.477240][T31999] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1349.483494][T31999] ? _copy_from_user+0x12c/0x1a0 [ 1349.488446][T31999] ucma_write+0x2d7/0x3c0 [ 1349.492787][T31999] ? ucma_notify+0x190/0x190 [ 1349.497386][T31999] ? ucma_open+0x290/0x290 [ 1349.501810][T31999] ? apparmor_file_permission+0x27/0x30 [ 1349.507367][T31999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1349.513615][T31999] ? security_file_permission+0x8f/0x380 [ 1349.519257][T31999] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1349.524560][T31999] __vfs_write+0x8a/0x110 [ 1349.528898][T31999] ? ucma_open+0x290/0x290 [ 1349.533341][T31999] vfs_write+0x268/0x5d0 [ 1349.537606][T31999] ksys_write+0x220/0x290 [ 1349.541956][T31999] ? __ia32_sys_read+0xb0/0xb0 [ 1349.546752][T31999] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1349.552227][T31999] ? do_syscall_64+0x26/0x790 [ 1349.556910][T31999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.562979][T31999] ? do_syscall_64+0x26/0x790 [ 1349.567645][T31999] __x64_sys_write+0x73/0xb0 [ 1349.572220][T31999] do_syscall_64+0xfa/0x790 [ 1349.576708][T31999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.582579][T31999] RIP: 0033:0x45c479 [ 1349.586464][T31999] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1349.606094][T31999] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1349.614487][T31999] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1349.622440][T31999] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1349.630393][T31999] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1349.638349][T31999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1349.646352][T31999] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000009 [ 1349.654323][T31999] [ 1349.656639][T31999] Allocated by task 31999: [ 1349.661041][T31999] save_stack+0x23/0x90 [ 1349.665178][T31999] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1349.670788][T31999] kasan_kmalloc+0x9/0x10 [ 1349.675099][T31999] kmem_cache_alloc_trace+0x158/0x790 [ 1349.680455][T31999] alloc_work_entries+0xaf/0x240 [ 1349.685385][T31999] iw_cm_listen+0x47/0x1f0 [ 1349.689779][T31999] rdma_listen+0x613/0x970 [ 1349.694174][T31999] cma_listen_on_dev+0x58b/0x730 [ 1349.699091][T31999] rdma_listen+0x772/0x970 [ 1349.703491][T31999] ucma_listen+0x14d/0x1c0 [ 1349.707924][T31999] ucma_write+0x2d7/0x3c0 [ 1349.712243][T31999] __vfs_write+0x8a/0x110 [ 1349.716597][T31999] vfs_write+0x268/0x5d0 [ 1349.720834][T31999] ksys_write+0x220/0x290 [ 1349.725143][T31999] __x64_sys_write+0x73/0xb0 [ 1349.729721][T31999] do_syscall_64+0xfa/0x790 [ 1349.734211][T31999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.740079][T31999] [ 1349.742387][T31999] Freed by task 31999: [ 1349.746441][T31999] save_stack+0x23/0x90 [ 1349.750580][T31999] __kasan_slab_free+0x102/0x150 [ 1349.755506][T31999] kasan_slab_free+0xe/0x10 [ 1349.759995][T31999] kfree+0x10a/0x2c0 [ 1349.763872][T31999] alloc_work_entries+0x1e6/0x240 [ 1349.768881][T31999] iw_cm_listen+0x47/0x1f0 [ 1349.773297][T31999] rdma_listen+0x613/0x970 [ 1349.777728][T31999] cma_listen_on_dev+0x58b/0x730 [ 1349.782658][T31999] rdma_listen+0x772/0x970 [ 1349.787123][T31999] ucma_listen+0x14d/0x1c0 [ 1349.791543][T31999] ucma_write+0x2d7/0x3c0 [ 1349.795856][T31999] __vfs_write+0x8a/0x110 [ 1349.800171][T31999] vfs_write+0x268/0x5d0 [ 1349.804465][T31999] ksys_write+0x220/0x290 [ 1349.808792][T31999] __x64_sys_write+0x73/0xb0 [ 1349.813367][T31999] do_syscall_64+0xfa/0x790 [ 1349.817853][T31999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1349.823725][T31999] [ 1349.826062][T31999] The buggy address belongs to the object at ffff8880a3ec0c00 [ 1349.826062][T31999] which belongs to the cache kmalloc-512 of size 512 [ 1349.840112][T31999] The buggy address is located 376 bytes inside of [ 1349.840112][T31999] 512-byte region [ffff8880a3ec0c00, ffff8880a3ec0e00) [ 1349.853368][T31999] The buggy address belongs to the page: [ 1349.859006][T31999] page:ffffea00028fb000 refcount:1 mapcount:0 mapping:0000000033fa6973 index:0x0 [ 1349.868097][T31999] flags: 0xfffe0000000200(slab) [ 1349.872932][T31999] raw: 00fffe0000000200 ffffea00024fbe08 ffffea00024e6a08 ffff8880aa400a80 [ 1349.881498][T31999] raw: 0000000000000000 ffff8880a3ec0000 0000000100000004 0000000000000000 [ 1349.890059][T31999] page dumped because: kasan: bad access detected [ 1349.896447][T31999] [ 1349.898764][T31999] Memory state around the buggy address: [ 1349.904376][T31999] ffff8880a3ec0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.912422][T31999] ffff8880a3ec0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.920478][T31999] >ffff8880a3ec0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.928545][T31999] ^ [ 1349.936530][T31999] ffff8880a3ec0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1349.944602][T31999] ffff8880a3ec0e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1349.952662][T31999] ================================================================== [ 1349.960711][T31999] Disabling lock debugging due to kernel taint [ 1349.973938][T31999] Kernel panic - not syncing: panic_on_warn set ... [ 1349.980648][T31999] CPU: 1 PID: 31999 Comm: syz-executor.3 Tainted: G B 5.6.0-rc3-next-20200225-syzkaller #0 [ 1349.991924][T31999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.002004][T31999] Call Trace: [ 1350.005307][T31999] dump_stack+0x197/0x210 [ 1350.009658][T31999] panic+0x2e3/0x75c [ 1350.013564][T31999] ? add_taint.cold+0x16/0x16 [ 1350.018269][T31999] ? iwcm_deref_id+0x1d3/0x1e0 [ 1350.023033][T31999] ? preempt_schedule+0x4b/0x60 [ 1350.027867][T31999] ? ___preempt_schedule+0x16/0x18 [ 1350.032959][T31999] ? trace_hardirqs_on+0x5e/0x240 [ 1350.037967][T31999] ? iwcm_deref_id+0x1d3/0x1e0 [ 1350.042713][T31999] end_report+0x47/0x4f [ 1350.046848][T31999] ? iwcm_deref_id+0x1d3/0x1e0 [ 1350.051591][T31999] __kasan_report.cold+0xe/0x32 [ 1350.056436][T31999] ? destroy_cm_id+0x160/0x540 [ 1350.061184][T31999] ? iwcm_deref_id+0x1d3/0x1e0 [ 1350.065933][T31999] kasan_report+0x12/0x20 [ 1350.070251][T31999] __asan_report_load8_noabort+0x14/0x20 [ 1350.075893][T31999] iwcm_deref_id+0x1d3/0x1e0 [ 1350.080490][T31999] destroy_cm_id+0x27c/0x540 [ 1350.085081][T31999] ? rem_ref+0x20/0x20 [ 1350.089160][T31999] ? alloc_work_entries+0x12a/0x240 [ 1350.094382][T31999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.100604][T31999] iw_destroy_cm_id+0x16/0x20 [ 1350.105261][T31999] rdma_listen+0x656/0x970 [ 1350.109660][T31999] cma_listen_on_dev+0x58b/0x730 [ 1350.114578][T31999] rdma_listen+0x772/0x970 [ 1350.118973][T31999] ? _raw_spin_unlock+0x28/0x40 [ 1350.123803][T31999] ucma_listen+0x14d/0x1c0 [ 1350.128200][T31999] ? ucma_notify+0x190/0x190 [ 1350.132774][T31999] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1350.138997][T31999] ? _copy_from_user+0x12c/0x1a0 [ 1350.143914][T31999] ucma_write+0x2d7/0x3c0 [ 1350.148222][T31999] ? ucma_notify+0x190/0x190 [ 1350.152789][T31999] ? ucma_open+0x290/0x290 [ 1350.157185][T31999] ? apparmor_file_permission+0x27/0x30 [ 1350.162707][T31999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1350.168924][T31999] ? security_file_permission+0x8f/0x380 [ 1350.174535][T31999] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 1350.179800][T31999] __vfs_write+0x8a/0x110 [ 1350.184107][T31999] ? ucma_open+0x290/0x290 [ 1350.188504][T31999] vfs_write+0x268/0x5d0 [ 1350.192726][T31999] ksys_write+0x220/0x290 [ 1350.197044][T31999] ? __ia32_sys_read+0xb0/0xb0 [ 1350.201800][T31999] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1350.207248][T31999] ? do_syscall_64+0x26/0x790 [ 1350.211948][T31999] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.217999][T31999] ? do_syscall_64+0x26/0x790 [ 1350.222670][T31999] __x64_sys_write+0x73/0xb0 [ 1350.227258][T31999] do_syscall_64+0xfa/0x790 [ 1350.231788][T31999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1350.237658][T31999] RIP: 0033:0x45c479 [ 1350.241533][T31999] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1350.261116][T31999] RSP: 002b:00007f76828e1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1350.269508][T31999] RAX: ffffffffffffffda RBX: 00007f76828e26d4 RCX: 000000000045c479 [ 1350.277545][T31999] RDX: 0000000000000010 RSI: 0000000020000140 RDI: 0000000000000005 [ 1350.285491][T31999] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1350.293437][T31999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1350.301391][T31999] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000009 [ 1350.310511][T31999] Kernel Offset: disabled [ 1350.314830][T31999] Rebooting in 86400 seconds..